Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 86.962671][ T821] cfg80211: failed to load regulatory.db 2026/04/14 03:35:38 parsed 1 programs [ 91.639387][ T5829] cgroup: Unknown subsys name 'net' [ 91.884833][ T5829] cgroup: Unknown subsys name 'cpuset' [ 91.936034][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.944278][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.143390][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 101.268727][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.269683][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.269790][ T5887] bridge_slave_0: entered allmulticast mode [ 101.271508][ T5887] bridge_slave_0: entered promiscuous mode [ 101.291250][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.291371][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.291556][ T5887] bridge_slave_1: entered allmulticast mode [ 101.295500][ T5887] bridge_slave_1: entered promiscuous mode [ 101.358123][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.438197][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.498619][ T5887] team0: Port device team_slave_0 added [ 101.517967][ T5887] team0: Port device team_slave_1 added [ 101.592063][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.592082][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.592110][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.595588][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.595606][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.595634][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.673584][ T5887] hsr_slave_0: entered promiscuous mode [ 101.674979][ T5887] hsr_slave_1: entered promiscuous mode [ 101.901097][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.932972][ T5887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.933757][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.969499][ T5887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.974474][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.007816][ T5887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.008764][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.048586][ T5887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.094155][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.094888][ T5887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.101415][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.101571][ T5887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.186472][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.227766][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.690276][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.723818][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.739660][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.739835][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.747158][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.747287][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.075554][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.139694][ T5887] veth0_vlan: entered promiscuous mode [ 103.156524][ T5887] veth1_vlan: entered promiscuous mode [ 103.199603][ T5887] veth0_macvtap: entered promiscuous mode [ 103.203322][ T5887] veth1_macvtap: entered promiscuous mode [ 103.223799][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.241967][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.262069][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.264746][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.264793][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.264832][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.719606][ T5910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.735636][ T5910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.747070][ T5910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.750035][ T5910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.750837][ T5910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.193119][ T4542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.507134][ T4542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.740329][ T4542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.090877][ T4542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.077070][ T4542] bridge_slave_1: left allmulticast mode [ 106.077162][ T4542] bridge_slave_1: left promiscuous mode [ 106.101114][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.227218][ T4542] bridge_slave_0: left allmulticast mode [ 106.227250][ T4542] bridge_slave_0: left promiscuous mode [ 106.227538][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.086618][ T4542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.166088][ T4542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.187493][ T4542] bond0 (unregistering): Released all slaves [ 107.247735][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 107.545642][ T4542] hsr_slave_0: left promiscuous mode [ 107.586154][ T4542] hsr_slave_1: left promiscuous mode [ 107.587804][ T4542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.587880][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.627524][ T4542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.627553][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.753852][ T4542] veth1_macvtap: left promiscuous mode [ 107.754128][ T4542] veth0_macvtap: left promiscuous mode [ 107.754452][ T4542] veth1_vlan: left promiscuous mode [ 107.754768][ T4542] veth0_vlan: left promiscuous mode [ 108.436121][ T4542] team0 (unregistering): Port device team_slave_1 removed [ 108.477486][ T4542] team0 (unregistering): Port device team_slave_0 removed [ 108.678855][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 108.794369][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.794392][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.909542][ T1532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.909566][ T1532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.720403][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 2026/04/14 03:36:00 executed programs: 0 [ 110.327819][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.358596][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.361458][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.381138][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.384396][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.749417][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4 [ 111.222556][ T5993] chnl_net:caif_netlink_parms(): no params data found [ 111.341319][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.341471][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.341569][ T5993] bridge_slave_0: entered allmulticast mode [ 111.343110][ T5993] bridge_slave_0: entered promiscuous mode [ 111.346805][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.346994][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.347153][ T5993] bridge_slave_1: entered allmulticast mode [ 111.349728][ T5993] bridge_slave_1: entered promiscuous mode [ 111.401073][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.407564][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.446290][ T5993] team0: Port device team_slave_0 added [ 111.448484][ T5993] team0: Port device team_slave_1 added [ 111.487193][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.487211][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.487237][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.489896][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.489912][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.489941][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.602930][ T5993] hsr_slave_0: entered promiscuous mode [ 111.603780][ T5993] hsr_slave_1: entered promiscuous mode [ 112.477337][ T5910] Bluetooth: hci0: command tx timeout [ 114.431819][ T5993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.522753][ T5993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.523717][ T5993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.555563][ T5910] Bluetooth: hci0: command tx timeout [ 114.578371][ T5993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.655746][ T5993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.702603][ T5993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.735891][ T5993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.780382][ T5993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.967902][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.002784][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.021235][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.021383][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.052411][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.052553][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.500385][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.622512][ T5993] veth0_vlan: entered promiscuous mode [ 115.641076][ T5993] veth1_vlan: entered promiscuous mode [ 115.702953][ T5993] veth0_macvtap: entered promiscuous mode [ 115.710774][ T5993] veth1_macvtap: entered promiscuous mode [ 115.790824][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.802730][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.820170][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.824467][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.825234][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.826078][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.266804][ T4542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.266827][ T4542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.394746][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.394770][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/14 03:36:06 executed programs: 2 [ 116.594642][ T820] IPVS: starting estimator thread 0... [ 116.622591][ T6113] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 116.622615][ T6113] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6113, name: syz.0.17 [ 116.622635][ T6113] preempt_count: 1, expected: 0 [ 116.622645][ T6113] RCU nest depth: 2, expected: 2 [ 116.622656][ T6113] 4 locks held by syz.0.17/6113: [ 116.622668][ T6113] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 116.622739][ T6113] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 116.622792][ T6113] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 116.622842][ T6113] #3: ffff88804225e8f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 116.622899][ T6113] Preemption disabled at: [ 116.622905][ T6113] [] hlist_bl_lock+0x18/0x110 [ 116.622936][ T6113] CPU: 0 UID: 0 PID: 6113 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.622959][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 116.622971][ T6113] Call Trace: [ 116.622980][ T6113] [ 116.622989][ T6113] dump_stack_lvl+0xe8/0x150 [ 116.623017][ T6113] __might_resched+0x329/0x480 [ 116.623041][ T6113] ? hlist_bl_lock+0x18/0x110 [ 116.623064][ T6113] rt_spin_lock+0xc2/0x400 [ 116.623090][ T6113] ? __pfx_rt_spin_lock+0x10/0x10 [ 116.623122][ T6113] ? rcu_is_watching+0x15/0xb0 [ 116.623151][ T6113] ? __local_bh_disable_ip+0x3c/0x420 [ 116.623181][ T6113] ip_vs_conn_new+0x14fe/0x25f0 [ 116.623211][ T6113] ? ip_vs_conn_new+0x1491/0x25f0 [ 116.623251][ T6113] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 116.623272][ T6113] ? __local_bh_enable+0x1e1/0x2f0 [ 116.623300][ T6113] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 116.623330][ T6113] ? ip_vs_rr_schedule+0x1e2/0x210 [ 116.623362][ T6113] ? ip_vs_rr_schedule+0x32/0x210 [ 116.623396][ T6113] ip_vs_schedule+0x10fd/0x1d70 [ 116.623441][ T6113] ? __pfx_ip_vs_schedule+0x10/0x10 [ 116.623484][ T6113] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 116.623523][ T6113] ? ip_vs_service_find+0xbc/0x3c0 [ 116.623556][ T6113] udp_conn_schedule+0x391/0x7a0 [ 116.623596][ T6113] ? __pfx_udp_conn_schedule+0x10/0x10 [ 116.623645][ T6113] ip_vs_in_hook+0xc50/0x1bf0 [ 116.623682][ T6113] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 116.623726][ T6113] ? nf_hook+0xa1/0x3a0 [ 116.623758][ T6113] ? nf_hook+0xa1/0x3a0 [ 116.623788][ T6113] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 116.623817][ T6113] nf_hook_slow+0xc5/0x220 [ 116.623842][ T6113] ? __pfx_dst_output+0x10/0x10 [ 116.623871][ T6113] nf_hook+0x22a/0x3a0 [ 116.623905][ T6113] ? nf_hook+0xa1/0x3a0 [ 116.623935][ T6113] ? __pfx_nf_hook+0x10/0x10 [ 116.623968][ T6113] ? __pfx_dst_output+0x10/0x10 [ 116.624006][ T6113] ? __ip_local_out+0x152/0x6a0 [ 116.624041][ T6113] __ip_local_out+0x558/0x6a0 [ 116.624070][ T6113] ? __pfx_dst_output+0x10/0x10 [ 116.624104][ T6113] ip_local_out+0x2a/0x190 [ 116.624138][ T6113] ip_send_skb+0x45/0xc0 [ 116.624161][ T6113] udp_send_skb+0x7e4/0xf70 [ 116.624197][ T6113] udp_sendmsg+0x1937/0x21a0 [ 116.624240][ T6113] ? __pfx_udp_sendmsg+0x10/0x10 [ 116.624305][ T6113] ? __lock_acquire+0x6b5/0x2cf0 [ 116.624343][ T6113] udpv6_sendmsg+0x996/0x25c0 [ 116.624400][ T6113] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 116.624442][ T6113] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 116.624471][ T6113] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 116.624514][ T6113] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 116.624546][ T6113] ? inet_send_prepare+0x1b9/0x270 [ 116.624584][ T6113] ? inet6_sendmsg+0xe4/0x120 [ 116.624617][ T6113] ____sys_sendmsg+0x5aa/0x9c0 [ 116.624645][ T6113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.624677][ T6113] ? import_iovec+0x73/0xa0 [ 116.624707][ T6113] ___sys_sendmsg+0x2a5/0x360 [ 116.624736][ T6113] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.624764][ T6113] ? futex_hash_put+0x4e/0x60 [ 116.624790][ T6113] ? futex_wake+0x4af/0x580 [ 116.624856][ T6113] __x64_sys_sendmsg+0x1c3/0x2a0 [ 116.624883][ T6113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.624917][ T6113] ? do_sock_setsockopt+0x185/0x1b0 [ 116.624960][ T6113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.624984][ T6113] do_syscall_64+0x15f/0xf80 [ 116.625012][ T6113] ? trace_irq_disable+0x3b/0x140 [ 116.625037][ T6113] ? clear_bhb_loop+0x40/0x90 [ 116.625065][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.625088][ T6113] RIP: 0033:0x7f9717edc819 [ 116.625108][ T6113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.625126][ T6113] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.625147][ T6113] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 116.625162][ T6113] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 116.625176][ T6113] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 116.625189][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.625202][ T6113] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 116.625236][ T6113] [ 116.635861][ T5910] Bluetooth: hci0: command tx timeout [ 116.728366][ T6114] IPVS: using max 8 ests per chain, 19200 per kthread [ 117.638054][ T6138] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 117.638076][ T6138] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6138, name: syz.0.27 [ 117.638094][ T6138] preempt_count: 1, expected: 0 [ 117.638114][ T6138] RCU nest depth: 2, expected: 2 [ 117.638125][ T6138] 4 locks held by syz.0.27/6138: [ 117.638137][ T6138] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 117.638207][ T6138] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 117.638260][ T6138] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 117.638311][ T6138] #3: ffff8880422757f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 117.638368][ T6138] Preemption disabled at: [ 117.638374][ T6138] [] hlist_bl_lock+0x18/0x110 [ 117.638409][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.0.27 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 117.638439][ T6138] Tainted: [W]=WARN [ 117.638447][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.638459][ T6138] Call Trace: [ 117.638467][ T6138] [ 117.638476][ T6138] dump_stack_lvl+0xe8/0x150 [ 117.638503][ T6138] __might_resched+0x329/0x480 [ 117.638528][ T6138] ? hlist_bl_lock+0x18/0x110 [ 117.638553][ T6138] rt_spin_lock+0xc2/0x400 [ 117.638579][ T6138] ? __pfx_rt_spin_lock+0x10/0x10 [ 117.638601][ T6138] ? rcu_is_watching+0x15/0xb0 [ 117.638630][ T6138] ? __local_bh_disable_ip+0x3c/0x420 [ 117.638661][ T6138] ip_vs_conn_new+0x14fe/0x25f0 [ 117.638684][ T6138] ? ip_vs_ct_in_get+0x321/0x1350 [ 117.638721][ T6138] ? ip_vs_conn_new+0x1491/0x25f0 [ 117.638763][ T6138] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 117.638793][ T6138] ? ip_vs_ct_in_get+0xab/0x1350 [ 117.638831][ T6138] ? rcu_is_watching+0x15/0xb0 [ 117.638862][ T6138] ? kfree+0x4d/0x6c0 [ 117.638896][ T6138] ip_vs_schedule+0x137a/0x1d70 [ 117.638943][ T6138] ? __pfx_ip_vs_schedule+0x10/0x10 [ 117.638987][ T6138] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 117.639025][ T6138] ? ip_vs_service_find+0xbc/0x3c0 [ 117.639060][ T6138] udp_conn_schedule+0x391/0x7a0 [ 117.639110][ T6138] ? __pfx_udp_conn_schedule+0x10/0x10 [ 117.639160][ T6138] ip_vs_in_hook+0xc50/0x1bf0 [ 117.639197][ T6138] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 117.639241][ T6138] ? nf_hook+0xa1/0x3a0 [ 117.639270][ T6138] ? nf_hook+0xa1/0x3a0 [ 117.639301][ T6138] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 117.639327][ T6138] nf_hook_slow+0xc5/0x220 [ 117.639350][ T6138] ? __pfx_dst_output+0x10/0x10 [ 117.639381][ T6138] nf_hook+0x22a/0x3a0 [ 117.639416][ T6138] ? nf_hook+0xa1/0x3a0 [ 117.639445][ T6138] ? __pfx_nf_hook+0x10/0x10 [ 117.639478][ T6138] ? __pfx_dst_output+0x10/0x10 [ 117.639516][ T6138] ? __ip_local_out+0x152/0x6a0 [ 117.639551][ T6138] __ip_local_out+0x558/0x6a0 [ 117.639580][ T6138] ? __pfx_dst_output+0x10/0x10 [ 117.639614][ T6138] ip_local_out+0x2a/0x190 [ 117.639648][ T6138] ip_send_skb+0x45/0xc0 [ 117.639672][ T6138] udp_send_skb+0x7e4/0xf70 [ 117.639710][ T6138] udp_sendmsg+0x1937/0x21a0 [ 117.639753][ T6138] ? __pfx_udp_sendmsg+0x10/0x10 [ 117.639821][ T6138] ? __lock_acquire+0x6b5/0x2cf0 [ 117.639859][ T6138] udpv6_sendmsg+0x996/0x25c0 [ 117.639909][ T6138] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 117.639949][ T6138] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.639978][ T6138] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 117.640023][ T6138] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 117.640052][ T6138] ? inet_send_prepare+0x1b9/0x270 [ 117.640088][ T6138] ? inet6_sendmsg+0xe4/0x120 [ 117.640131][ T6138] ____sys_sendmsg+0x5aa/0x9c0 [ 117.640159][ T6138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.640192][ T6138] ? import_iovec+0x73/0xa0 [ 117.640221][ T6138] ___sys_sendmsg+0x2a5/0x360 [ 117.640250][ T6138] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.640277][ T6138] ? futex_hash_put+0x4e/0x60 [ 117.640303][ T6138] ? futex_wake+0x4af/0x580 [ 117.640368][ T6138] __x64_sys_sendmsg+0x1c3/0x2a0 [ 117.640394][ T6138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.640426][ T6138] ? do_sock_setsockopt+0x185/0x1b0 [ 117.640469][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.640494][ T6138] do_syscall_64+0x15f/0xf80 [ 117.640518][ T6138] ? trace_irq_disable+0x3b/0x140 [ 117.640541][ T6138] ? clear_bhb_loop+0x40/0x90 [ 117.640568][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.640590][ T6138] RIP: 0033:0x7f9717edc819 [ 117.640611][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.640630][ T6138] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.640652][ T6138] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 117.640668][ T6138] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 117.640682][ T6138] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 117.640695][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.640708][ T6138] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 117.640741][ T6138] [ 118.654037][ T6162] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 118.654052][ T6162] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6162, name: syz.0.39 [ 118.654062][ T6162] preempt_count: 1, expected: 0 [ 118.654068][ T6162] RCU nest depth: 2, expected: 2 [ 118.654083][ T6162] 4 locks held by syz.0.39/6162: [ 118.654090][ T6162] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 118.654133][ T6162] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 118.654180][ T6162] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 118.654219][ T6162] #3: ffff888042274670 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 118.654251][ T6162] Preemption disabled at: [ 118.654254][ T6162] [] hlist_bl_lock+0x18/0x110 [ 118.654274][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.0.39 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 118.654292][ T6162] Tainted: [W]=WARN [ 118.654296][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 118.654304][ T6162] Call Trace: [ 118.654309][ T6162] [ 118.654314][ T6162] dump_stack_lvl+0xe8/0x150 [ 118.654332][ T6162] __might_resched+0x329/0x480 [ 118.654346][ T6162] ? hlist_bl_lock+0x18/0x110 [ 118.654359][ T6162] rt_spin_lock+0xc2/0x400 [ 118.654374][ T6162] ? __pfx_rt_spin_lock+0x10/0x10 [ 118.654386][ T6162] ? rcu_is_watching+0x15/0xb0 [ 118.654403][ T6162] ? __local_bh_disable_ip+0x3c/0x420 [ 118.654419][ T6162] ip_vs_conn_new+0x14fe/0x25f0 [ 118.654431][ T6162] ? ip_vs_ct_in_get+0x321/0x1350 [ 118.654452][ T6162] ? ip_vs_conn_new+0x1491/0x25f0 [ 118.654472][ T6162] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 118.654488][ T6162] ? ip_vs_ct_in_get+0xab/0x1350 [ 118.654509][ T6162] ? rcu_is_watching+0x15/0xb0 [ 118.654526][ T6162] ? kfree+0x4d/0x6c0 [ 118.654544][ T6162] ip_vs_schedule+0x137a/0x1d70 [ 118.654568][ T6162] ? __pfx_ip_vs_schedule+0x10/0x10 [ 118.654590][ T6162] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 118.654610][ T6162] ? ip_vs_service_find+0xbc/0x3c0 [ 118.654629][ T6162] udp_conn_schedule+0x391/0x7a0 [ 118.654651][ T6162] ? __pfx_udp_conn_schedule+0x10/0x10 [ 118.654707][ T6162] ip_vs_in_hook+0xc50/0x1bf0 [ 118.654727][ T6162] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 118.654751][ T6162] ? nf_hook+0xa1/0x3a0 [ 118.654776][ T6162] ? nf_hook+0xa1/0x3a0 [ 118.654794][ T6162] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 118.654809][ T6162] nf_hook_slow+0xc5/0x220 [ 118.654825][ T6162] ? __pfx_dst_output+0x10/0x10 [ 118.654843][ T6162] nf_hook+0x22a/0x3a0 [ 118.654862][ T6162] ? nf_hook+0xa1/0x3a0 [ 118.654879][ T6162] ? __pfx_nf_hook+0x10/0x10 [ 118.654897][ T6162] ? __pfx_dst_output+0x10/0x10 [ 118.654918][ T6162] ? __ip_local_out+0x152/0x6a0 [ 118.654937][ T6162] __ip_local_out+0x558/0x6a0 [ 118.654959][ T6162] ? __pfx_dst_output+0x10/0x10 [ 118.654979][ T6162] ip_local_out+0x2a/0x190 [ 118.654998][ T6162] ip_send_skb+0x45/0xc0 [ 118.655010][ T6162] udp_send_skb+0x7e4/0xf70 [ 118.655030][ T6162] udp_sendmsg+0x1937/0x21a0 [ 118.655052][ T6162] ? __pfx_udp_sendmsg+0x10/0x10 [ 118.655097][ T6162] ? __lock_acquire+0x6b5/0x2cf0 [ 118.655117][ T6162] udpv6_sendmsg+0x996/0x25c0 [ 118.655145][ T6162] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 118.655168][ T6162] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 118.655184][ T6162] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 118.655208][ T6162] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 118.655233][ T6162] ? inet_send_prepare+0x1b9/0x270 [ 118.655269][ T6162] ? inet6_sendmsg+0xe4/0x120 [ 118.655301][ T6162] ____sys_sendmsg+0x5aa/0x9c0 [ 118.655326][ T6162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.655356][ T6162] ? import_iovec+0x73/0xa0 [ 118.655387][ T6162] ___sys_sendmsg+0x2a5/0x360 [ 118.655414][ T6162] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.655441][ T6162] ? futex_hash_put+0x4e/0x60 [ 118.655468][ T6162] ? futex_wake+0x4af/0x580 [ 118.655536][ T6162] __x64_sys_sendmsg+0x1c3/0x2a0 [ 118.655560][ T6162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.655592][ T6162] ? do_sock_setsockopt+0x185/0x1b0 [ 118.655634][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.655660][ T6162] do_syscall_64+0x15f/0xf80 [ 118.655687][ T6162] ? trace_irq_disable+0x3b/0x140 [ 118.655712][ T6162] ? clear_bhb_loop+0x40/0x90 [ 118.655741][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.655762][ T6162] RIP: 0033:0x7f9717edc819 [ 118.655782][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.655800][ T6162] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.655822][ T6162] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 118.655837][ T6162] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 118.655851][ T6162] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 118.655864][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.655877][ T6162] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 118.655912][ T6162] [ 118.718215][ T5910] Bluetooth: hci0: command tx timeout [ 119.661541][ T6189] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 119.661562][ T6189] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6189, name: syz.0.64 [ 119.661579][ T6189] preempt_count: 1, expected: 0 [ 119.661588][ T6189] RCU nest depth: 2, expected: 2 [ 119.661598][ T6189] 4 locks held by syz.0.64/6189: [ 119.661609][ T6189] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 119.661675][ T6189] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 119.661726][ T6189] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 119.661774][ T6189] #3: ffff88803fbd0670 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 119.661830][ T6189] Preemption disabled at: [ 119.661836][ T6189] [] hlist_bl_lock+0x18/0x110 [ 119.661867][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.0.64 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 119.661897][ T6189] Tainted: [W]=WARN [ 119.661903][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.661915][ T6189] Call Trace: [ 119.661923][ T6189] [ 119.661932][ T6189] dump_stack_lvl+0xe8/0x150 [ 119.661959][ T6189] __might_resched+0x329/0x480 [ 119.661984][ T6189] ? hlist_bl_lock+0x18/0x110 [ 119.662007][ T6189] rt_spin_lock+0xc2/0x400 [ 119.662031][ T6189] ? __pfx_rt_spin_lock+0x10/0x10 [ 119.662052][ T6189] ? rcu_is_watching+0x15/0xb0 [ 119.662089][ T6189] ? __local_bh_disable_ip+0x3c/0x420 [ 119.662117][ T6189] ip_vs_conn_new+0x14fe/0x25f0 [ 119.662139][ T6189] ? ip_vs_ct_in_get+0x321/0x1350 [ 119.662174][ T6189] ? ip_vs_conn_new+0x1491/0x25f0 [ 119.662214][ T6189] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 119.662244][ T6189] ? ip_vs_ct_in_get+0xab/0x1350 [ 119.662281][ T6189] ? rcu_is_watching+0x15/0xb0 [ 119.662311][ T6189] ? kfree+0x4d/0x6c0 [ 119.662344][ T6189] ip_vs_schedule+0x137a/0x1d70 [ 119.662390][ T6189] ? __pfx_ip_vs_schedule+0x10/0x10 [ 119.662433][ T6189] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 119.662481][ T6189] ? ip_vs_service_find+0xbc/0x3c0 [ 119.662514][ T6189] udp_conn_schedule+0x391/0x7a0 [ 119.662556][ T6189] ? __pfx_udp_conn_schedule+0x10/0x10 [ 119.662604][ T6189] ip_vs_in_hook+0xc50/0x1bf0 [ 119.662648][ T6189] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 119.662692][ T6189] ? nf_hook+0xa1/0x3a0 [ 119.662723][ T6189] ? nf_hook+0xa1/0x3a0 [ 119.662754][ T6189] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 119.662782][ T6189] nf_hook_slow+0xc5/0x220 [ 119.662805][ T6189] ? __pfx_dst_output+0x10/0x10 [ 119.662835][ T6189] nf_hook+0x22a/0x3a0 [ 119.662867][ T6189] ? nf_hook+0xa1/0x3a0 [ 119.662895][ T6189] ? __pfx_nf_hook+0x10/0x10 [ 119.662928][ T6189] ? __pfx_dst_output+0x10/0x10 [ 119.662964][ T6189] ? __ip_local_out+0x152/0x6a0 [ 119.662999][ T6189] __ip_local_out+0x558/0x6a0 [ 119.663028][ T6189] ? __pfx_dst_output+0x10/0x10 [ 119.663063][ T6189] ip_local_out+0x2a/0x190 [ 119.663105][ T6189] ip_send_skb+0x45/0xc0 [ 119.663126][ T6189] udp_send_skb+0x7e4/0xf70 [ 119.663161][ T6189] udp_sendmsg+0x1937/0x21a0 [ 119.663203][ T6189] ? __pfx_udp_sendmsg+0x10/0x10 [ 119.663265][ T6189] ? __lock_acquire+0x6b5/0x2cf0 [ 119.663303][ T6189] udpv6_sendmsg+0x996/0x25c0 [ 119.663363][ T6189] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 119.663405][ T6189] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 119.663434][ T6189] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 119.663476][ T6189] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 119.663507][ T6189] ? inet_send_prepare+0x1b9/0x270 [ 119.663543][ T6189] ? inet6_sendmsg+0xe4/0x120 [ 119.663576][ T6189] ____sys_sendmsg+0x5aa/0x9c0 [ 119.663604][ T6189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.663637][ T6189] ? import_iovec+0x73/0xa0 [ 119.663668][ T6189] ___sys_sendmsg+0x2a5/0x360 [ 119.663697][ T6189] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.663725][ T6189] ? futex_hash_put+0x4e/0x60 [ 119.663749][ T6189] ? futex_wake+0x4af/0x580 [ 119.663816][ T6189] __x64_sys_sendmsg+0x1c3/0x2a0 [ 119.663841][ T6189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.663874][ T6189] ? do_sock_setsockopt+0x185/0x1b0 [ 119.663916][ T6189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.663939][ T6189] do_syscall_64+0x15f/0xf80 [ 119.663965][ T6189] ? trace_irq_disable+0x3b/0x140 [ 119.663989][ T6189] ? clear_bhb_loop+0x40/0x90 [ 119.664014][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.664036][ T6189] RIP: 0033:0x7f9717edc819 [ 119.664055][ T6189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.664072][ T6189] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.664103][ T6189] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 119.664118][ T6189] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 119.664132][ T6189] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 119.664145][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.664158][ T6189] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 119.664191][ T6189] [ 120.678019][ T6209] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 120.678035][ T6209] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6209, name: syz.0.84 [ 120.678045][ T6209] preempt_count: 1, expected: 0 [ 120.678051][ T6209] RCU nest depth: 2, expected: 2 [ 120.678057][ T6209] 4 locks held by syz.0.84/6209: [ 120.678064][ T6209] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 120.678111][ T6209] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 120.678141][ T6209] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 120.678168][ T6209] #3: ffff88802b87ba70 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 120.678200][ T6209] Preemption disabled at: [ 120.678203][ T6209] [] hlist_bl_lock+0x18/0x110 [ 120.678224][ T6209] CPU: 0 UID: 0 PID: 6209 Comm: syz.0.84 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 120.678241][ T6209] Tainted: [W]=WARN [ 120.678245][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.678253][ T6209] Call Trace: [ 120.678258][ T6209] [ 120.678264][ T6209] dump_stack_lvl+0xe8/0x150 [ 120.678279][ T6209] __might_resched+0x329/0x480 [ 120.678293][ T6209] ? hlist_bl_lock+0x18/0x110 [ 120.678305][ T6209] rt_spin_lock+0xc2/0x400 [ 120.678320][ T6209] ? __pfx_rt_spin_lock+0x10/0x10 [ 120.678332][ T6209] ? rcu_is_watching+0x15/0xb0 [ 120.678358][ T6209] ? __local_bh_disable_ip+0x3c/0x420 [ 120.678374][ T6209] ip_vs_conn_new+0x14fe/0x25f0 [ 120.678386][ T6209] ? ip_vs_ct_in_get+0x321/0x1350 [ 120.678407][ T6209] ? ip_vs_conn_new+0x1491/0x25f0 [ 120.678428][ T6209] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 120.678443][ T6209] ? ip_vs_ct_in_get+0xab/0x1350 [ 120.678464][ T6209] ? rcu_is_watching+0x15/0xb0 [ 120.678481][ T6209] ? kfree+0x4d/0x6c0 [ 120.678499][ T6209] ip_vs_schedule+0x137a/0x1d70 [ 120.678523][ T6209] ? __pfx_ip_vs_schedule+0x10/0x10 [ 120.678545][ T6209] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 120.678565][ T6209] ? ip_vs_service_find+0xbc/0x3c0 [ 120.678583][ T6209] udp_conn_schedule+0x391/0x7a0 [ 120.678610][ T6209] ? __pfx_udp_conn_schedule+0x10/0x10 [ 120.678636][ T6209] ip_vs_in_hook+0xc50/0x1bf0 [ 120.678655][ T6209] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 120.678678][ T6209] ? nf_hook+0xa1/0x3a0 [ 120.678695][ T6209] ? nf_hook+0xa1/0x3a0 [ 120.678713][ T6209] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 120.678727][ T6209] nf_hook_slow+0xc5/0x220 [ 120.678740][ T6209] ? __pfx_dst_output+0x10/0x10 [ 120.678758][ T6209] nf_hook+0x22a/0x3a0 [ 120.678777][ T6209] ? nf_hook+0xa1/0x3a0 [ 120.678793][ T6209] ? __pfx_nf_hook+0x10/0x10 [ 120.678811][ T6209] ? __pfx_dst_output+0x10/0x10 [ 120.678832][ T6209] ? __ip_local_out+0x152/0x6a0 [ 120.678851][ T6209] __ip_local_out+0x558/0x6a0 [ 120.678873][ T6209] ? __pfx_dst_output+0x10/0x10 [ 120.678893][ T6209] ip_local_out+0x2a/0x190 [ 120.678912][ T6209] ip_send_skb+0x45/0xc0 [ 120.678924][ T6209] udp_send_skb+0x7e4/0xf70 [ 120.678944][ T6209] udp_sendmsg+0x1937/0x21a0 [ 120.678967][ T6209] ? __pfx_udp_sendmsg+0x10/0x10 [ 120.679001][ T6209] ? __lock_acquire+0x6b5/0x2cf0 [ 120.679021][ T6209] udpv6_sendmsg+0x996/0x25c0 [ 120.679049][ T6209] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 120.679072][ T6209] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 120.679088][ T6209] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 120.679112][ T6209] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 120.679128][ T6209] ? inet_send_prepare+0x1b9/0x270 [ 120.679149][ T6209] ? inet6_sendmsg+0xe4/0x120 [ 120.679168][ T6209] ____sys_sendmsg+0x5aa/0x9c0 [ 120.679184][ T6209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.679201][ T6209] ? import_iovec+0x73/0xa0 [ 120.679218][ T6209] ___sys_sendmsg+0x2a5/0x360 [ 120.679233][ T6209] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.679248][ T6209] ? futex_hash_put+0x4e/0x60 [ 120.679263][ T6209] ? futex_wake+0x4af/0x580 [ 120.679298][ T6209] __x64_sys_sendmsg+0x1c3/0x2a0 [ 120.679312][ T6209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.679329][ T6209] ? do_sock_setsockopt+0x185/0x1b0 [ 120.679358][ T6209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.679372][ T6209] do_syscall_64+0x15f/0xf80 [ 120.679387][ T6209] ? trace_irq_disable+0x3b/0x140 [ 120.679401][ T6209] ? clear_bhb_loop+0x40/0x90 [ 120.679416][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.679428][ T6209] RIP: 0033:0x7f9717edc819 [ 120.679440][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.679451][ T6209] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.679464][ T6209] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 120.679473][ T6209] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 120.679481][ T6209] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 120.679488][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.679495][ T6209] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 120.679514][ T6209] 2026/04/14 03:36:11 executed programs: 86 [ 121.684697][ T6230] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 121.684712][ T6230] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6230, name: syz.0.105 [ 121.684723][ T6230] preempt_count: 1, expected: 0 [ 121.684729][ T6230] RCU nest depth: 2, expected: 2 [ 121.684735][ T6230] 4 locks held by syz.0.105/6230: [ 121.684742][ T6230] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 121.684786][ T6230] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 121.684816][ T6230] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 121.684845][ T6230] #3: ffff88803685b070 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 121.684876][ T6230] Preemption disabled at: [ 121.684880][ T6230] [] hlist_bl_lock+0x18/0x110 [ 121.684900][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.0.105 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 121.684918][ T6230] Tainted: [W]=WARN [ 121.684922][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.684930][ T6230] Call Trace: [ 121.684935][ T6230] [ 121.684940][ T6230] dump_stack_lvl+0xe8/0x150 [ 121.684955][ T6230] __might_resched+0x329/0x480 [ 121.684969][ T6230] ? hlist_bl_lock+0x18/0x110 [ 121.684982][ T6230] rt_spin_lock+0xc2/0x400 [ 121.685002][ T6230] ? __pfx_rt_spin_lock+0x10/0x10 [ 121.685014][ T6230] ? rcu_is_watching+0x15/0xb0 [ 121.685031][ T6230] ? __local_bh_disable_ip+0x3c/0x420 [ 121.685047][ T6230] ip_vs_conn_new+0x14fe/0x25f0 [ 121.685059][ T6230] ? ip_vs_ct_in_get+0x321/0x1350 [ 121.685079][ T6230] ? ip_vs_conn_new+0x1491/0x25f0 [ 121.685100][ T6230] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 121.685115][ T6230] ? ip_vs_ct_in_get+0xab/0x1350 [ 121.685136][ T6230] ? rcu_is_watching+0x15/0xb0 [ 121.685153][ T6230] ? kfree+0x4d/0x6c0 [ 121.685171][ T6230] ip_vs_schedule+0x137a/0x1d70 [ 121.685195][ T6230] ? __pfx_ip_vs_schedule+0x10/0x10 [ 121.685217][ T6230] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 121.685237][ T6230] ? ip_vs_service_find+0xbc/0x3c0 [ 121.685256][ T6230] udp_conn_schedule+0x391/0x7a0 [ 121.685278][ T6230] ? __pfx_udp_conn_schedule+0x10/0x10 [ 121.685304][ T6230] ip_vs_in_hook+0xc50/0x1bf0 [ 121.685323][ T6230] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 121.685362][ T6230] ? nf_hook+0xa1/0x3a0 [ 121.685389][ T6230] ? nf_hook+0xa1/0x3a0 [ 121.685417][ T6230] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 121.685442][ T6230] nf_hook_slow+0xc5/0x220 [ 121.685464][ T6230] ? __pfx_dst_output+0x10/0x10 [ 121.685493][ T6230] nf_hook+0x22a/0x3a0 [ 121.685523][ T6230] ? nf_hook+0xa1/0x3a0 [ 121.685540][ T6230] ? __pfx_nf_hook+0x10/0x10 [ 121.685559][ T6230] ? __pfx_dst_output+0x10/0x10 [ 121.685579][ T6230] ? __ip_local_out+0x152/0x6a0 [ 121.685599][ T6230] __ip_local_out+0x558/0x6a0 [ 121.685615][ T6230] ? __pfx_dst_output+0x10/0x10 [ 121.685634][ T6230] ip_local_out+0x2a/0x190 [ 121.685654][ T6230] ip_send_skb+0x45/0xc0 [ 121.685666][ T6230] udp_send_skb+0x7e4/0xf70 [ 121.685686][ T6230] udp_sendmsg+0x1937/0x21a0 [ 121.685708][ T6230] ? __pfx_udp_sendmsg+0x10/0x10 [ 121.685743][ T6230] ? __lock_acquire+0x6b5/0x2cf0 [ 121.685763][ T6230] udpv6_sendmsg+0x996/0x25c0 [ 121.685791][ T6230] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 121.685814][ T6230] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 121.685830][ T6230] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 121.685853][ T6230] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 121.685870][ T6230] ? inet_send_prepare+0x1b9/0x270 [ 121.685891][ T6230] ? inet6_sendmsg+0xe4/0x120 [ 121.685928][ T6230] ____sys_sendmsg+0x5aa/0x9c0 [ 121.685944][ T6230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.685961][ T6230] ? import_iovec+0x73/0xa0 [ 121.685978][ T6230] ___sys_sendmsg+0x2a5/0x360 [ 121.685993][ T6230] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.686008][ T6230] ? futex_hash_put+0x4e/0x60 [ 121.686023][ T6230] ? futex_wake+0x4af/0x580 [ 121.686057][ T6230] __x64_sys_sendmsg+0x1c3/0x2a0 [ 121.686071][ T6230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.686089][ T6230] ? do_sock_setsockopt+0x185/0x1b0 [ 121.686116][ T6230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.686129][ T6230] do_syscall_64+0x15f/0xf80 [ 121.686144][ T6230] ? trace_irq_disable+0x3b/0x140 [ 121.686159][ T6230] ? clear_bhb_loop+0x40/0x90 [ 121.686174][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.686186][ T6230] RIP: 0033:0x7f9717edc819 [ 121.686199][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.686209][ T6230] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.686222][ T6230] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 121.686231][ T6230] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 121.686239][ T6230] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 121.686246][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.686253][ T6230] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 121.686272][ T6230] [ 122.675662][ T6257] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 122.675686][ T6257] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6257, name: syz.0.131 [ 122.675704][ T6257] preempt_count: 1, expected: 0 [ 122.675714][ T6257] RCU nest depth: 2, expected: 2 [ 122.675725][ T6257] 4 locks held by syz.0.131/6257: [ 122.675737][ T6257] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 122.675806][ T6257] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 122.675858][ T6257] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 122.675908][ T6257] #3: ffff8880401a7070 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 122.675963][ T6257] Preemption disabled at: [ 122.675968][ T6257] [] hlist_bl_lock+0x18/0x110 [ 122.676002][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.0.131 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 122.676031][ T6257] Tainted: [W]=WARN [ 122.676037][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.676058][ T6257] Call Trace: [ 122.676067][ T6257] [ 122.676076][ T6257] dump_stack_lvl+0xe8/0x150 [ 122.676102][ T6257] __might_resched+0x329/0x480 [ 122.676127][ T6257] ? hlist_bl_lock+0x18/0x110 [ 122.676152][ T6257] rt_spin_lock+0xc2/0x400 [ 122.676177][ T6257] ? __pfx_rt_spin_lock+0x10/0x10 [ 122.676200][ T6257] ? rcu_is_watching+0x15/0xb0 [ 122.676228][ T6257] ? __local_bh_disable_ip+0x3c/0x420 [ 122.676259][ T6257] ip_vs_conn_new+0x14fe/0x25f0 [ 122.676282][ T6257] ? ip_vs_ct_in_get+0x321/0x1350 [ 122.676316][ T6257] ? ip_vs_conn_new+0x1491/0x25f0 [ 122.676358][ T6257] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 122.676386][ T6257] ? ip_vs_ct_in_get+0xab/0x1350 [ 122.676424][ T6257] ? rcu_is_watching+0x15/0xb0 [ 122.676455][ T6257] ? kfree+0x4d/0x6c0 [ 122.676488][ T6257] ip_vs_schedule+0x137a/0x1d70 [ 122.676534][ T6257] ? __pfx_ip_vs_schedule+0x10/0x10 [ 122.676575][ T6257] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 122.676613][ T6257] ? ip_vs_service_find+0xbc/0x3c0 [ 122.676648][ T6257] udp_conn_schedule+0x391/0x7a0 [ 122.676688][ T6257] ? __pfx_udp_conn_schedule+0x10/0x10 [ 122.676734][ T6257] ip_vs_in_hook+0xc50/0x1bf0 [ 122.676770][ T6257] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 122.676815][ T6257] ? nf_hook+0xa1/0x3a0 [ 122.676851][ T6257] ? nf_hook+0xa1/0x3a0 [ 122.676879][ T6257] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 122.676907][ T6257] nf_hook_slow+0xc5/0x220 [ 122.676930][ T6257] ? __pfx_dst_output+0x10/0x10 [ 122.676961][ T6257] nf_hook+0x22a/0x3a0 [ 122.676993][ T6257] ? nf_hook+0xa1/0x3a0 [ 122.677020][ T6257] ? __pfx_nf_hook+0x10/0x10 [ 122.677060][ T6257] ? __pfx_dst_output+0x10/0x10 [ 122.677097][ T6257] ? __ip_local_out+0x152/0x6a0 [ 122.677132][ T6257] __ip_local_out+0x558/0x6a0 [ 122.677161][ T6257] ? __pfx_dst_output+0x10/0x10 [ 122.677196][ T6257] ip_local_out+0x2a/0x190 [ 122.677232][ T6257] ip_send_skb+0x45/0xc0 [ 122.677254][ T6257] udp_send_skb+0x7e4/0xf70 [ 122.677291][ T6257] udp_sendmsg+0x1937/0x21a0 [ 122.677334][ T6257] ? __pfx_udp_sendmsg+0x10/0x10 [ 122.677401][ T6257] ? __lock_acquire+0x6b5/0x2cf0 [ 122.677438][ T6257] udpv6_sendmsg+0x996/0x25c0 [ 122.677490][ T6257] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 122.677532][ T6257] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 122.677560][ T6257] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 122.677605][ T6257] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 122.677637][ T6257] ? inet_send_prepare+0x1b9/0x270 [ 122.677675][ T6257] ? inet6_sendmsg+0xe4/0x120 [ 122.677708][ T6257] ____sys_sendmsg+0x5aa/0x9c0 [ 122.677737][ T6257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.677769][ T6257] ? import_iovec+0x73/0xa0 [ 122.677799][ T6257] ___sys_sendmsg+0x2a5/0x360 [ 122.677827][ T6257] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.677854][ T6257] ? futex_hash_put+0x4e/0x60 [ 122.677881][ T6257] ? futex_wake+0x4af/0x580 [ 122.677945][ T6257] __x64_sys_sendmsg+0x1c3/0x2a0 [ 122.677971][ T6257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.678003][ T6257] ? do_sock_setsockopt+0x185/0x1b0 [ 122.678055][ T6257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.678080][ T6257] do_syscall_64+0x15f/0xf80 [ 122.678107][ T6257] ? trace_irq_disable+0x3b/0x140 [ 122.678130][ T6257] ? clear_bhb_loop+0x40/0x90 [ 122.678156][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.678178][ T6257] RIP: 0033:0x7f9717edc819 [ 122.678199][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.678216][ T6257] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.678237][ T6257] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 122.678251][ T6257] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 122.678263][ T6257] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 122.678276][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.678289][ T6257] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 122.678320][ T6257] [ 123.684206][ T6278] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 123.684221][ T6278] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6278, name: syz.0.151 [ 123.684232][ T6278] preempt_count: 1, expected: 0 [ 123.684238][ T6278] RCU nest depth: 2, expected: 2 [ 123.684244][ T6278] 4 locks held by syz.0.151/6278: [ 123.684251][ T6278] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 123.684293][ T6278] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 123.684323][ T6278] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 123.684351][ T6278] #3: ffff88803eaf7cf0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 123.684382][ T6278] Preemption disabled at: [ 123.684386][ T6278] [] hlist_bl_lock+0x18/0x110 [ 123.684406][ T6278] CPU: 1 UID: 0 PID: 6278 Comm: syz.0.151 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 123.684424][ T6278] Tainted: [W]=WARN [ 123.684428][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.684435][ T6278] Call Trace: [ 123.684440][ T6278] [ 123.684445][ T6278] dump_stack_lvl+0xe8/0x150 [ 123.684461][ T6278] __might_resched+0x329/0x480 [ 123.684475][ T6278] ? hlist_bl_lock+0x18/0x110 [ 123.684487][ T6278] rt_spin_lock+0xc2/0x400 [ 123.684502][ T6278] ? __pfx_rt_spin_lock+0x10/0x10 [ 123.684514][ T6278] ? rcu_is_watching+0x15/0xb0 [ 123.684531][ T6278] ? __local_bh_disable_ip+0x3c/0x420 [ 123.684547][ T6278] ip_vs_conn_new+0x14fe/0x25f0 [ 123.684559][ T6278] ? ip_vs_ct_in_get+0x321/0x1350 [ 123.684579][ T6278] ? ip_vs_conn_new+0x1491/0x25f0 [ 123.684600][ T6278] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 123.684615][ T6278] ? ip_vs_ct_in_get+0xab/0x1350 [ 123.684636][ T6278] ? rcu_is_watching+0x15/0xb0 [ 123.684653][ T6278] ? kfree+0x4d/0x6c0 [ 123.684671][ T6278] ip_vs_schedule+0x137a/0x1d70 [ 123.684694][ T6278] ? __pfx_ip_vs_schedule+0x10/0x10 [ 123.684716][ T6278] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 123.684737][ T6278] ? ip_vs_service_find+0xbc/0x3c0 [ 123.684755][ T6278] udp_conn_schedule+0x391/0x7a0 [ 123.684777][ T6278] ? __pfx_udp_conn_schedule+0x10/0x10 [ 123.684802][ T6278] ip_vs_in_hook+0xc50/0x1bf0 [ 123.684821][ T6278] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 123.684844][ T6278] ? nf_hook+0xa1/0x3a0 [ 123.684862][ T6278] ? nf_hook+0xa1/0x3a0 [ 123.684879][ T6278] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 123.684894][ T6278] nf_hook_slow+0xc5/0x220 [ 123.684907][ T6278] ? __pfx_dst_output+0x10/0x10 [ 123.684925][ T6278] nf_hook+0x22a/0x3a0 [ 123.684944][ T6278] ? nf_hook+0xa1/0x3a0 [ 123.684960][ T6278] ? __pfx_nf_hook+0x10/0x10 [ 123.684978][ T6278] ? __pfx_dst_output+0x10/0x10 [ 123.684999][ T6278] ? __ip_local_out+0x152/0x6a0 [ 123.685018][ T6278] __ip_local_out+0x558/0x6a0 [ 123.685034][ T6278] ? __pfx_dst_output+0x10/0x10 [ 123.685054][ T6278] ip_local_out+0x2a/0x190 [ 123.685072][ T6278] ip_send_skb+0x45/0xc0 [ 123.685085][ T6278] udp_send_skb+0x7e4/0xf70 [ 123.685111][ T6278] udp_sendmsg+0x1937/0x21a0 [ 123.685133][ T6278] ? __pfx_udp_sendmsg+0x10/0x10 [ 123.685166][ T6278] ? __lock_acquire+0x6b5/0x2cf0 [ 123.685185][ T6278] udpv6_sendmsg+0x996/0x25c0 [ 123.685212][ T6278] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 123.685235][ T6278] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 123.685251][ T6278] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 123.685274][ T6278] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 123.685290][ T6278] ? inet_send_prepare+0x1b9/0x270 [ 123.685311][ T6278] ? inet6_sendmsg+0xe4/0x120 [ 123.685329][ T6278] ____sys_sendmsg+0x5aa/0x9c0 [ 123.685345][ T6278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.685377][ T6278] ? import_iovec+0x73/0xa0 [ 123.685405][ T6278] ___sys_sendmsg+0x2a5/0x360 [ 123.685431][ T6278] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.685458][ T6278] ? futex_hash_put+0x4e/0x60 [ 123.685482][ T6278] ? futex_wake+0x4af/0x580 [ 123.685547][ T6278] __x64_sys_sendmsg+0x1c3/0x2a0 [ 123.685573][ T6278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.685606][ T6278] ? do_sock_setsockopt+0x185/0x1b0 [ 123.685650][ T6278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.685674][ T6278] do_syscall_64+0x15f/0xf80 [ 123.685701][ T6278] ? trace_irq_disable+0x3b/0x140 [ 123.685725][ T6278] ? clear_bhb_loop+0x40/0x90 [ 123.685753][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.685775][ T6278] RIP: 0033:0x7f9717edc819 [ 123.685796][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.685814][ T6278] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.685836][ T6278] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 123.685853][ T6278] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 123.685867][ T6278] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 123.685880][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.685892][ T6278] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 123.685944][ T6278] [ 124.707112][ T6299] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 124.707133][ T6299] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6299, name: syz.0.169 [ 124.707161][ T6299] preempt_count: 1, expected: 0 [ 124.707171][ T6299] RCU nest depth: 2, expected: 2 [ 124.707181][ T6299] 4 locks held by syz.0.169/6299: [ 124.707194][ T6299] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 124.707263][ T6299] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 124.707340][ T6299] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 124.707393][ T6299] #3: ffff8880595288f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 124.707449][ T6299] Preemption disabled at: [ 124.707455][ T6299] [] hlist_bl_lock+0x18/0x110 [ 124.707492][ T6299] CPU: 1 UID: 0 PID: 6299 Comm: syz.0.169 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 124.707520][ T6299] Tainted: [W]=WARN [ 124.707527][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.707539][ T6299] Call Trace: [ 124.707547][ T6299] [ 124.707557][ T6299] dump_stack_lvl+0xe8/0x150 [ 124.707584][ T6299] __might_resched+0x329/0x480 [ 124.707609][ T6299] ? hlist_bl_lock+0x18/0x110 [ 124.707632][ T6299] rt_spin_lock+0xc2/0x400 [ 124.707659][ T6299] ? __pfx_rt_spin_lock+0x10/0x10 [ 124.707681][ T6299] ? rcu_is_watching+0x15/0xb0 [ 124.707711][ T6299] ? __local_bh_disable_ip+0x3c/0x420 [ 124.707747][ T6299] ip_vs_conn_new+0x14fe/0x25f0 [ 124.707769][ T6299] ? ip_vs_ct_in_get+0x321/0x1350 [ 124.707805][ T6299] ? ip_vs_conn_new+0x1491/0x25f0 [ 124.707846][ T6299] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 124.707875][ T6299] ? ip_vs_ct_in_get+0xab/0x1350 [ 124.707911][ T6299] ? rcu_is_watching+0x15/0xb0 [ 124.707937][ T6299] ? kfree+0x4d/0x6c0 [ 124.707969][ T6299] ip_vs_schedule+0x137a/0x1d70 [ 124.708013][ T6299] ? __pfx_ip_vs_schedule+0x10/0x10 [ 124.708054][ T6299] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 124.708092][ T6299] ? ip_vs_service_find+0xbc/0x3c0 [ 124.708126][ T6299] udp_conn_schedule+0x391/0x7a0 [ 124.708175][ T6299] ? __pfx_udp_conn_schedule+0x10/0x10 [ 124.708224][ T6299] ip_vs_in_hook+0xc50/0x1bf0 [ 124.708258][ T6299] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 124.708302][ T6299] ? nf_hook+0xa1/0x3a0 [ 124.708334][ T6299] ? nf_hook+0xa1/0x3a0 [ 124.708365][ T6299] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 124.708392][ T6299] nf_hook_slow+0xc5/0x220 [ 124.708417][ T6299] ? __pfx_dst_output+0x10/0x10 [ 124.708447][ T6299] nf_hook+0x22a/0x3a0 [ 124.708482][ T6299] ? nf_hook+0xa1/0x3a0 [ 124.708509][ T6299] ? __pfx_nf_hook+0x10/0x10 [ 124.708542][ T6299] ? __pfx_dst_output+0x10/0x10 [ 124.708578][ T6299] ? __ip_local_out+0x152/0x6a0 [ 124.708613][ T6299] __ip_local_out+0x558/0x6a0 [ 124.708642][ T6299] ? __pfx_dst_output+0x10/0x10 [ 124.708678][ T6299] ip_local_out+0x2a/0x190 [ 124.708710][ T6299] ip_send_skb+0x45/0xc0 [ 124.708733][ T6299] udp_send_skb+0x7e4/0xf70 [ 124.708781][ T6299] udp_sendmsg+0x1937/0x21a0 [ 124.708824][ T6299] ? __pfx_udp_sendmsg+0x10/0x10 [ 124.708891][ T6299] ? __lock_acquire+0x6b5/0x2cf0 [ 124.708930][ T6299] udpv6_sendmsg+0x996/0x25c0 [ 124.708980][ T6299] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 124.709022][ T6299] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 124.709051][ T6299] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 124.709094][ T6299] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 124.709126][ T6299] ? inet_send_prepare+0x1b9/0x270 [ 124.709172][ T6299] ? inet6_sendmsg+0xe4/0x120 [ 124.709205][ T6299] ____sys_sendmsg+0x5aa/0x9c0 [ 124.709234][ T6299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.709267][ T6299] ? import_iovec+0x73/0xa0 [ 124.709298][ T6299] ___sys_sendmsg+0x2a5/0x360 [ 124.709326][ T6299] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.709354][ T6299] ? futex_hash_put+0x4e/0x60 [ 124.709380][ T6299] ? futex_wake+0x4af/0x580 [ 124.709446][ T6299] __x64_sys_sendmsg+0x1c3/0x2a0 [ 124.709473][ T6299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.709504][ T6299] ? do_sock_setsockopt+0x185/0x1b0 [ 124.709549][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.709574][ T6299] do_syscall_64+0x15f/0xf80 [ 124.709601][ T6299] ? trace_irq_disable+0x3b/0x140 [ 124.709625][ T6299] ? clear_bhb_loop+0x40/0x90 [ 124.709652][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.709674][ T6299] RIP: 0033:0x7f9717edc819 [ 124.709694][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.709711][ T6299] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.709733][ T6299] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 124.709748][ T6299] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 124.709761][ T6299] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 124.709775][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.709787][ T6299] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 124.709821][ T6299] [ 125.722493][ T6332] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 125.722515][ T6332] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6332, name: syz.0.201 [ 125.722534][ T6332] preempt_count: 1, expected: 0 [ 125.722544][ T6332] RCU nest depth: 2, expected: 2 [ 125.722555][ T6332] 4 locks held by syz.0.201/6332: [ 125.722567][ T6332] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 125.722636][ T6332] #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 125.722691][ T6332] #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 125.722742][ T6332] #3: ffff8880595263f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 125.722799][ T6332] Preemption disabled at: [ 125.722804][ T6332] [] hlist_bl_lock+0x18/0x110 [ 125.722837][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.0.201 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 125.722866][ T6332] Tainted: [W]=WARN [ 125.722873][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.722885][ T6332] Call Trace: [ 125.722894][ T6332] [ 125.722903][ T6332] dump_stack_lvl+0xe8/0x150 [ 125.722929][ T6332] __might_resched+0x329/0x480 [ 125.722955][ T6332] ? hlist_bl_lock+0x18/0x110 [ 125.722979][ T6332] rt_spin_lock+0xc2/0x400 [ 125.723005][ T6332] ? __pfx_rt_spin_lock+0x10/0x10 [ 125.723027][ T6332] ? rcu_is_watching+0x15/0xb0 [ 125.723055][ T6332] ? __local_bh_disable_ip+0x3c/0x420 [ 125.723086][ T6332] ip_vs_conn_new+0x14fe/0x25f0 [ 125.723108][ T6332] ? ip_vs_ct_in_get+0x321/0x1350 [ 125.723145][ T6332] ? ip_vs_conn_new+0x1491/0x25f0 [ 125.723183][ T6332] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 125.723213][ T6332] ? ip_vs_ct_in_get+0xab/0x1350 [ 125.723252][ T6332] ? rcu_is_watching+0x15/0xb0 [ 125.723283][ T6332] ? kfree+0x4d/0x6c0 [ 125.723316][ T6332] ip_vs_schedule+0x137a/0x1d70 [ 125.723370][ T6332] ? __pfx_ip_vs_schedule+0x10/0x10 [ 125.723415][ T6332] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 125.723455][ T6332] ? ip_vs_service_find+0xbc/0x3c0 [ 125.723490][ T6332] udp_conn_schedule+0x391/0x7a0 [ 125.723531][ T6332] ? __pfx_udp_conn_schedule+0x10/0x10 [ 125.723580][ T6332] ip_vs_in_hook+0xc50/0x1bf0 [ 125.723615][ T6332] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 125.723660][ T6332] ? nf_hook+0xa1/0x3a0 [ 125.723690][ T6332] ? nf_hook+0xa1/0x3a0 [ 125.723719][ T6332] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 125.723747][ T6332] nf_hook_slow+0xc5/0x220 [ 125.723770][ T6332] ? __pfx_dst_output+0x10/0x10 [ 125.723801][ T6332] nf_hook+0x22a/0x3a0 [ 125.723834][ T6332] ? nf_hook+0xa1/0x3a0 [ 125.723862][ T6332] ? __pfx_nf_hook+0x10/0x10 [ 125.723895][ T6332] ? __pfx_dst_output+0x10/0x10 [ 125.723929][ T6332] ? __ip_local_out+0x152/0x6a0 [ 125.723962][ T6332] __ip_local_out+0x558/0x6a0 [ 125.723991][ T6332] ? __pfx_dst_output+0x10/0x10 [ 125.724028][ T6332] ip_local_out+0x2a/0x190 [ 125.724061][ T6332] ip_send_skb+0x45/0xc0 [ 125.724084][ T6332] udp_send_skb+0x7e4/0xf70 [ 125.724120][ T6332] udp_sendmsg+0x1937/0x21a0 [ 125.724164][ T6332] ? __pfx_udp_sendmsg+0x10/0x10 [ 125.724231][ T6332] ? __lock_acquire+0x6b5/0x2cf0 [ 125.724268][ T6332] udpv6_sendmsg+0x996/0x25c0 [ 125.724319][ T6332] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 125.724370][ T6332] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 125.724399][ T6332] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 125.724441][ T6332] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 125.724472][ T6332] ? inet_send_prepare+0x1b9/0x270 [ 125.724511][ T6332] ? inet6_sendmsg+0xe4/0x120 [ 125.724544][ T6332] ____sys_sendmsg+0x5aa/0x9c0 [ 125.724572][ T6332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.724604][ T6332] ? import_iovec+0x73/0xa0 [ 125.724635][ T6332] ___sys_sendmsg+0x2a5/0x360 [ 125.724663][ T6332] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.724691][ T6332] ? futex_hash_put+0x4e/0x60 [ 125.724716][ T6332] ? futex_wake+0x4af/0x580 [ 125.724782][ T6332] __x64_sys_sendmsg+0x1c3/0x2a0 [ 125.724807][ T6332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.724847][ T6332] ? do_sock_setsockopt+0x185/0x1b0 [ 125.724891][ T6332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.724915][ T6332] do_syscall_64+0x15f/0xf80 [ 125.724942][ T6332] ? trace_irq_disable+0x3b/0x140 [ 125.724968][ T6332] ? clear_bhb_loop+0x40/0x90 [ 125.724996][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.725018][ T6332] RIP: 0033:0x7f9717edc819 [ 125.725040][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.725057][ T6332] RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.725080][ T6332] RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819 [ 125.725096][ T6332] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 125.725109][ T6332] RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000 [ 125.725123][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.725136][ T6332] R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0 [ 125.725171][ T6332] 2026/04/14 03:36:16 executed programs: 200