last executing test programs: 4m50.050061995s ago: executing program 0 (id=6718): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd3/sched/read2_next_rq\x00', 0x22480, 0x0) pread64$auto(r0, 0x0, 0x6f, 0x3) 4m49.90403044s ago: executing program 0 (id=6722): setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) 4m49.774585166s ago: executing program 0 (id=6726): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/fs/inode-state\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 4m49.638669352s ago: executing program 0 (id=6729): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.rsvd.failcnt\x00', 0x2941, 0x0) write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xf5\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) 4m49.499859139s ago: executing program 0 (id=6734): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 4m48.969802518s ago: executing program 0 (id=6744): socket(0x1e, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x1e, 0x0, 0x2710, @local}, 0x10) 4m48.563737514s ago: executing program 32 (id=6744): socket(0x1e, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x1e, 0x0, 0x2710, @local}, 0x10) 3m41.283539357s ago: executing program 2 (id=7712): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) getpeername$auto(0x3, 0x0, 0x0) 3m41.147416814s ago: executing program 2 (id=7714): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x280, 0x0) ioctl$auto(r0, 0xc0e85667, r0) 3m40.974734117s ago: executing program 2 (id=7717): r0 = socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) sendto$auto(r0, 0x0, 0x13, 0xc, &(0x7f0000000000)=@can={0x1d, r1}, 0x1e) 3m40.789300703s ago: executing program 2 (id=7722): socket(0x2b, 0x1, 0x0) r0 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r0, 0x25000000, r0}, 0x210) 3m37.821775719s ago: executing program 2 (id=7746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x28, r1, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x6}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) 3m35.204209841s ago: executing program 2 (id=7768): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0), 0x0) 3m35.204087037s ago: executing program 33 (id=7768): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0), 0x0) 2.20680287s ago: executing program 5 (id=11202): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x80002, 0x73) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast1}, 0x50) 2.024718852s ago: executing program 5 (id=11206): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026bd70006b68e11636178b6608000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) 1.773860732s ago: executing program 5 (id=11211): close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket(0x11, 0x3, 0x2) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x3, 0x5, 0x4, 0xd, 0xfffffffffffffffc, 0x100000000, 0x2c2, 0x800002017d, 0x2, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x1d, 0x2]}, 0x0, 0x0) 1.594551609s ago: executing program 5 (id=11215): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) 1.307383869s ago: executing program 4 (id=11219): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, 0x0) 1.161292917s ago: executing program 4 (id=11222): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1a, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) 1.122040883s ago: executing program 5 (id=11224): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xff}, 0x5, 0x0, 0x4) preadv$auto(r0, &(0x7f0000000080)={0x0, 0xe1d}, 0x6, 0xe281, 0x404) 973.225259ms ago: executing program 4 (id=11226): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x0) pidfd_open$auto(0x1, 0x0) flistxattr$auto(0x3, 0x0, 0x3) 944.061527ms ago: executing program 3 (id=11227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x94e}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x14) 897.921194ms ago: executing program 1 (id=11228): setns(0xc9, 0x0) r0 = socket(0x8, 0x80000, 0x80000003) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x40106183, 0x0) 891.923095ms ago: executing program 5 (id=11229): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(r0, 0x0, 0x1000, 0x2, 0x0, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)=@bpf_attr_0={0x3, 0x0, 0x7, 0x5, 0x1, 0xffffffffffffffff, 0x4, "3300feffffffffffff00000000002000", 0x0, 0xffffffffffffffff, 0x6, 0x5, 0x9, 0x8}, 0x9) 790.534974ms ago: executing program 4 (id=11230): setns(0xc9, 0x0) socket(0x27, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) 764.857674ms ago: executing program 3 (id=11231): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4) 741.740353ms ago: executing program 1 (id=11232): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 639.244125ms ago: executing program 4 (id=11233): setns(0xc9, 0x0) socket(0x8, 0x80000, 0x80000003) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 599.788199ms ago: executing program 3 (id=11234): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = fanotify_init$auto(0x4, 0x0) ioctl$auto(r0, 0x541b, r0) 581.112951ms ago: executing program 1 (id=11235): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x0, 0x3, 0x10000000000003, 0x3da1, 0x7f, 0x8, 0x10000, 0x140000000000, 0x0, 0x7fffffff, 0x6, 0x20001}, 0x171) 463.888052ms ago: executing program 4 (id=11236): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) 438.983349ms ago: executing program 3 (id=11237): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r0, 0x6a, 0x1, 0x0, 0x0) 424.766483ms ago: executing program 1 (id=11238): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=0xffffffffffffffff, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @inferred=0x0}, 0x2, 0x5, 0x4, @raw, @enumerated={0x2, 0x4, "23f7b11944d233964b2a5f32b66b0fe18e5b2d4edd0d9d16061791173f5412f21386d28cc66faa7a2336ad4b912a17fed2d89f48eefdf686b94fbc1bd2580477", 0x7fffffff, 0x2}, "7adec199a16a2311eacf2fc7ae6e9858eeb78db8d04fdd73340238d212b6debe0eda71bdd709254592b67f9ca1adb17884a16f7ce8cbce0bb32791702b8d7c38"}) rt_sigqueueinfo$auto(r0, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x11}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) 271.81898ms ago: executing program 1 (id=11239): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffeaf, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001"], 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x12000001, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000000c0), 0x8, 0xa507}, 0x800}, 0x7, 0x4008) 213.371574ms ago: executing program 3 (id=11240): madvise$auto(0x0, 0x7ffefffffffbffff, 0xa) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) 90.710648ms ago: executing program 1 (id=11241): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffffffffffe, 0x400000100000001, 0x1000, 0x0, 0x0, 0x0, 0x220fa98, 0xc, 0x6, 0x8000000008, 0x100000007fffffff, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0xb}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 0s ago: executing program 3 (id=11242): mmap$auto(0x0, 0x20009, 0x9, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) kernel console output (not intermixed with test programs): C0] RDX: 00007ffd0eef6190 RSI: 00007ffd0eef6220 RDI: 00007ffd0eef6220 [ 236.179023][ C0] RBP: 00007ffd0eef6220 R08: 00007ffd0eef7220 R09: 00000000ffffffff [ 236.186997][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd0eef72b0 [ 236.195012][ C0] R13: 00007fbb65c34474 R14: 0000000000039ab2 R15: 00007ffd0eef72f0 [ 236.203017][ C0] [ 237.311130][T12358] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 237.360949][T12358] CIFS mount error: No usable UNC path provided in device string! [ 237.360949][T12358] [ 237.402372][T12358] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 239.109926][T12453] : Can't lookup blockdev [ 239.903806][T12498] deleting an unspecified loop device is not supported. [ 240.396504][T12525] kafs: addr_prefs: Invalid Command [ 240.542148][ T29] audit: type=1807 audit(4294969457.057:18): UNKNOWN=nl80211 res=0 [ 240.544945][T12530] ima: policy update failed [ 240.567578][ T29] audit: type=1802 audit(4294969457.057:19): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3286" res=0 errno=0 [ 240.580360][T12533] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 240.598758][ T29] audit: type=1802 audit(4294969457.087:20): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3286" res=0 errno=0 [ 242.561423][ T29] audit: type=1807 audit(4294969459.087:21): UNKNOWN=nl80211 res=0 [ 242.561946][T12638] ima: policy update failed [ 242.580115][ T29] audit: type=1802 audit(4294969459.087:22): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3338" res=0 errno=0 [ 242.600127][ T29] audit: type=1802 audit(4294969459.127:23): pid=12638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3338" res=0 errno=0 [ 243.116445][T12656] could not allocate digest TFM handle [ 243.987361][T12713] block loop4: the capability attribute has been deprecated. [ 248.436642][ T29] audit: type=1400 audit(4294969464.998:24): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12957 comm="syz.3.3493" [ 248.796508][T12978] i2c i2c-0: new_device: Invalid device name [ 249.495726][T13020] bond0: invalid ARP target specified [ 250.790778][T13077] CIFS mount error: No usable UNC path provided in device string! [ 250.790778][T13077] [ 250.811958][T13077] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 251.338434][T13105] block2mtd: illegal erase size [ 251.688275][ T4944] Bluetooth: hci1: command 0x0406 tx timeout [ 251.688403][ T5920] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 252.275877][T13144] random: crng reseeded on system resumption [ 252.418525][T13142] Process accounting paused [ 253.304224][ T4944] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 253.312349][ T4944] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 253.757953][ T5920] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 253.759277][ T4944] Bluetooth: hci1: command 0x0406 tx timeout [ 255.443359][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.454688][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.663575][T13328] kafs: addr_prefs: Too many elements in string [ 256.794497][T13337] ptp ptp0: only physical clock in use now [ 257.403485][ T5728] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 257.411474][ T5728] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 258.417697][T13416] random: crng reseeded on system resumption [ 258.504689][ T29] audit: type=1326 audit(4294969475.120:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13420 comm="syz.3.3716" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f853639e0d9 code=0x0 [ 258.692518][ T4944] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 258.905505][T13442] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 259.475612][T13475] bond0: option fail_over_mac: invalid value () [ 259.606728][T13480] kafs: addr_prefs: Too many elements in string [ 260.761172][ T4944] Bluetooth: hci2: command 0x0406 tx timeout [ 261.116661][T13564] ICMPv6: process `syz.1.3786' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 262.830347][ T5728] Bluetooth: hci2: command 0x0406 tx timeout [ 264.054520][T13723] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 265.028772][T13779] kAFS: Invalid Command on /proc/fs/afs/cells file [ 266.430032][T13703] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 266.777897][T13857] ecryptfs_miscdev_write: Error while inspecting packet size [ 267.188566][T13875] : Can't lookup blockdev [ 267.276350][T13844] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 267.413736][T13881] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 267.421507][T13881] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 268.491390][T13703] Bluetooth: hci3: command 0x0406 tx timeout [ 269.260177][T13946] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 269.357799][T13703] Bluetooth: hci1: command 0x0406 tx timeout [ 269.481477][T13951] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 269.492328][T13951] net gretap0: uevent: failed to send synthetic uevent: -22 [ 270.563915][T13703] Bluetooth: hci3: command 0x0406 tx timeout [ 270.785101][T13994] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 270.807519][T13994] vhci_hcd vhci_hcd.2: invalid port number 0 [ 271.427749][T13889] Bluetooth: hci1: command 0x0406 tx timeout [ 273.429311][T14075] aoe: can't write to that file. [ 273.613947][T14083] kAFS: Invalid Command on /proc/fs/afs/cells file [ 274.284104][ T29] audit: type=1800 audit(4294969490.982:26): pid=14109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4045" name="sr0" dev="devtmpfs" ino=2818 res=0 errno=0 [ 274.649990][T14128] syz.0.4054: vm.laptop_mode is deprecated. Ignoring setting. [ 276.511680][T14214] sysfs_service_op_store: Client not running :-5: [ 277.455829][T14258] ICMPv6: process `syz.0.4119' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 277.587723][T14264] Invalid ELF header magic: != ELF [ 277.861523][T14276] serial 00:02: in use; can't configure [ 278.048830][T14285] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 279.274681][ T29] audit: type=1800 audit(4294969495.988:27): pid=14335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4156" name="members" dev="configfs" ino=36220 res=0 errno=0 [ 279.645250][T14354] ima: policy update failed [ 279.657781][ T29] audit: type=1802 audit(4294969496.370:28): pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4165" res=0 errno=0 [ 279.712152][ T29] audit: type=1800 audit(4294969496.420:29): pid=14361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4167" name="members" dev="configfs" ino=36255 res=0 errno=0 [ 280.226434][ T29] audit: type=1800 audit(4294969496.953:30): pid=14390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4181" name="members" dev="configfs" ino=36303 res=0 errno=0 [ 281.561845][T14466] binder: 14465:14466 ioctl c0046209 ffffffffffffffff returned -22 [ 282.399732][T14499] Process accounting resumed [ 284.373132][T14604] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 284.401998][T14604] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 284.846874][T14631] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 284.865765][T14631] cec cec26: uevent: failed to send synthetic uevent: -22 [ 286.176646][T14698] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 288.397825][T14759] CIFS mount error: No usable UNC path provided in device string! [ 288.397825][T14759] [ 288.427403][T14759] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 290.759787][T14873] Setting dangerous option i915.mitigations - tainting kernel [ 290.775898][T14873] Bad "i915.mitigations=,^", '^' is unknown [ 291.403078][ T10] Process accounting resumed [ 292.465464][T14949] rnbd_client L213: map_device: Parameters missing [ 292.962027][T14963] aoe: invalid device specification [ 294.401680][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.409580][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.665493][T15035] ecryptfs_parse_packet_length: Error parsing packet length [ 294.691969][T15035] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 296.930211][T15136] smpboot: CPU 1 is now offline [ 298.481601][T15209] [ 299.240835][T15247] vhci_hcd vhci_hcd.2: invalid port number 16 [ 299.287892][T15247] vhci_hcd vhci_hcd.2: invalid port number 16 [ 300.231201][ T29] audit: type=1804 audit(4294967316.732:31): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4611" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=45 res=1 errno=0 [ 300.908332][ T29] audit: type=1400 audit(4294967317.426:32): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15318 comm="syz.1.4624" [ 301.604791][T15353] kAFS: Invalid Command on /proc/fs/afs/cells file [ 302.773424][T15407] Scaler: ================= START STATUS ================= [ 302.817955][T15407] Scaler: ================== END STATUS ================== [ 304.499077][T15482] ICMPv6: process `syz.3.4696' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 305.666582][T15532] futex_wake_op: syz.0.4721 tries to shift op by -1; fix this program [ 309.632633][T15708] Invalid input. Must be >= 4608 [ 311.203502][T15775] bond0: invalid ARP target specified [ 312.278920][T15820] Process accounting paused [ 314.060728][T15894] bond0: option slaves: interface -]=,Do does not exist! [ 314.741309][T15925] dyndbg: expected <4096 bytes into control [ 316.125125][T15970] bond0: option slaves: interface -]=,Do does not exist! [ 316.356632][T15978] sd 0:0:1:0: PR command failed: 1026 [ 316.381334][T15978] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 316.407699][T15978] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 316.555587][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.566276][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.959463][T16005] Line length is too long: Should be less than 4094 Ijn9_VQ8j@:U%Ux0 [ 319.888773][T16110] [U]  [ 320.218533][T16119] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 322.102716][T16202] kernel read not supported for file /\*)A (pid: 16202 comm: syz.2.5037) [ 322.153258][ T29] audit: type=1800 audit(4294967338.786:33): pid=16202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5037" name="\*)A" dev="mqueue" ino=42830 res=0 errno=0 [ 322.189081][T13844] Bluetooth: hci2: unexpected event 0x04 length: 125 > 10 [ 322.189106][T13844] Bluetooth: unknown link type 101 [ 322.203252][T13844] Bluetooth: hci2: connection err: -111 Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 322.960055][T16234] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5809] was attempted by ""[16234] [ 323.702747][T16261] usbip-vudc usbip-vudc.0: gadget not bound [ 324.118106][T16281] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 324.126276][T16282] ======================================================= [ 324.126276][T16282] WARNING: The mand mount option has been deprecated and [ 324.126276][T16282] and is ignored by this kernel. Remove the mand [ 324.126276][T16282] option from the mount to silence this warning. [ 324.126276][T16282] ======================================================= [ 324.579445][T16299] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 324.777028][T16299] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 324.817667][T16299] pci 0000:00:01.3: PCI INT A: no GSI [ 325.105660][T16324] usbip-vudc usbip-vudc.0: gadget not bound [ 325.720972][T16354] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 325.807681][T16356] syz.0.5112 uses obsolete (PF_INET,SOCK_PACKET) [ 326.181677][T16372] usb usb36: usbfs: process 16372 (syz.0.5120) did not claim interface 0 before use [ 326.834477][ T29] audit: type=1800 audit(4294967343.491:34): pid=16403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5135" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 327.975598][ T29] audit: type=1800 audit(4294967344.637:35): pid=16445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5156" name="discovery_nqn" dev="configfs" ino=43638 res=0 errno=0 [ 328.443039][T16462] usb usb36: usbfs: process 16462 (syz.3.5164) did not claim interface 0 before use [ 330.069185][T16543] scsi_dev_info_list_add_str: bad dev info string ')zD 5fk+*X#R84*VsndvqQW}~YrȀ-8VGDƘLB%v†v}Ypq|?O[,! 7xWDr%[}E$3?G9Ff=lrGH;2L<=|8 -c Fո"[v9q4Mmvqk[(iNDСMX PSqqX4X`V!;r֍)y]WzfIH0,v{q8שUܹ䑉m؛HTwCz-nR%2]x05oՕ|3>lS*L/Cdgӑ[C=Cwem)l#' ''S.sHgi-TY%ܹF*8nFTH?i{' '' [ 330.690833][T16566] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 330.690833][T16566] [ 332.945335][T16655] TCP: TCP_TX_DELAY enabled [ 335.068122][T16750] mmap: syz.2.5307 (16750): VmData 45879296 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 338.379439][T16855] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 341.853717][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 342.245207][T16992] Process accounting resumed [ 343.209838][T17027] block nbd0: NBD_DISCONNECT [ 344.435423][T17096] program syz.3.5478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.592642][T17230] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 348.260934][T17257] writes to the poll attribute are ignored. [ 348.324166][T17257] please use driver specific parameters instead. [ 351.634950][T17391] kAFS: unparsable volume name [ 352.005461][T17408] block2mtd: too many arguments [ 353.402219][T17478] usb usb4: usbfs: process 17478 (syz.2.5672) did not claim interface 0 before use [ 354.585417][T17536] syz.1.5694 (17536): attempted to duplicate a private mapping with mremap. This is not supported. [ 354.786701][T17544] tipc: Can't bind to reserved service type 63 [ 356.549537][T17623] ceph: Failed to parse sending metrics switch value 'P^' [ 358.126498][T17671] queue_state_write: operation too long [ 358.150885][T17671] queue_state_write: use 'run', 'start' or 'kick' [ 360.856645][T17771] zram: Added device: zram1 [ 361.233682][T17786] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 362.693440][T17838] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 362.693440][T17838] M' is too long [ 362.748409][T17838] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 362.748409][T17838] W ' is too long [ 363.108158][T17852] nvme_fabrics: unknown parameter or missing value 'b' in ctrl creation request [ 364.429943][T17917] i2c i2c-0: new_device: Missing parameters [ 364.767662][T17937] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5807] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[17937] [ 366.048719][T18006] binder: 18002:18006 ioctl 40046210 9 returned -14 [ 366.645801][T18037] i2c i2c-0: delete_device: Can't parse I2C address [ 368.732203][ T29] audit: type=1800 audit(4294985729.610:36): pid=18124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5982" name="members" dev="configfs" ino=49006 res=0 errno=0 [ 369.737326][T18153] zram0: detected capacity change from 0 to 16 [ 372.108592][T18253] Process accounting paused [ 373.332250][T18316] kernel profiling enabled (shift: 7) [ 373.431481][T18320] kafs: addr_prefs: Invalid Command [ 373.613199][T18328] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 374.373495][T18363] bond0: no command found in slaves file - use +ifname or -ifname [ 375.712529][T18427] kfence: disabled [ 376.598830][T18468] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 376.636427][T18468] vhci_hcd vhci_hcd.3: invalid port number 0 [ 377.034288][T18494] i2c i2c-0: new_device: Missing parameters [ 377.682813][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.697142][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.946690][T18589] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 379.998880][T18617] binder: binder_mmap: 18616 0-1000 bad vm_flags failed -1 [ 380.525000][T18640] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 380.739467][T18650] blkio.reset_stats is deprecated [ 381.051422][T18660] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 381.212095][T18645] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 382.020377][T18709] Setting dangerous option i915.mitigations - tainting kernel [ 382.514778][ T29] audit: type=1800 audit(4294985743.452:37): pid=18726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6275" name="members" dev="configfs" ino=50937 res=0 errno=0 [ 382.805332][T18735] cougar: G6 mapped to F18 [ 383.493348][ T5920] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 384.086682][T18802] synth uevent: /module/null_blk: unknown uevent action string [ 388.412621][T13844] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 389.822324][T18992] hub 1-0:1.0: USB hub found [ 389.867123][T18992] hub 1-0:1.0: 1 port detected [ 390.591222][T19033] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 394.267720][T19159] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 394.314068][T19159] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 394.347565][T19159] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 394.391896][T19159] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 394.439272][T19159] page dumped because: unmovable page [ 394.472048][T19159] page_owner info is not present (never set?) [ 396.099363][T19227] hub 1-0:1.0: USB hub found [ 396.139041][T19227] hub 1-0:1.0: 1 port detected [ 396.320259][T19208] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 396.395506][T19208] usb usb16: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 398.872266][T19302] hub 1-0:1.0: USB hub found [ 398.908348][T19302] hub 1-0:1.0: 1 port detected [ 399.104735][T19309] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 399.139809][T19309] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 399.178783][T19309] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 399.219945][T19309] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 399.259709][T19309] page dumped because: unmovable page [ 399.290392][T19309] page_owner info is not present (never set?) [ 400.249170][T19352] i2c i2c-0: delete_device: Can't find device in list [ 401.065416][T19385] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 401.106501][T19385] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 401.142892][T19385] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 401.180621][T19385] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 401.220799][T19385] page dumped because: unmovable page [ 401.246794][T19385] page_owner tracks the page as allocated [ 401.274491][T19385] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1672411164, free_ts 0 [ 401.335361][T19385] register_early_stack+0x74/0xaf [ 401.377819][T19385] init_page_owner+0x4c/0xa10 [ 401.404523][T19385] page_ext_init+0x71d/0x780 [ 401.423975][T19385] mm_core_init+0x229/0x270 [ 401.446629][T19385] page_owner free stack trace missing [ 403.211950][T19419] syz.2.6588 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 403.404986][T19419] CPU: 0 UID: 0 PID: 19419 Comm: syz.2.6588 Tainted: G U L syzkaller #0 PREEMPT(full) [ 403.405032][T19419] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 403.405042][T19419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.405078][T19419] Call Trace: [ 403.405083][T19419] [ 403.405088][T19419] dump_stack_lvl+0x100/0x190 [ 403.405134][T19419] dump_header+0xfb/0x606 [ 403.405152][T19419] oom_kill_process.cold+0xd/0x330 [ 403.405170][T19419] out_of_memory+0x340/0x14f0 [ 403.405206][T19419] ? __pfx_out_of_memory+0x10/0x10 [ 403.405235][T19419] mem_cgroup_out_of_memory+0xc6/0x130 [ 403.405257][T19419] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 403.405273][T19419] ? find_held_lock+0x2b/0x80 [ 403.405308][T19419] ? do_raw_spin_unlock+0x145/0x1e0 [ 403.405333][T19419] ? _raw_spin_unlock+0x28/0x50 [ 403.405411][T19419] try_charge_memcg+0x6e5/0xdf0 [ 403.405437][T19419] ? __pfx_try_charge_memcg+0x10/0x10 [ 403.405457][T19419] ? find_held_lock+0x2b/0x80 [ 403.405479][T19419] ? rcu_read_unlock+0x17/0x60 [ 403.405502][T19419] ? rcu_read_unlock+0x17/0x60 [ 403.405524][T19419] ? find_held_lock+0x2b/0x80 [ 403.405542][T19419] ? rcu_read_unlock+0x17/0x60 [ 403.405567][T19419] charge_memcg+0x187/0x1e0 [ 403.405590][T19419] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 403.405607][T19419] swap_cache_alloc_folio+0x548/0xc50 [ 403.405629][T19419] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 403.405646][T19419] ? swap_cache_get_folio+0x28d/0x360 [ 403.405667][T19419] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 403.405682][T19419] ? lockdep_hardirqs_on+0x78/0x100 [ 403.405755][T19419] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 403.405777][T19419] swap_cache_read_folio+0x47/0x140 [ 403.405796][T19419] swap_cluster_readahead+0x387/0x5f0 [ 403.405818][T19419] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 403.405844][T19419] ? __lock_acquire+0x49f/0x1a40 [ 403.405867][T19419] ? get_vma_policy+0x23d/0x3b0 [ 403.405896][T19419] swapin_readahead+0x159/0x1200 [ 403.405919][T19419] ? __pfx_swapin_readahead+0x10/0x10 [ 403.405941][T19419] ? swap_table_get+0x10d/0x2c0 [ 403.405956][T19419] ? swap_cache_get_folio+0x28d/0x360 [ 403.405973][T19419] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 403.405989][T19419] ? __pfx_softleaf_type+0x10/0x10 [ 403.406009][T19419] ? do_swap_page+0xf98/0x5780 [ 403.406023][T19419] do_swap_page+0xf98/0x5780 [ 403.406047][T19419] ? __pfx_do_swap_page+0x10/0x10 [ 403.406062][T19419] ? __lock_acquire+0x49f/0x1a40 [ 403.406087][T19419] ? rcu_is_watching+0x12/0xc0 [ 403.406109][T19419] ? __pte_offset_map+0x179/0x310 [ 403.406131][T19419] __handle_mm_fault+0x192f/0x2a00 [ 403.406157][T19419] ? reacquire_held_locks+0xce/0x1e0 [ 403.406181][T19419] ? __pfx___handle_mm_fault+0x10/0x10 [ 403.406199][T19419] ? lock_vma_under_rcu+0x17c/0x590 [ 403.406224][T19419] handle_mm_fault+0x37b/0xa30 [ 403.406247][T19419] do_user_addr_fault+0x5a3/0x12f0 [ 403.406281][T19419] exc_page_fault+0x6f/0xd0 [ 403.406300][T19419] asm_exc_page_fault+0x26/0x30 [ 403.406315][T19419] RIP: 0033:0x7f90ddb59238 [ 403.406329][T19419] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 403.406343][T19419] RSP: 002b:00007ffd89621690 EFLAGS: 00010246 [ 403.406359][T19419] RAX: 0000000000000000 RBX: 0000555568377500 RCX: 00007f90ddb5e90e [ 403.406369][T19419] RDX: 00007ffd896216e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.406378][T19419] RBP: 00007f90dde27da0 R08: 0000000000000000 R09: 0000000000000000 [ 403.406386][T19419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000062ad1 [ 403.406395][T19419] R13: 00007f90dde2609c R14: 0000000000062827 R15: 00007f90dde26090 [ 403.406415][T19419] [ 403.785639][T19419] memory: usage 3056kB, limit 3072kB, failcnt 21847 [ 403.792377][T19419] memory+swap: usage 43312kB, limit 9007199254740988kB, failcnt 0 [ 404.155438][T19419] kmem: usage 860kB, limit 9007199254740988kB, failcnt 0 [ 404.178350][T19419] Memory cgroup stats for /syz2: [ 404.178778][T19419] cache 1945600 [ 404.205253][T19419] rss 16384 [ 404.208429][T19419] rss_huge 0 [ 404.211632][T19419] shmem 1945600 [ 404.217473][T19419] mapped_file 0 [ 404.225064][T19419] dirty 0 [ 404.235361][T19419] writeback 0 [ 404.238743][T19419] workingset_refault_anon 1294 [ 404.243517][T19419] workingset_refault_file 11120 [ 404.277427][T19419] swap 44707840 [ 404.314029][T19419] swapcached 68276224 [ 404.321063][T19419] pgpgin 165162 [ 404.336505][T19419] pgpgout 166160 [ 404.362066][T19419] pgfault 314210 [ 404.379975][T19419] pgmajfault 615 [ 404.409015][T19419] inactive_anon 1957888 [ 404.435970][T19419] active_anon 233472 [ 404.461724][T19419] inactive_file 0 [ 404.486228][T19419] active_file 0 [ 404.504983][T19419] unevictable 0 [ 404.519627][T19419] hierarchical_memory_limit 3145728 [ 404.547898][T19419] hierarchical_memsw_limit 9223372036854771712 [ 404.554327][T19419] total_cache 1945600 [ 404.563311][T19419] total_rss 16384 [ 404.574320][T19419] total_rss_huge 0 [ 404.579117][T19419] total_shmem 1945600 [ 404.600044][T19419] total_mapped_file 0 [ 404.628727][T19419] total_dirty 0 [ 404.650373][T19419] total_writeback 0 [ 404.674359][T19419] total_workingset_refault_anon 1294 [ 404.711916][T19419] total_workingset_refault_file 11120 [ 404.749939][T19419] total_swap 44707840 [ 404.770497][T19419] total_swapcached 68276224 [ 404.803041][T19419] total_pgpgin 165162 [ 404.843389][T19419] total_pgpgout 166160 [ 404.843475][T19419] total_pgfault 314210 [ 404.843482][T19419] total_pgmajfault 615 [ 404.843488][T19419] total_inactive_anon 1957888 [ 404.843494][T19419] total_active_anon 233472 [ 404.843500][T19419] total_inactive_file 0 [ 404.843506][T19419] total_active_file 0 [ 404.843511][T19419] total_unevictable 0 [ 404.843517][T19419] anon_cost 237 [ 404.843522][T19419] file_cost 0 [ 404.843529][T19419] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6334,pid=18851,uid=0 [ 404.845125][T19419] Memory cgroup out of memory: Killed process 18851 (syz.2.6334) total-vm:104300kB, anon-rss:1252kB, file-rss:53852kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 405.220802][T19419] Process accounting resumed [ 405.634670][T19512] program syz.1.6633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.058477][T19528] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 406.140345][T19528] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 406.227362][T19528] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 406.293272][T19528] page_type: f5(slab) [ 406.344187][T19528] raw: 00fff00000000040 ffff88801d2e5500 dead000000000100 dead000000000122 [ 406.429471][T19528] raw: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 406.493987][T18851] syz.2.6334 (18851) used greatest stack depth: 18952 bytes left [ 406.531789][T19528] head: 00fff00000000040 ffff88801d2e5500 dead000000000100 dead000000000122 [ 406.574271][T19528] head: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 406.615267][T19528] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 406.657134][T19528] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 406.698322][T19528] page dumped because: unmovable page [ 406.726589][T19528] page_owner tracks the page as allocated [ 406.752848][T19528] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5008, tgid 5008 (udevadm), ts 34338950831, free_ts 27933685019 [ 406.895783][T19528] post_alloc_hook+0xfd/0x120 [ 406.918129][T19528] get_page_from_freelist+0xf48/0x3530 [ 406.943989][T19528] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 406.970587][T19528] new_slab+0xa2/0x640 [ 406.985328][T19528] refill_objects+0xe3/0x410 [ 407.005266][T19528] __pcs_replace_empty_main+0x376/0x680 [ 407.032389][T19528] kmem_cache_alloc_lru_noprof+0x46a/0x6a0 [ 407.056552][T19528] alloc_inode+0x183/0x250 [ 407.077277][T19528] iget_locked+0x1d9/0x6d0 [ 407.096816][T19528] kernfs_get_inode+0x46/0x470 [ 407.117719][T19528] kernfs_iop_lookup+0x1a7/0x2d0 [ 407.140943][T19528] __lookup_slow+0x155/0x320 [ 407.159074][T19528] lookup_slow+0x50/0x70 [ 407.179009][T19528] link_path_walk+0x1377/0x1cc0 [ 407.200494][T19528] path_lookupat+0x74/0xc40 [ 407.219194][T19528] filename_lookup+0x202/0x590 [ 407.245641][T19528] page last free pid 1 tgid 1 stack trace: [ 407.271132][T19528] free_pages_prepare+0x586/0xd80 [ 407.293376][T19528] __free_contig_range_common+0x14f/0x250 [ 407.316527][T19528] destroy_args+0xa8/0x7a0 [ 407.334391][T19528] debug_vm_pgtable+0x1d69/0x3490 [ 407.365655][T19528] do_one_initcall+0x11d/0x700 [ 407.388695][T19528] kernel_init_freeable+0x6ea/0x7b0 [ 407.411807][T19528] kernel_init+0x1f/0x1e0 [ 407.432717][T19528] ret_from_fork+0x72b/0xd50 [ 407.455216][T19528] ret_from_fork_asm+0x1a/0x30 [ 407.924919][ T5945] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 410.458005][T19738] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 410.687549][T13858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.985228][T13858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.163861][T19759] kAFS: Invalid Command on /proc/fs/afs/cells file [ 411.268098][T13858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.408129][T13889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.426479][T13889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.442222][T13889] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.453268][T13889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.470895][T13889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.691888][T13858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.407688][T13858] bridge_slave_1: left allmulticast mode [ 412.449651][T13858] bridge_slave_1: left promiscuous mode [ 412.484876][T13858] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.546585][T13858] bridge_slave_0: left allmulticast mode [ 412.577581][T13858] bridge_slave_0: left promiscuous mode [ 412.607244][T13858] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.569607][T13889] Bluetooth: hci0: command tx timeout [ 413.614850][T13858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.668561][T13858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.711562][T13858] bond0 (unregistering): Released all slaves [ 414.355624][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 414.740221][T19839] binder: 19837:19839 ioctl 400c620e 200000000240 returned -22 [ 414.882284][T13858] hsr_slave_0: left promiscuous mode [ 414.918159][T13858] hsr_slave_1: left promiscuous mode [ 414.945079][T19867] nvme_fcloop: unknown parameter or missing value '' [ 414.955627][T13858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.985952][T13858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.021364][T13858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.058558][T13858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.162085][T13858] veth1_macvtap: left promiscuous mode [ 415.186595][T13858] veth0_macvtap: left promiscuous mode [ 415.211566][T13858] veth1_vlan: left promiscuous mode [ 415.234771][T13858] veth0_vlan: left promiscuous mode [ 415.636050][T13889] Bluetooth: hci0: command tx timeout [ 415.920990][T13858] team0 (unregistering): Port device team_slave_1 removed [ 416.001297][T13858] team0 (unregistering): Port device team_slave_0 removed [ 416.271078][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 416.493248][T19913] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 417.307423][T19760] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.346256][T19760] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.389242][T19760] bridge_slave_0: entered allmulticast mode [ 417.427643][T19760] bridge_slave_0: entered promiscuous mode [ 417.476375][T19935] bond0: invalid ARP target specified [ 417.509458][T19760] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.541179][T19760] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.583539][T19760] bridge_slave_1: entered allmulticast mode [ 417.630059][T19760] bridge_slave_1: entered promiscuous mode [ 417.707088][T13889] Bluetooth: hci0: command tx timeout [ 417.827384][T19760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.893752][T19760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.062636][T19760] team0: Port device team_slave_0 added [ 418.111129][T19760] team0: Port device team_slave_1 added [ 418.181599][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 418.255078][T19760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.288096][T19760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.403435][T19760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.465890][T19760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.496643][T19760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.614369][T19760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.921598][T19760] hsr_slave_0: entered promiscuous mode [ 418.937144][T20004] block2mtd: illegal erase size [ 418.954724][T19760] hsr_slave_1: entered promiscuous mode [ 419.774886][T13889] Bluetooth: hci0: command tx timeout [ 420.453664][T19760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.502147][T19760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.548373][T19760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.613183][T19760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.648205][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 420.678879][T19760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.719164][T19760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.754161][T19760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.814294][T19760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.260931][T19760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.378080][T19760] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.428259][T13858] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.435436][T13858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.518659][T20111] CIFS: VFS: Invalid SecurityFlags: [ 421.525989][T13858] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.533172][T13858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.742923][T20120] batman_adv: Routing algorithm '' is not supported [ 422.655775][T13889] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 422.655802][T13889] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 422.671405][T13889] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 423.041140][T19760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.862563][T19760] veth0_vlan: entered promiscuous mode [ 423.918559][T19760] veth1_vlan: entered promiscuous mode [ 424.036331][T19760] veth0_macvtap: entered promiscuous mode [ 424.082810][T19760] veth1_macvtap: entered promiscuous mode [ 424.160444][T19760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.216879][T19760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.300860][T13858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.338333][T13858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.382591][T13858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.481952][T13694] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.779733][T13694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.826897][T13694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.047448][T13704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.089357][T13704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.146021][T20265] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 435.139882][T20639] Process accounting paused [ 435.290533][T20648] nbd: couldn't find device at index 158 [ 435.912563][T20673] netlink: 'syz.4.7120': attribute type 1 has an invalid length. [ 436.860057][T20705] netlink: 342 bytes leftover after parsing attributes in process `syz.2.7132'. [ 436.921911][T20705] Zero length message leads to an empty skb [ 438.302303][T13889] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 438.798656][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.808869][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.853726][T20773] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 439.366595][T20781] phram: parameter too long [ 439.542108][T20792] FAULT_INJECTION: forcing a failure. [ 439.542108][T20792] name failslab, interval 1, probability 0, space 0, times 1 [ 439.622241][T20792] CPU: 0 UID: 0 PID: 20792 Comm: syz.2.7169 Tainted: G U L syzkaller #0 PREEMPT(full) [ 439.622270][T20792] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 439.622276][T20792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.622285][T20792] Call Trace: [ 439.622291][T20792] [ 439.622298][T20792] dump_stack_lvl+0x100/0x190 [ 439.622322][T20792] should_fail_ex.cold+0x5/0xa [ 439.622352][T20792] should_failslab+0xc2/0x120 [ 439.622374][T20792] __kmalloc_node_noprof+0x101/0x830 [ 439.622394][T20792] ? __kmalloc_noprof+0x311/0x820 [ 439.622413][T20792] ? get_callchain_buffers+0x1e5/0x380 [ 439.622445][T20792] get_callchain_buffers+0x1e5/0x380 [ 439.622464][T20792] ? security_capable+0x80/0x260 [ 439.622529][T20792] stack_map_alloc+0x316/0x610 [ 439.622550][T20792] map_create+0x874/0x3120 [ 439.622587][T20792] ? __lock_acquire+0x49f/0x1a40 [ 439.622613][T20792] ? __pfx_map_create+0x10/0x10 [ 439.622640][T20792] ? __might_fault+0xc5/0x140 [ 439.622664][T20792] __sys_bpf+0x2a6e/0x4e80 [ 439.622686][T20792] ? __pfx___sys_bpf+0x10/0x10 [ 439.622700][T20792] ? find_held_lock+0x2b/0x80 [ 439.622718][T20792] ? futex_wake+0x4ea/0x5e0 [ 439.622748][T20792] ? futex_wait+0x11e/0x370 [ 439.622768][T20792] ? __pfx_futex_wait+0x10/0x10 [ 439.622800][T20792] ? rcu_read_lock_any_held+0x6a/0xa0 [ 439.622821][T20792] ? find_held_lock+0x2b/0x80 [ 439.622839][T20792] ? ksys_write+0x190/0x250 [ 439.622854][T20792] ? ksys_write+0x190/0x250 [ 439.622879][T20792] ? __x64_sys_futex+0x34f/0x4d0 [ 439.622894][T20792] ? __x64_sys_futex+0x358/0x4d0 [ 439.622912][T20792] ? xfd_validate_state+0x129/0x190 [ 439.622932][T20792] ? __x64_sys_bpf+0xce/0x140 [ 439.622948][T20792] __x64_sys_bpf+0xce/0x140 [ 439.622964][T20792] ? do_syscall_64+0x90/0x840 [ 439.623016][T20792] do_syscall_64+0x115/0x840 [ 439.623036][T20792] ? clear_bhb_loop+0x40/0x90 [ 439.623056][T20792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.623072][T20792] RIP: 0033:0x7f90ddb9e0d9 [ 439.623086][T20792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.623100][T20792] RSP: 002b:00007f90deacd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.623115][T20792] RAX: ffffffffffffffda RBX: 00007f90dde25fa0 RCX: 00007f90ddb9e0d9 [ 439.623126][T20792] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 439.623135][T20792] RBP: 00007f90ddc35024 R08: 0000000000000000 R09: 0000000000000000 [ 439.623144][T20792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.623153][T20792] R13: 00007f90dde26038 R14: 00007f90dde25fa0 R15: 00007ffd896215a8 [ 439.623174][T20792] [ 440.202454][T20801] random: crng reseeded on system resumption [ 440.367756][T20806] FAULT_INJECTION: forcing a failure. [ 440.367756][T20806] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 440.413675][T20806] CPU: 0 UID: 0 PID: 20806 Comm: syz.2.7174 Tainted: G U L syzkaller #0 PREEMPT(full) [ 440.413704][T20806] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 440.413710][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.413720][T20806] Call Trace: [ 440.413725][T20806] [ 440.413731][T20806] dump_stack_lvl+0x100/0x190 [ 440.413753][T20806] should_fail_ex.cold+0x5/0xa [ 440.413768][T20806] ? prepare_alloc_pages+0x16d/0x5f0 [ 440.413792][T20806] should_fail_alloc_page+0xeb/0x140 [ 440.413814][T20806] prepare_alloc_pages+0x1f0/0x5f0 [ 440.413839][T20806] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 440.413859][T20806] ? is_bpf_text_address+0x94/0x1a0 [ 440.413880][T20806] ? kernel_text_address+0x8d/0x100 [ 440.413932][T20806] ? __kernel_text_address+0xd/0x30 [ 440.413954][T20806] ? unwind_get_return_address+0x59/0xa0 [ 440.413977][T20806] ? arch_stack_walk+0xa6/0xf0 [ 440.414001][T20806] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 440.414022][T20806] ? stack_trace_save+0x8e/0xc0 [ 440.414042][T20806] ? __pfx_stack_trace_save+0x10/0x10 [ 440.414062][T20806] ? stack_depot_save_flags+0x27/0x9d0 [ 440.414188][T20806] ? kasan_save_track+0x14/0x30 [ 440.414207][T20806] ? __kasan_kmalloc+0xaa/0xb0 [ 440.414225][T20806] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 440.414240][T20806] ? do_kimage_alloc_init+0x40/0x320 [ 440.414260][T20806] ? do_kexec_load+0x11b/0x810 [ 440.414282][T20806] ? __x64_sys_kexec_load+0x1bf/0x230 [ 440.414303][T20806] ? do_syscall_64+0x115/0x840 [ 440.414322][T20806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.414339][T20806] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.414370][T20806] ? policy_nodemask+0xed/0x4f0 [ 440.414393][T20806] alloc_pages_mpol+0x1fb/0x540 [ 440.414414][T20806] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 440.414440][T20806] alloc_pages_noprof+0x1a/0x160 [ 440.414455][T20806] kimage_alloc_pages+0x72/0x380 [ 440.414477][T20806] kimage_alloc_control_pages+0x157/0xa20 [ 440.414502][T20806] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 440.414517][T20806] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 440.414544][T20806] do_kexec_load+0x6c1/0x810 [ 440.414567][T20806] ? __pfx_do_kexec_load+0x10/0x10 [ 440.414590][T20806] ? _copy_from_user+0x59/0xd0 [ 440.414674][T20806] __x64_sys_kexec_load+0x1bf/0x230 [ 440.414700][T20806] do_syscall_64+0x115/0x840 [ 440.414720][T20806] ? clear_bhb_loop+0x40/0x90 [ 440.414738][T20806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.414753][T20806] RIP: 0033:0x7f90ddb9e0d9 [ 440.414767][T20806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.414781][T20806] RSP: 002b:00007f90deacd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 440.414799][T20806] RAX: ffffffffffffffda RBX: 00007f90dde25fa0 RCX: 00007f90ddb9e0d9 [ 440.414809][T20806] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000005 [ 440.414818][T20806] RBP: 00007f90ddc35024 R08: 0000000000000000 R09: 0000000000000000 [ 440.414827][T20806] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 440.414836][T20806] R13: 00007f90dde26038 R14: 00007f90dde25fa0 R15: 00007ffd896215a8 [ 440.414856][T20806] [ 440.414865][T20806] kexec: Could not allocate swap buffer [ 604.837132][T26147] netlink: ct_mark mask cannot be 0 [ 605.028202][T26153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 605.071701][T26155] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 606.102857][T26191] vmstat_refresh: nr_hugetlb -7168 [ 608.814788][T26297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9683'. [ 608.875077][T26300] openvswitch: netlink: IP tunnel dst address not specified [ 608.951284][T26222] Bluetooth: hci1: command 0x0406 tx timeout [ 609.295884][T26320] openvswitch: netlink: Flow key attr not present in new flow. [ 610.188483][T26346] netlink: zone id is out of range [ 610.209734][T26346] netlink: get zone limit has 8 unknown bytes [ 610.529762][T26351] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 611.175752][T26373] unsupported nla_type 113 [ 611.364027][T26380] netlink: Invalid conntrack helper [ 611.703787][T26392] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 611.739410][T26393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.340040][ T29] audit: type=1326 audit(4294967316.752:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.3.9739" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7d459e0d9 code=0x0 [ 615.117731][T26502] netlink: 'syz.3.9781': attribute type 1 has an invalid length. [ 617.011636][T26569] netlink: 'syz.4.9812': attribute type 1 has an invalid length. [ 617.925759][T26604] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 618.197517][T26616] FAULT_INJECTION: forcing a failure. [ 618.197517][T26616] name failslab, interval 1, probability 0, space 0, times 0 [ 618.275653][T26616] CPU: 0 UID: 0 PID: 26616 Comm: syz.1.9837 Tainted: G U L syzkaller #0 PREEMPT(full) [ 618.275683][T26616] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 618.275689][T26616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.275698][T26616] Call Trace: [ 618.275704][T26616] [ 618.275710][T26616] dump_stack_lvl+0x100/0x190 [ 618.275736][T26616] should_fail_ex.cold+0x5/0xa [ 618.275756][T26616] should_failslab+0xc2/0x120 [ 618.275780][T26616] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 618.275808][T26616] ? __d_alloc+0x35/0xa50 [ 618.275854][T26616] __d_alloc+0x35/0xa50 [ 618.275882][T26616] ? __lock_acquire+0x49f/0x1a40 [ 618.275909][T26616] d_alloc_parallel+0x105/0x14b0 [ 618.275937][T26616] ? __pfx_d_alloc_parallel+0x10/0x10 [ 618.275957][T26616] ? __d_lookup+0x25c/0x4a0 [ 618.275981][T26616] ? __d_lookup+0x266/0x4a0 [ 618.276005][T26616] path_openat+0x271c/0x4280 [ 618.276030][T26616] ? __pfx_path_openat+0x10/0x10 [ 618.276062][T26616] do_file_open+0x20e/0x430 [ 618.276080][T26616] ? __pfx_do_file_open+0x10/0x10 [ 618.276103][T26616] ? __pfx_kfree_link+0x10/0x10 [ 618.276224][T26616] ? alloc_fd+0x471/0x7a0 [ 618.276242][T26616] ? do_getname+0x191/0x390 [ 618.276263][T26616] do_sys_openat2+0x10f/0x1e0 [ 618.276284][T26616] ? __pfx_do_sys_openat2+0x10/0x10 [ 618.276304][T26616] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 618.276334][T26616] __x64_sys_openat+0x12d/0x210 [ 618.276354][T26616] ? __pfx___x64_sys_openat+0x10/0x10 [ 618.276381][T26616] do_syscall_64+0x115/0x840 [ 618.276400][T26616] ? clear_bhb_loop+0x40/0x90 [ 618.276418][T26616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.276434][T26616] RIP: 0033:0x7f5966f9e0d9 [ 618.276447][T26616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.276462][T26616] RSP: 002b:00007f5967f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 618.276477][T26616] RAX: ffffffffffffffda RBX: 00007f5967225fa0 RCX: 00007f5966f9e0d9 [ 618.276487][T26616] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 618.276496][T26616] RBP: 00007f5967035024 R08: 0000000000000000 R09: 0000000000000000 [ 618.276505][T26616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.276514][T26616] R13: 00007f5967226038 R14: 00007f5967225fa0 R15: 00007ffff1b4fb48 [ 618.276535][T26616] [ 619.006912][T26637] nbd: illegal input index -1024 [ 619.511848][T26657] netlink: 'syz.4.9857': attribute type 1 has an invalid length. [ 622.171216][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.184450][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.437057][T26763] netlink: 'syz.3.9906': attribute type 1 has an invalid length. [ 622.447666][T26764] netlink: 'syz.5.9907': attribute type 1 has an invalid length. [ 622.486587][T26764] netlink: 33 bytes leftover after parsing attributes in process `syz.5.9907'. [ 622.912897][T26782] nbd: must specify an index to disconnect [ 623.242022][T13700] ttyS ttyS0: 3 input overrun(s) [ 623.773030][T26811] FAULT_INJECTION: forcing a failure. [ 623.773030][T26811] name failslab, interval 1, probability 0, space 0, times 0 [ 623.840883][T26811] CPU: 0 UID: 0 PID: 26811 Comm: syz.4.9927 Tainted: G U L syzkaller #0 PREEMPT(full) [ 623.840911][T26811] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 623.840917][T26811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.840928][T26811] Call Trace: [ 623.840933][T26811] [ 623.840940][T26811] dump_stack_lvl+0x100/0x190 [ 623.840964][T26811] should_fail_ex.cold+0x5/0xa [ 623.840983][T26811] should_failslab+0xc2/0x120 [ 623.841005][T26811] __kmalloc_cache_noprof+0x91/0x6c0 [ 623.841022][T26811] ? proc_self_get_link+0x189/0x1f0 [ 623.841081][T26811] proc_self_get_link+0x189/0x1f0 [ 623.841106][T26811] pick_link+0xac2/0x13c0 [ 623.841128][T26811] ? __pfx_proc_self_get_link+0x10/0x10 [ 623.841153][T26811] step_into_slowpath+0x9ba/0xf90 [ 623.841179][T26811] ? __pfx_step_into_slowpath+0x10/0x10 [ 623.841204][T26811] ? lookup_fast+0x2da/0x600 [ 623.841223][T26811] ? inode_permission+0x374/0x620 [ 623.841244][T26811] link_path_walk+0xf28/0x1cc0 [ 623.841276][T26811] path_openat+0x1c9/0x4280 [ 623.841290][T26811] ? __kasan_slab_alloc+0x89/0x90 [ 623.841309][T26811] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 623.841326][T26811] ? do_getname+0x35/0x390 [ 623.841343][T26811] ? __x64_sys_openat+0x12d/0x210 [ 623.841369][T26811] ? __pfx_path_openat+0x10/0x10 [ 623.841389][T26811] do_file_open+0x20e/0x430 [ 623.841406][T26811] ? __pfx_do_file_open+0x10/0x10 [ 623.841435][T26811] ? alloc_fd+0x471/0x7a0 [ 623.841452][T26811] ? do_getname+0x191/0x390 [ 623.841471][T26811] do_sys_openat2+0x10f/0x1e0 [ 623.841491][T26811] ? __pfx_do_sys_openat2+0x10/0x10 [ 623.841510][T26811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 623.841537][T26811] __x64_sys_openat+0x12d/0x210 [ 623.841558][T26811] ? __pfx___x64_sys_openat+0x10/0x10 [ 623.841585][T26811] do_syscall_64+0x115/0x840 [ 623.841603][T26811] ? clear_bhb_loop+0x40/0x90 [ 623.841621][T26811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.841637][T26811] RIP: 0033:0x7f0a4299e0d9 [ 623.841654][T26811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.841669][T26811] RSP: 002b:00007f0a43851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 623.841685][T26811] RAX: ffffffffffffffda RBX: 00007f0a42c25fa0 RCX: 00007f0a4299e0d9 [ 623.841695][T26811] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 623.841705][T26811] RBP: 00007f0a42a35024 R08: 0000000000000000 R09: 0000000000000000 [ 623.841715][T26811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.841724][T26811] R13: 00007f0a42c26038 R14: 00007f0a42c25fa0 R15: 00007ffc93ccb098 [ 623.841744][T26811] [ 624.753982][T26838] netlink: 'syz.4.9940': attribute type 1 has an invalid length. [ 624.766468][T26840] FAULT_INJECTION: forcing a failure. [ 624.766468][T26840] name failslab, interval 1, probability 0, space 0, times 0 [ 624.783296][T26838] nbd: error processing sock list [ 624.795379][T26840] CPU: 0 UID: 0 PID: 26840 Comm: syz.3.9941 Tainted: G U L syzkaller #0 PREEMPT(full) [ 624.795410][T26840] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 624.795416][T26840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.795426][T26840] Call Trace: [ 624.795431][T26840] [ 624.795437][T26840] dump_stack_lvl+0x100/0x190 [ 624.795461][T26840] should_fail_ex.cold+0x5/0xa [ 624.795479][T26840] should_failslab+0xc2/0x120 [ 624.795501][T26840] kmem_cache_alloc_noprof+0x91/0x6a0 [ 624.795522][T26840] ? trace_kmem_cache_alloc+0xdd/0x100 [ 624.795542][T26840] ? security_file_alloc+0x34/0x2c0 [ 624.795569][T26840] security_file_alloc+0x34/0x2c0 [ 624.795590][T26840] init_file+0x95/0x480 [ 624.795608][T26840] alloc_empty_file+0x79/0x1c0 [ 624.795628][T26840] path_openat+0xe7/0x4280 [ 624.795642][T26840] ? __kasan_slab_alloc+0x89/0x90 [ 624.795660][T26840] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 624.795677][T26840] ? do_getname+0x35/0x390 [ 624.795694][T26840] ? do_sys_openat2+0xc7/0x1e0 [ 624.795711][T26840] ? __x64_sys_openat+0x12d/0x210 [ 624.795730][T26840] ? do_syscall_64+0x115/0x840 [ 624.795749][T26840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.795769][T26840] ? __pfx_path_openat+0x10/0x10 [ 624.795790][T26840] do_file_open+0x20e/0x430 [ 624.795807][T26840] ? __pfx_do_file_open+0x10/0x10 [ 624.795835][T26840] ? alloc_fd+0x471/0x7a0 [ 624.795851][T26840] ? do_getname+0x191/0x390 [ 624.795871][T26840] do_sys_openat2+0x10f/0x1e0 [ 624.795890][T26840] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.795910][T26840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 624.795936][T26840] __x64_sys_openat+0x12d/0x210 [ 624.795955][T26840] ? __pfx___x64_sys_openat+0x10/0x10 [ 624.795982][T26840] do_syscall_64+0x115/0x840 [ 624.796001][T26840] ? clear_bhb_loop+0x40/0x90 [ 624.796018][T26840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.796034][T26840] RIP: 0033:0x7fb7d459e0d9 [ 624.796050][T26840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.796066][T26840] RSP: 002b:00007fb7d5384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 624.796081][T26840] RAX: ffffffffffffffda RBX: 00007fb7d4825fa0 RCX: 00007fb7d459e0d9 [ 624.796092][T26840] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 624.796102][T26840] RBP: 00007fb7d4635024 R08: 0000000000000000 R09: 0000000000000000 [ 624.796112][T26840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.796121][T26840] R13: 00007fb7d4826038 R14: 00007fb7d4825fa0 R15: 00007ffdb18e5f38 [ 624.796141][T26840] [ 625.164116][T26845] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 625.398264][T26858] netlink: 'syz.3.9952': attribute type 1 has an invalid length. [ 629.101302][T27017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10027'. [ 629.230334][T27021] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 629.867843][T27045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10041'. [ 630.624117][T27079] netlink: 334 bytes leftover after parsing attributes in process `syz.3.10057'. [ 630.714031][T13889] Bluetooth: hci0: ACL packet too small [ 632.491267][T27160] openvswitch: netlink: Flow actions attr not present in new flow. [ 632.524780][T27162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10097'. [ 632.550181][T27166] netlink: Setting conntrack mark requires 'commit' flag. [ 633.173978][T27192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10111'. [ 633.893327][T27220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10125'. [ 633.934294][T27220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10125'. [ 635.327150][T27269] sctp: [Deprecated]: syz.1.10146 (pid 27269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.327150][T27269] Use struct sctp_sack_info instead [ 636.154025][T27301] netlink: 'syz.4.10161': attribute type 11 has an invalid length. [ 636.169564][T27301] netlink: 'syz.4.10161': attribute type 11 has an invalid length. [ 636.177699][T27301] netlink: 'syz.4.10161': attribute type 11 has an invalid length. [ 636.743183][T27326] netlink: zone id is out of range [ 638.778995][T27400] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10210'. [ 639.179003][T13889] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 639.211317][T26222] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 639.221824][T26222] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 639.231413][T26222] CPU: 0 UID: 0 PID: 26222 Comm: kworker/u12:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 639.231467][T26222] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 639.231474][T26222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.231485][T26222] Workqueue: hci0 hci_rx_work [ 639.231582][T26222] Call Trace: [ 639.231587][T26222] [ 639.231594][T26222] dump_stack_lvl+0x100/0x190 [ 639.231615][T26222] sysfs_warn_dup.cold+0x1c/0x28 [ 639.231648][T26222] sysfs_create_dir_ns+0x24b/0x2b0 [ 639.231701][T26222] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 639.231731][T26222] ? find_held_lock+0x2b/0x80 [ 639.231751][T26222] ? kobject_add_internal+0x25f/0x930 [ 639.231768][T26222] ? kobject_add_internal+0x25f/0x930 [ 639.231786][T26222] ? do_raw_spin_unlock+0x145/0x1e0 [ 639.231804][T26222] kobject_add_internal+0x2c8/0x930 [ 639.231823][T26222] kobject_add+0x16a/0x1e0 [ 639.231837][T26222] ? __pfx_kobject_add+0x10/0x10 [ 639.231851][T26222] ? class_to_subsys+0x10f/0x150 [ 639.231944][T26222] ? kobject_put+0xb9/0x640 [ 639.231957][T26222] ? _raw_spin_unlock+0x28/0x50 [ 639.231980][T26222] device_add+0x294/0x1970 [ 639.232007][T26222] ? __pfx_dev_set_name+0x10/0x10 [ 639.232047][T26222] ? __pfx_device_add+0x10/0x10 [ 639.232063][T26222] ? mgmt_send_event_skb+0x2fb/0x460 [ 639.232115][T26222] hci_conn_add_sysfs+0x1a3/0x260 [ 639.232179][T26222] le_conn_complete_evt+0x11eb/0x1f60 [ 639.232250][T26222] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 639.232268][T26222] ? __pfx_bt_warn+0x10/0x10 [ 639.232287][T26222] ? hci_event_packet+0x186/0xcd0 [ 639.232311][T26222] hci_le_conn_complete_evt+0x23c/0x3a0 [ 639.232332][T26222] ? skb_pull_data+0x15f/0x1e0 [ 639.232383][T26222] hci_le_meta_evt+0x34a/0x5f0 [ 639.232429][T26222] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 639.232452][T26222] hci_event_packet+0x51c/0xcd0 [ 639.232472][T26222] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 639.232493][T26222] ? __pfx_hci_event_packet+0x10/0x10 [ 639.232514][T26222] ? kcov_remote_start+0x384/0x670 [ 639.232536][T26222] ? lockdep_hardirqs_on+0x78/0x100 [ 639.232561][T26222] hci_rx_work+0x451/0xfc0 [ 639.232582][T26222] process_one_work+0xa23/0x1940 [ 639.232612][T26222] ? __pfx_process_one_work+0x10/0x10 [ 639.232642][T26222] ? __pfx_hci_rx_work+0x10/0x10 [ 639.232662][T26222] worker_thread+0x5ef/0xe50 [ 639.232688][T26222] ? __pfx_worker_thread+0x10/0x10 [ 639.232712][T26222] ? kthread+0x13a/0x450 [ 639.232744][T26222] ? __pfx_worker_thread+0x10/0x10 [ 639.232765][T26222] kthread+0x370/0x450 [ 639.232784][T26222] ? __pfx_kthread+0x10/0x10 [ 639.232805][T26222] ret_from_fork+0x72b/0xd50 [ 639.232826][T26222] ? __pfx_ret_from_fork+0x10/0x10 [ 639.232845][T26222] ? __switch_to+0x800/0x10f0 [ 639.232874][T26222] ? __switch_to_asm+0x39/0x70 [ 639.232895][T26222] ? __pfx_kthread+0x10/0x10 [ 639.232916][T26222] ret_from_fork_asm+0x1a/0x30 [ 639.232947][T26222] [ 639.835768][T26222] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 639.850664][T26222] Bluetooth: hci0: failed to register connection device [ 640.451255][T26222] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 640.477910][T26222] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 640.485983][T26222] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 640.498871][T26222] CPU: 0 UID: 0 PID: 26222 Comm: kworker/u12:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 640.498900][T26222] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 640.498906][T26222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.498917][T26222] Workqueue: hci1 hci_rx_work [ 640.498942][T26222] Call Trace: [ 640.498948][T26222] [ 640.498955][T26222] dump_stack_lvl+0x100/0x190 [ 640.498976][T26222] sysfs_warn_dup.cold+0x1c/0x28 [ 640.498999][T26222] sysfs_create_dir_ns+0x24b/0x2b0 [ 640.499024][T26222] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 640.499044][T26222] ? find_held_lock+0x2b/0x80 [ 640.499066][T26222] ? kobject_add_internal+0x25f/0x930 [ 640.499081][T26222] ? kobject_add_internal+0x25f/0x930 [ 640.499098][T26222] ? do_raw_spin_unlock+0x145/0x1e0 [ 640.499117][T26222] kobject_add_internal+0x2c8/0x930 [ 640.499135][T26222] kobject_add+0x16a/0x1e0 [ 640.499150][T26222] ? __pfx_kobject_add+0x10/0x10 [ 640.499164][T26222] ? class_to_subsys+0x10f/0x150 [ 640.499184][T26222] ? kobject_put+0xb9/0x640 [ 640.499196][T26222] ? _raw_spin_unlock+0x28/0x50 [ 640.499218][T26222] device_add+0x294/0x1970 [ 640.499234][T26222] ? __pfx_dev_set_name+0x10/0x10 [ 640.499251][T26222] ? __pfx_device_add+0x10/0x10 [ 640.499267][T26222] ? mgmt_send_event_skb+0x2fb/0x460 [ 640.499292][T26222] hci_conn_add_sysfs+0x1a3/0x260 [ 640.499314][T26222] le_conn_complete_evt+0x11eb/0x1f60 [ 640.499339][T26222] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 640.499356][T26222] ? __pfx_bt_warn+0x10/0x10 [ 640.499369][T26222] ? hci_event_packet+0x186/0xcd0 [ 640.499392][T26222] hci_le_conn_complete_evt+0x23c/0x3a0 [ 640.499412][T26222] ? skb_pull_data+0x15f/0x1e0 [ 640.499431][T26222] hci_le_meta_evt+0x34a/0x5f0 [ 640.499451][T26222] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 640.499473][T26222] hci_event_packet+0x51c/0xcd0 [ 640.499491][T26222] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 640.499512][T26222] ? __pfx_hci_event_packet+0x10/0x10 [ 640.499534][T26222] ? kcov_remote_start+0x384/0x670 [ 640.499555][T26222] ? lockdep_hardirqs_on+0x78/0x100 [ 640.499579][T26222] hci_rx_work+0x451/0xfc0 [ 640.499601][T26222] process_one_work+0xa23/0x1940 [ 640.499639][T26222] ? __pfx_process_one_work+0x10/0x10 [ 640.499667][T26222] ? __pfx_hci_rx_work+0x10/0x10 [ 640.499688][T26222] worker_thread+0x5ef/0xe50 [ 640.499721][T26222] ? __pfx_worker_thread+0x10/0x10 [ 640.499743][T26222] ? kthread+0x13a/0x450 [ 640.499763][T26222] ? __pfx_worker_thread+0x10/0x10 [ 640.499783][T26222] kthread+0x370/0x450 [ 640.499802][T26222] ? __pfx_kthread+0x10/0x10 [ 640.499823][T26222] ret_from_fork+0x72b/0xd50 [ 640.499842][T26222] ? __pfx_ret_from_fork+0x10/0x10 [ 640.499862][T26222] ? __switch_to+0x800/0x10f0 [ 640.499890][T26222] ? __switch_to_asm+0x39/0x70 [ 640.499911][T26222] ? __pfx_kthread+0x10/0x10 [ 640.499932][T26222] ret_from_fork_asm+0x1a/0x30 [ 640.499962][T26222] [ 640.500951][T26222] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 640.831535][T26222] Bluetooth: hci1: failed to register connection device [ 641.186186][T26222] Bluetooth: hci0: command 0x0406 tx timeout [ 641.387370][T27473] HSR: entered promiscuous mode [ 641.957688][T27489] netlink: 'syz.3.10247': attribute type 2 has an invalid length. [ 642.456893][T26222] Bluetooth: hci1: command 0x0406 tx timeout [ 642.677941][T27516] block nbd2: not configured, cannot reconfigure [ 642.710711][T27520] FAULT_INJECTION: forcing a failure. [ 642.710711][T27520] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 642.804994][T27520] CPU: 0 UID: 0 PID: 27520 Comm: syz.1.10262 Tainted: G U L syzkaller #0 PREEMPT(full) [ 642.805024][T27520] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 642.805030][T27520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.805040][T27520] Call Trace: [ 642.805045][T27520] [ 642.805052][T27520] dump_stack_lvl+0x100/0x190 [ 642.805083][T27520] should_fail_ex.cold+0x5/0xa [ 642.805098][T27520] ? prepare_alloc_pages+0x16d/0x5f0 [ 642.805123][T27520] should_fail_alloc_page+0xeb/0x140 [ 642.805147][T27520] prepare_alloc_pages+0x1f0/0x5f0 [ 642.805168][T27520] ? rcu_is_watching+0x12/0xc0 [ 642.805189][T27520] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 642.805219][T27520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 642.805236][T27520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 642.805256][T27520] ? rcu_is_watching+0x12/0xc0 [ 642.805275][T27520] ? trace_mm_page_alloc+0x164/0x1c0 [ 642.805302][T27520] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 642.805329][T27520] ? __lock_acquire+0x49f/0x1a40 [ 642.805351][T27520] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 642.805376][T27520] ? policy_nodemask+0xed/0x4f0 [ 642.805400][T27520] alloc_pages_mpol+0x1fb/0x540 [ 642.805423][T27520] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 642.805444][T27520] ? find_held_lock+0x2b/0x80 [ 642.805461][T27520] ? __pud_alloc+0x4f6/0x690 [ 642.805482][T27520] ? __pud_alloc+0x4f6/0x690 [ 642.805512][T27520] alloc_pages_noprof+0x1a/0x160 [ 642.805528][T27520] __pmd_alloc+0x3b/0x950 [ 642.805548][T27520] ? __pud_alloc+0x4fb/0x690 [ 642.805571][T27520] walk_to_pmd+0x3a3/0x4c0 [ 642.805595][T27520] get_locked_pte+0x25/0xc0 [ 642.805618][T27520] map_ldt_struct+0x3c1/0xa70 [ 642.805644][T27520] ? __pfx_map_ldt_struct+0x10/0x10 [ 642.805666][T27520] ? alloc_pages_noprof+0xf9/0x160 [ 642.805683][T27520] write_ldt+0x6d3/0xd40 [ 642.805706][T27520] ? __pfx_write_ldt+0x10/0x10 [ 642.805728][T27520] ? xfd_validate_state+0x129/0x190 [ 642.805751][T27520] __x64_sys_modify_ldt+0xb1/0x170 [ 642.805777][T27520] do_syscall_64+0x115/0x840 [ 642.805799][T27520] ? clear_bhb_loop+0x40/0x90 [ 642.805820][T27520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.805836][T27520] RIP: 0033:0x7f5966f9e0d9 [ 642.805850][T27520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.805865][T27520] RSP: 002b:00007f5967f13028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 642.805880][T27520] RAX: ffffffffffffffda RBX: 00007f5967225fa0 RCX: 00007f5966f9e0d9 [ 642.805890][T27520] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 642.805900][T27520] RBP: 00007f5967035024 R08: 0000000000000000 R09: 0000000000000000 [ 642.805910][T27520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.805919][T27520] R13: 00007f5967226038 R14: 00007f5967225fa0 R15: 00007ffff1b4fb48 [ 642.805940][T27520] [ 643.216404][T27526] openvswitch: netlink: IP tunnel dst address not specified [ 643.481511][T26222] Bluetooth: hci0: command 0x0406 tx timeout [ 643.502584][T27541] dyndbg: expected <4096 bytes into control [ 644.529501][T26222] Bluetooth: hci1: command 0x0406 tx timeout [ 645.482471][T26222] Bluetooth: hci0: command 0x0406 tx timeout [ 645.495304][T27621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10312'. [ 646.432116][T27660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10328'. [ 646.600053][T13889] Bluetooth: hci1: command 0x0406 tx timeout [ 646.924989][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10335'. [ 646.944386][T27676] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 647.550155][T27423] Bluetooth: hci0: command 0x0406 tx timeout [ 647.787095][T27714] netlink: 'syz.1.10354': attribute type 11 has an invalid length. [ 647.823529][T27714] netlink: 'syz.1.10354': attribute type 11 has an invalid length. [ 647.860925][T27714] netlink: 'syz.1.10354': attribute type 11 has an invalid length. [ 648.131607][T27726] openvswitch: netlink: Message has 4 unknown bytes. [ 648.664378][T27423] Bluetooth: hci1: command 0x0406 tx timeout [ 649.558132][T27783] netlink: NAT attribute has 5 unknown bytes [ 649.703014][T27423] Bluetooth: hci3: command 0x0406 tx timeout [ 650.107560][T27805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10397'. [ 650.364047][T27809] NFSD: Failed to start, no listeners configured. [ 651.328056][T27844] NFSD: Failed to start, no listeners configured. [ 652.005888][T27871] openvswitch: netlink: Message has 4 unknown bytes. [ 653.095934][T13889] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 653.140429][T13889] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 653.166778][T13889] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 653.176941][T13889] CPU: 0 UID: 0 PID: 13889 Comm: kworker/u12:4 Tainted: G U L syzkaller #0 PREEMPT(full) [ 653.176970][T13889] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 653.176976][T13889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.176987][T13889] Workqueue: hci3 hci_rx_work [ 653.177010][T13889] Call Trace: [ 653.177015][T13889] [ 653.177022][T13889] dump_stack_lvl+0x100/0x190 [ 653.177042][T13889] sysfs_warn_dup.cold+0x1c/0x28 [ 653.177065][T13889] sysfs_create_dir_ns+0x24b/0x2b0 [ 653.177089][T13889] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 653.177109][T13889] ? find_held_lock+0x2b/0x80 [ 653.177128][T13889] ? kobject_add_internal+0x25f/0x930 [ 653.177143][T13889] ? kobject_add_internal+0x25f/0x930 [ 653.177159][T13889] ? do_raw_spin_unlock+0x145/0x1e0 [ 653.177177][T13889] kobject_add_internal+0x2c8/0x930 [ 653.177195][T13889] kobject_add+0x16a/0x1e0 [ 653.177210][T13889] ? __pfx_kobject_add+0x10/0x10 [ 653.177223][T13889] ? class_to_subsys+0x10f/0x150 [ 653.177243][T13889] ? kobject_put+0xb9/0x640 [ 653.177255][T13889] ? _raw_spin_unlock+0x28/0x50 [ 653.177277][T13889] device_add+0x294/0x1970 [ 653.177291][T13889] ? __pfx_dev_set_name+0x10/0x10 [ 653.177309][T13889] ? __pfx_device_add+0x10/0x10 [ 653.177324][T13889] ? mgmt_send_event_skb+0x2fb/0x460 [ 653.177348][T13889] hci_conn_add_sysfs+0x1a3/0x260 [ 653.177371][T13889] le_conn_complete_evt+0x11eb/0x1f60 [ 653.177395][T13889] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 653.177413][T13889] ? __pfx_bt_warn+0x10/0x10 [ 653.177426][T13889] ? hci_event_packet+0x186/0xcd0 [ 653.177448][T13889] hci_le_conn_complete_evt+0x23c/0x3a0 [ 653.177468][T13889] ? skb_pull_data+0x15f/0x1e0 [ 653.177487][T13889] hci_le_meta_evt+0x34a/0x5f0 [ 653.177507][T13889] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 653.177537][T13889] hci_event_packet+0x51c/0xcd0 [ 653.177556][T13889] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 653.177578][T13889] ? __pfx_hci_event_packet+0x10/0x10 [ 653.177599][T13889] ? kcov_remote_start+0x384/0x670 [ 653.177621][T13889] ? lockdep_hardirqs_on+0x78/0x100 [ 653.177645][T13889] hci_rx_work+0x451/0xfc0 [ 653.177669][T13889] process_one_work+0xa23/0x1940 [ 653.177699][T13889] ? __pfx_process_one_work+0x10/0x10 [ 653.177725][T13889] ? __pfx_hci_rx_work+0x10/0x10 [ 653.177745][T13889] worker_thread+0x5ef/0xe50 [ 653.177771][T13889] ? __pfx_worker_thread+0x10/0x10 [ 653.177793][T13889] ? kthread+0x13a/0x450 [ 653.177810][T13889] ? __pfx_worker_thread+0x10/0x10 [ 653.177830][T13889] kthread+0x370/0x450 [ 653.177848][T13889] ? __pfx_kthread+0x10/0x10 [ 653.177868][T13889] ret_from_fork+0x72b/0xd50 [ 653.177888][T13889] ? __pfx_ret_from_fork+0x10/0x10 [ 653.177907][T13889] ? __switch_to+0x800/0x10f0 [ 653.177928][T13889] ? __switch_to_asm+0x39/0x70 [ 653.177948][T13889] ? __pfx_kthread+0x10/0x10 [ 653.177968][T13889] ret_from_fork_asm+0x1a/0x30 [ 653.177997][T13889] [ 653.178031][T13889] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 653.506246][T13889] Bluetooth: hci3: failed to register connection device [ 653.969559][T27929] NFSD: Failed to start, no listeners configured. [ 655.111058][T13889] Bluetooth: hci3: command 0x0406 tx timeout [ 656.024216][T13889] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 656.061017][T13889] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 656.071103][T13889] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 656.080960][T13889] CPU: 0 UID: 0 PID: 13889 Comm: kworker/u12:4 Tainted: G U L syzkaller #0 PREEMPT(full) [ 656.080987][T13889] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 656.080993][T13889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.081004][T13889] Workqueue: hci2 hci_rx_work [ 656.081027][T13889] Call Trace: [ 656.081032][T13889] [ 656.081038][T13889] dump_stack_lvl+0x100/0x190 [ 656.081059][T13889] sysfs_warn_dup.cold+0x1c/0x28 [ 656.081081][T13889] sysfs_create_dir_ns+0x24b/0x2b0 [ 656.081105][T13889] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 656.081125][T13889] ? find_held_lock+0x2b/0x80 [ 656.081144][T13889] ? kobject_add_internal+0x25f/0x930 [ 656.081160][T13889] ? kobject_add_internal+0x25f/0x930 [ 656.081177][T13889] ? do_raw_spin_unlock+0x145/0x1e0 [ 656.081195][T13889] kobject_add_internal+0x2c8/0x930 [ 656.081213][T13889] kobject_add+0x16a/0x1e0 [ 656.081228][T13889] ? __pfx_kobject_add+0x10/0x10 [ 656.081246][T13889] ? class_to_subsys+0x10f/0x150 [ 656.081266][T13889] ? kobject_put+0xb9/0x640 [ 656.081278][T13889] ? _raw_spin_unlock+0x28/0x50 [ 656.081300][T13889] device_add+0x294/0x1970 [ 656.081315][T13889] ? __pfx_dev_set_name+0x10/0x10 [ 656.081333][T13889] ? __pfx_device_add+0x10/0x10 [ 656.081350][T13889] ? mgmt_send_event_skb+0x2fb/0x460 [ 656.081374][T13889] hci_conn_add_sysfs+0x1a3/0x260 [ 656.081396][T13889] le_conn_complete_evt+0x11eb/0x1f60 [ 656.081421][T13889] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 656.081438][T13889] ? __pfx_bt_warn+0x10/0x10 [ 656.081451][T13889] ? hci_event_packet+0x186/0xcd0 [ 656.081474][T13889] hci_le_conn_complete_evt+0x23c/0x3a0 [ 656.081493][T13889] ? skb_pull_data+0x15f/0x1e0 [ 656.081512][T13889] hci_le_meta_evt+0x34a/0x5f0 [ 656.081531][T13889] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 656.081553][T13889] hci_event_packet+0x51c/0xcd0 [ 656.081571][T13889] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 656.081592][T13889] ? __pfx_hci_event_packet+0x10/0x10 [ 656.081612][T13889] ? kcov_remote_start+0x384/0x670 [ 656.081633][T13889] ? lockdep_hardirqs_on+0x78/0x100 [ 656.081657][T13889] hci_rx_work+0x451/0xfc0 [ 656.081679][T13889] process_one_work+0xa23/0x1940 [ 656.081708][T13889] ? __pfx_process_one_work+0x10/0x10 [ 656.081744][T13889] ? __pfx_hci_rx_work+0x10/0x10 [ 656.081765][T13889] worker_thread+0x5ef/0xe50 [ 656.081792][T13889] ? __pfx_worker_thread+0x10/0x10 [ 656.081815][T13889] ? kthread+0x13a/0x450 [ 656.081833][T13889] ? __pfx_worker_thread+0x10/0x10 [ 656.081854][T13889] kthread+0x370/0x450 [ 656.081873][T13889] ? __pfx_kthread+0x10/0x10 [ 656.081893][T13889] ret_from_fork+0x72b/0xd50 [ 656.081913][T13889] ? __pfx_ret_from_fork+0x10/0x10 [ 656.081932][T13889] ? __switch_to+0x800/0x10f0 [ 656.081953][T13889] ? __switch_to_asm+0x39/0x70 [ 656.081972][T13889] ? __pfx_kthread+0x10/0x10 [ 656.081995][T13889] ret_from_fork_asm+0x1a/0x30 [ 656.082025][T13889] [ 656.082061][T13889] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 656.418027][T13889] Bluetooth: hci2: failed to register connection device [ 657.180019][T13889] Bluetooth: hci3: command 0x0406 tx timeout [ 658.055454][T13889] Bluetooth: hci2: command 0x0406 tx timeout [ 658.163915][T28074] FAULT_INJECTION: forcing a failure. [ 658.163915][T28074] name failslab, interval 1, probability 0, space 0, times 0 [ 658.234484][T28074] CPU: 0 UID: 0 PID: 28074 Comm: syz.5.10527 Tainted: G U L syzkaller #0 PREEMPT(full) [ 658.234514][T28074] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 658.234520][T28074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 658.234530][T28074] Call Trace: [ 658.234535][T28074] [ 658.234542][T28074] dump_stack_lvl+0x100/0x190 [ 658.234565][T28074] should_fail_ex.cold+0x5/0xa [ 658.234584][T28074] should_failslab+0xc2/0x120 [ 658.234605][T28074] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 658.234624][T28074] ? __mod_timer+0x40e/0xca0 [ 658.234640][T28074] ? __d_alloc+0x35/0xa50 [ 658.234659][T28074] __d_alloc+0x35/0xa50 [ 658.234676][T28074] d_alloc_pseudo+0x1c/0xc0 [ 658.234697][T28074] alloc_file_pseudo+0x118/0x290 [ 658.234718][T28074] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 658.234738][T28074] ? alloc_fd+0x471/0x7a0 [ 658.234755][T28074] sock_alloc_file+0x50/0x210 [ 658.234782][T28074] __sys_socket+0x1c0/0x260 [ 658.234800][T28074] ? __pfx___sys_socket+0x10/0x10 [ 658.234823][T28074] __x64_sys_socket+0x72/0xb0 [ 658.234844][T28074] ? lockdep_hardirqs_on+0x78/0x100 [ 658.234863][T28074] do_syscall_64+0x115/0x840 [ 658.234883][T28074] ? clear_bhb_loop+0x40/0x90 [ 658.234901][T28074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.234916][T28074] RIP: 0033:0x7fe11df9e0d9 [ 658.234929][T28074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.234944][T28074] RSP: 002b:00007fe11eee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 658.234959][T28074] RAX: ffffffffffffffda RBX: 00007fe11e225fa0 RCX: 00007fe11df9e0d9 [ 658.234969][T28074] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 658.234978][T28074] RBP: 00007fe11e035024 R08: 0000000000000000 R09: 0000000000000000 [ 658.234986][T28074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.234995][T28074] R13: 00007fe11e226038 R14: 00007fe11e225fa0 R15: 00007fff0663cb58 [ 658.235015][T28074] [ 658.672105][T28088] netlink: 'syz.3.10535': attribute type 4 has an invalid length. [ 658.730524][T28088] netlink: 'syz.3.10535': attribute type 1 has an invalid length. [ 659.276284][T26222] Bluetooth: hci3: command 0x0406 tx timeout [ 659.475577][T27423] Bluetooth: hci1: SCO packet too small [ 660.124984][T27423] Bluetooth: hci2: command 0x0406 tx timeout [ 660.711891][T28179] netlink: 'syz.5.10577': attribute type 8 has an invalid length. [ 660.867004][T28183] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 661.318626][T27423] Bluetooth: hci3: command 0x0406 tx timeout [ 661.768598][T28223] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 661.911827][T27423] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 661.953156][T27423] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 661.968592][T27423] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 661.978195][T27423] CPU: 0 UID: 0 PID: 27423 Comm: kworker/u12:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 661.978224][T27423] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 661.978229][T27423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.978240][T27423] Workqueue: hci0 hci_rx_work [ 661.978265][T27423] Call Trace: [ 661.978270][T27423] [ 661.978277][T27423] dump_stack_lvl+0x100/0x190 [ 661.978297][T27423] sysfs_warn_dup.cold+0x1c/0x28 [ 661.978320][T27423] sysfs_create_dir_ns+0x24b/0x2b0 [ 661.978344][T27423] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 661.978365][T27423] ? find_held_lock+0x2b/0x80 [ 661.978383][T27423] ? kobject_add_internal+0x25f/0x930 [ 661.978398][T27423] ? kobject_add_internal+0x25f/0x930 [ 661.978415][T27423] ? do_raw_spin_unlock+0x145/0x1e0 [ 661.978432][T27423] kobject_add_internal+0x2c8/0x930 [ 661.978450][T27423] kobject_add+0x16a/0x1e0 [ 661.978465][T27423] ? __pfx_kobject_add+0x10/0x10 [ 661.978478][T27423] ? class_to_subsys+0x10f/0x150 [ 661.978498][T27423] ? kobject_put+0xb9/0x640 [ 661.978510][T27423] ? _raw_spin_unlock+0x28/0x50 [ 661.978532][T27423] device_add+0x294/0x1970 [ 661.978547][T27423] ? __pfx_dev_set_name+0x10/0x10 [ 661.978564][T27423] ? __pfx_device_add+0x10/0x10 [ 661.978579][T27423] ? mgmt_send_event_skb+0x2fb/0x460 [ 661.978603][T27423] hci_conn_add_sysfs+0x1a3/0x260 [ 661.978626][T27423] le_conn_complete_evt+0x11eb/0x1f60 [ 661.978650][T27423] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 661.978667][T27423] ? __pfx_bt_warn+0x10/0x10 [ 661.978680][T27423] ? hci_event_packet+0x186/0xcd0 [ 661.978702][T27423] hci_le_conn_complete_evt+0x23c/0x3a0 [ 661.978722][T27423] ? skb_pull_data+0x15f/0x1e0 [ 661.978740][T27423] hci_le_meta_evt+0x34a/0x5f0 [ 661.978780][T27423] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 661.978803][T27423] hci_event_packet+0x51c/0xcd0 [ 661.978823][T27423] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 661.978844][T27423] ? __pfx_hci_event_packet+0x10/0x10 [ 661.978866][T27423] ? kcov_remote_start+0x384/0x670 [ 661.978888][T27423] ? lockdep_hardirqs_on+0x78/0x100 [ 661.978912][T27423] hci_rx_work+0x451/0xfc0 [ 661.978933][T27423] process_one_work+0xa23/0x1940 [ 661.978963][T27423] ? __pfx_process_one_work+0x10/0x10 [ 661.978990][T27423] ? __pfx_hci_rx_work+0x10/0x10 [ 661.979009][T27423] worker_thread+0x5ef/0xe50 [ 661.979035][T27423] ? __pfx_worker_thread+0x10/0x10 [ 661.979057][T27423] ? kthread+0x13a/0x450 [ 661.979075][T27423] ? __pfx_worker_thread+0x10/0x10 [ 661.979094][T27423] kthread+0x370/0x450 [ 661.979112][T27423] ? __pfx_kthread+0x10/0x10 [ 661.979133][T27423] ret_from_fork+0x72b/0xd50 [ 661.979152][T27423] ? __pfx_ret_from_fork+0x10/0x10 [ 661.979170][T27423] ? rcu_is_watching+0x12/0xc0 [ 661.979188][T27423] ? __switch_to+0x800/0x10f0 [ 661.979209][T27423] ? __switch_to_asm+0x39/0x70 [ 661.979228][T27423] ? __pfx_kthread+0x10/0x10 [ 661.979248][T27423] ret_from_fork_asm+0x1a/0x30 [ 661.979277][T27423] [ 661.979298][T27423] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 662.304738][T27423] Bluetooth: hci0: failed to register connection device [ 662.311855][T13844] Bluetooth: hci2: command 0x0406 tx timeout [ 663.945756][T13889] Bluetooth: hci0: command 0x0406 tx timeout [ 664.343155][T13889] Bluetooth: hci2: command 0x0406 tx timeout [ 665.477124][ T29] audit: type=1326 audit(4294967305.524:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28349 comm="syz.5.10660" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11df9e0d9 code=0x0 [ 665.536073][T28356] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 666.015152][T13889] Bluetooth: hci0: command 0x0406 tx timeout [ 666.586813][T28394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10680'. [ 667.198845][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10691'. [ 668.083216][T13889] Bluetooth: hci0: command 0x0406 tx timeout [ 668.298166][T28463] openvswitch: netlink: IP tunnel TTL not specified. [ 669.887093][T28527] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.10745'. [ 670.153356][T26222] Bluetooth: hci0: command 0x0406 tx timeout [ 671.202701][T28585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10774'. [ 673.285164][T28676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10817'. [ 673.698511][T28691] FAULT_INJECTION: forcing a failure. [ 673.698511][T28691] name failslab, interval 1, probability 0, space 0, times 0 [ 673.789959][T28691] CPU: 0 UID: 0 PID: 28691 Comm: syz.5.10824 Tainted: G U L syzkaller #0 PREEMPT(full) [ 673.789987][T28691] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 673.789993][T28691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.790003][T28691] Call Trace: [ 673.790009][T28691] [ 673.790014][T28691] dump_stack_lvl+0x100/0x190 [ 673.790038][T28691] should_fail_ex.cold+0x5/0xa [ 673.790056][T28691] should_failslab+0xc2/0x120 [ 673.790079][T28691] kmem_cache_alloc_noprof+0x91/0x6a0 [ 673.790098][T28691] ? __pfx___might_resched+0x10/0x10 [ 673.790121][T28691] ? alloc_vfsmnt+0x23/0x710 [ 673.790242][T28691] alloc_vfsmnt+0x23/0x710 [ 673.790262][T28691] clone_mnt+0x4b/0x930 [ 673.790287][T28691] copy_mnt_ns+0x8a1/0x1180 [ 673.790310][T28691] ? __pfx_copy_mnt_ns+0x10/0x10 [ 673.790328][T28691] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 673.790347][T28691] ? create_new_namespaces+0x30/0xac0 [ 673.790366][T28691] create_new_namespaces+0xd3/0xac0 [ 673.790382][T28691] ? bpf_lsm_capable+0x9/0x10 [ 673.790399][T28691] ? security_capable+0x80/0x260 [ 673.790418][T28691] unshare_nsproxy_namespaces+0xf2/0x220 [ 673.790436][T28691] ksys_unshare+0x438/0xab0 [ 673.790456][T28691] ? __pfx_ksys_unshare+0x10/0x10 [ 673.790482][T28691] __x64_sys_unshare+0x31/0x40 [ 673.790501][T28691] do_syscall_64+0x115/0x840 [ 673.790521][T28691] ? clear_bhb_loop+0x40/0x90 [ 673.790539][T28691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.790556][T28691] RIP: 0033:0x7fe11df9e0d9 [ 673.790570][T28691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.790585][T28691] RSP: 002b:00007fe11eee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 673.790600][T28691] RAX: ffffffffffffffda RBX: 00007fe11e225fa0 RCX: 00007fe11df9e0d9 [ 673.790609][T28691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 673.790618][T28691] RBP: 00007fe11e035024 R08: 0000000000000000 R09: 0000000000000000 [ 673.790627][T28691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.790644][T28691] R13: 00007fe11e226038 R14: 00007fe11e225fa0 R15: 00007fff0663cb58 [ 673.790665][T28691] [ 674.801754][T28725] netlink: 334 bytes leftover after parsing attributes in process `syz.3.10840'. [ 674.988815][T28729] netlink: 13 bytes leftover after parsing attributes in process `syz.5.10842'. [ 675.327855][T28742] bridge0: port 3(veth0_to_bridge) entered blocking state [ 675.352242][T28742] bridge0: port 3(veth0_to_bridge) entered disabled state [ 675.381604][T28742] veth0_to_bridge: entered allmulticast mode [ 675.412806][T28742] veth0_to_bridge: entered promiscuous mode [ 675.440098][T28742] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.509555][T28742] bridge0: port 3(veth0_to_bridge) entered blocking state [ 675.518709][T28742] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 676.922201][T28793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10870'. [ 677.821698][T28829] netlink: 82 bytes leftover after parsing attributes in process `syz.5.10889'. [ 677.945196][T28833] netlink: 29 bytes leftover after parsing attributes in process `syz.1.10892'. [ 681.167282][T28924] netlink: 'syz.4.10931': attribute type 2 has an invalid length. [ 681.842968][T28951] netlink: 186 bytes leftover after parsing attributes in process `syz.1.10943'. [ 682.720417][T28985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10959'. [ 683.092746][T28999] netlink: 'syz.5.10966': attribute type 1 has an invalid length. [ 683.294492][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.301068][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.332642][T29061] netlink: 'syz.1.10995': attribute type 23 has an invalid length. [ 685.660307][T29071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10999'. [ 686.292823][T26222] Bluetooth: hci2: Malformed HCI Event [ 688.860390][T29187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11055'. [ 688.871124][T29188] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 688.879833][T29188] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 689.310892][T29204] vivid-007: ================= START STATUS ================= [ 689.366334][T29204] vivid-007: Generate PTS: true [ 689.431867][T29204] vivid-007: Generate SCR: true [ 689.455662][T29204] tpg source WxH: 320x240 (Y'CbCr) [ 689.483745][T29204] tpg field: 1 [ 689.495361][T29204] tpg crop: (0,0)/320x240 [ 689.511353][T29204] tpg compose: (0,0)/320x240 [ 689.539481][T29204] tpg colorspace: 8 [ 689.565414][T29204] tpg transfer function: 0/0 [ 689.584178][T29204] tpg Y'CbCr encoding: 0/0 [ 689.607469][T29204] tpg quantization: 0/0 [ 689.636697][T29204] tpg RGB range: 0/2 [ 689.655369][T29204] vivid-007: ================== END STATUS ================== [ 690.893995][T29270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11092'. [ 693.750847][T29374] openvswitch: netlink: IPv4 tunnel dst address is zero [ 693.830510][ T29] audit: type=1800 audit(4294967334.022:43): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11139" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 694.084372][T29387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11142'. [ 695.275179][T29439] futex_wake_op: syz.3.11167 tries to shift op by -2048; fix this program [ 695.320623][T29439] futex_wake_op: syz.3.11167 tries to shift op by -2048; fix this program [ 695.789642][T29459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11177'. [ 696.778252][T29497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11195'. [ 697.382820][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11206'. [ 697.553887][T29527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11209'. [ 699.088601][T29592] netlink: 206 bytes leftover after parsing attributes in process `syz.1.11239'. [ 699.325542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.338557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.351306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.363605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.375905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.388180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.400458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.412737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.424996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.437257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.305023][ C0] net_ratelimit: 21543 callbacks suppressed [ 704.305040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.323333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.335581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.347977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.360318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.372702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.385006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.397473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.409851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.422150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.288775][ C0] net_ratelimit: 21600 callbacks suppressed [ 709.288793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.307325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.319651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.331900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.344247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.356679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.368939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.381208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.393463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.405814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.272920][ C0] net_ratelimit: 21158 callbacks suppressed [ 714.272937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.291453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.303926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.316450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.328961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.341411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.353913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.366223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.378536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.390868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.257057][ C0] net_ratelimit: 21434 callbacks suppressed [ 719.257075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.275318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.287624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.299897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.312148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.325070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.337354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.349606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.361887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.374142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.241013][ C0] net_ratelimit: 21103 callbacks suppressed [ 724.241031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.259362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.271675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.283950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.296263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.308555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.320852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.333132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.345740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.358210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.225172][ C0] net_ratelimit: 21859 callbacks suppressed [ 729.225195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.243486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.256207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.268794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.281264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.293578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.305853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.318433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.330891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.343349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.209241][ C0] net_ratelimit: 21823 callbacks suppressed [ 734.209259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.227664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.239932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.252206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.264505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.277582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.289933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.302416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.314754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.327110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.193347][ C0] net_ratelimit: 21895 callbacks suppressed [ 739.193364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.211863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.224167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.236519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.248794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.261071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.273397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.285769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.298286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.310635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.177349][ C0] net_ratelimit: 22147 callbacks suppressed [ 744.177368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.195619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.208036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.220375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.232855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.245201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.257702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.270165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.282976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.295357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.161558][ C0] net_ratelimit: 22240 callbacks suppressed [ 749.161575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.179883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.192193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.204523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.216787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.229038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.241290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.253620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.265974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.278257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.145566][ C0] net_ratelimit: 22047 callbacks suppressed [ 754.145583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.163835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.176193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.188524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.200753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.212987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.225238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.237485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.249717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.262071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.129624][ C0] net_ratelimit: 21911 callbacks suppressed [ 759.129642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.147888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.160194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.172466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.184824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.197063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.209377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.221599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.233842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.246257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.113823][ C0] net_ratelimit: 21933 callbacks suppressed [ 764.113840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.132115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.144372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.156620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.168852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.181153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.193479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.205743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.218216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.230578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.098009][ C0] net_ratelimit: 22261 callbacks suppressed [ 769.098035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.116289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.128556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.140884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.153233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.165510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.177793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.190030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.202434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.214978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.081964][ C0] net_ratelimit: 21950 callbacks suppressed [ 774.081984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.100295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.112547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.124771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.137009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.149253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.161632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.173970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.186872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.199130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.065902][ C0] net_ratelimit: 21929 callbacks suppressed [ 779.065919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.084227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.096573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.108882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.121135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.133403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.145693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.157945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.170706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.183067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.852321][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 784.050087][ C0] net_ratelimit: 21975 callbacks suppressed [ 784.050106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.068317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.080765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.093195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.105505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.117762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.130151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.142569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.154923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.167260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.034299][ C0] net_ratelimit: 21911 callbacks suppressed [ 789.034315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.052553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.064791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.077159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.089434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.101974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.114253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.126857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.139218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.151511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.018175][ C0] net_ratelimit: 21924 callbacks suppressed [ 794.018193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.036411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.048685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.061053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.073386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.085663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.097911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.110200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.122523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.134785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.002304][ C0] net_ratelimit: 22196 callbacks suppressed [ 799.002321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.020548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.032801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.045077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.057402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.069688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.081989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.094252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.106515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.118893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.986357][ C0] net_ratelimit: 22296 callbacks suppressed [ 803.986376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.004594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.016863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.029128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.041371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.053623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.065876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.078129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.090400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.102777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.970422][ C0] net_ratelimit: 21866 callbacks suppressed [ 808.970440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.988695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.000933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.013328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.025592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.037840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.050078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.062682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.074988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.087283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.954565][ C0] net_ratelimit: 21678 callbacks suppressed [ 813.954584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.972849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.985377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.997718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.009989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.022214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.034513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.046775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.059108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.071527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.938729][ C0] net_ratelimit: 21848 callbacks suppressed [ 818.938748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.957049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.969296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.981568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.993933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.006408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.018781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.031082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.043328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.055575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.922876][ C0] net_ratelimit: 21788 callbacks suppressed [ 823.922894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.941094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.953433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.965767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.978090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.990401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.002658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.014925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.027187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.039538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.091352][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 826.098345][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25112/1:b..l P187/1:b..l [ 826.107964][ C0] rcu: (detected by 0, t=10502 jiffies, g=244149, q=980 ncpus=1) [ 826.115769][ C0] task:kworker/0:2 state:R running task stack:25832 pid:187 tgid:187 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 826.131202][ C0] Workqueue: events_power_efficient gc_worker [ 826.137393][ C0] Call Trace: [ 826.140662][ C0] [ 826.143582][ C0] __schedule+0x125c/0x6730 [ 826.148101][ C0] ? vfree+0x136/0x750 [ 826.152166][ C0] ? worker_thread+0x5ef/0xe50 [ 826.156953][ C0] ? ret_from_fork+0x72b/0xd50 [ 826.161712][ C0] ? __pfx___schedule+0x10/0x10 [ 826.166575][ C0] ? mark_held_locks+0x40/0x70 [ 826.171443][ C0] preempt_schedule_irq+0x50/0x90 [ 826.176475][ C0] irqentry_exit+0x205/0xa00 [ 826.181067][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 826.187056][ C0] RIP: 0010:__rcu_read_unlock+0x8/0x5e0 [ 826.192611][ C0] Code: df 5b e9 8b f0 ff ff e8 e6 7d 8a 00 eb e7 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 <41> 55 41 54 55 53 65 48 8b 1d 92 4c 75 12 48 8d bb c4 04 00 00 48 [ 826.212233][ C0] RSP: 0018:ffffc9000301fb30 EFLAGS: 00000286 [ 826.218296][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000301fb0c [ 826.226279][ C0] RDX: 0000000000000002 RSI: ffffffff8e183c7e RDI: ffffffff8c400a80 [ 826.234245][ C0] RBP: ffff888033600000 R08: 0000000000000001 R09: 0000000000000000 [ 826.242223][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 826.250294][ C0] R13: 0000000000000000 R14: 0000000000040000 R15: 000000000003d629 [ 826.258281][ C0] gc_worker+0xc7b/0x1a10 [ 826.262639][ C0] ? __pfx_gc_worker+0x10/0x10 [ 826.267414][ C0] ? rcu_is_watching+0x12/0xc0 [ 826.272261][ C0] process_one_work+0xa23/0x1940 [ 826.277224][ C0] ? __pfx_process_one_work+0x10/0x10 [ 826.282600][ C0] ? __pfx_gc_worker+0x10/0x10 [ 826.287381][ C0] worker_thread+0x5ef/0xe50 [ 826.291975][ C0] ? kthread+0x13a/0x450 [ 826.296214][ C0] ? __pfx_worker_thread+0x10/0x10 [ 826.301315][ C0] kthread+0x370/0x450 [ 826.305394][ C0] ? __pfx_kthread+0x10/0x10 [ 826.309982][ C0] ret_from_fork+0x72b/0xd50 [ 826.314571][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 826.319702][ C0] ? __switch_to+0x800/0x10f0 [ 826.324388][ C0] ? __switch_to_asm+0x39/0x70 [ 826.329194][ C0] ? __pfx_kthread+0x10/0x10 [ 826.333786][ C0] ret_from_fork_asm+0x1a/0x30 [ 826.338552][ C0] [ 826.341561][ C0] task:udevd state:R running task stack:27352 pid:25112 tgid:25112 ppid:4994 task_flags:0x40014c flags:0x00080000 [ 826.355042][ C0] Call Trace: [ 826.358320][ C0] [ 826.361253][ C0] __schedule+0x125c/0x6730 [ 826.365764][ C0] ? __update_page_owner_handle+0x390/0x530 [ 826.371660][ C0] ? mark_held_locks+0x40/0x70 [ 826.376428][ C0] ? __pfx___schedule+0x10/0x10 [ 826.381269][ C0] ? irqentry_exit+0x24d/0xa00 [ 826.386045][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 826.392115][ C0] preempt_schedule_notrace+0x5f/0xd0 [ 826.397507][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 826.403401][ C0] rcu_is_watching+0x8e/0xc0 [ 826.407982][ C0] lock_acquire+0x301/0x370 [ 826.412500][ C0] ? unwind_next_frame+0x3be/0x2090 [ 826.417704][ C0] ? unwind_next_frame+0x3be/0x2090 [ 826.422896][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 826.429049][ C0] unwind_next_frame+0xd1/0x2090 [ 826.434087][ C0] ? unwind_next_frame+0xbd/0x2090 [ 826.439212][ C0] ? do_group_exit+0xd5/0x2a0 [ 826.443885][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 826.450122][ C0] arch_stack_walk+0x94/0xf0 [ 826.454708][ C0] ? do_group_exit+0xd5/0x2a0 [ 826.459398][ C0] stack_trace_save+0x8e/0xc0 [ 826.464093][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 826.469467][ C0] kasan_save_stack+0x30/0x50 [ 826.474137][ C0] ? kasan_save_stack+0x30/0x50 [ 826.478981][ C0] ? kasan_save_track+0x14/0x30 [ 826.483827][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 826.488585][ C0] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 826.494126][ C0] ? kmem_cache_free+0x412/0x6b0 [ 826.499138][ C0] ? __put_anon_vma+0x114/0x3a0 [ 826.504003][ C0] ? unlink_anon_vmas+0x5f3/0x8e0 [ 826.509034][ C0] ? free_pgtables+0x2e7/0xd80 [ 826.513788][ C0] ? exit_mmap+0x44c/0xa00 [ 826.518207][ C0] ? __mmput+0x12a/0x410 [ 826.522439][ C0] ? mmput+0x67/0x80 [ 826.526429][ C0] ? do_exit+0x8b1/0x2ae0 [ 826.530860][ C0] ? do_group_exit+0xd5/0x2a0 [ 826.535645][ C0] kasan_save_track+0x14/0x30 [ 826.540402][ C0] __kasan_kmalloc+0xaa/0xb0 [ 826.544986][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 826.550438][ C0] ? kmem_cache_free+0x412/0x6b0 [ 826.555365][ C0] ? __put_anon_vma+0x114/0x3a0 [ 826.560220][ C0] kmem_cache_free+0x412/0x6b0 [ 826.564988][ C0] __put_anon_vma+0x114/0x3a0 [ 826.569729][ C0] unlink_anon_vmas+0x5f3/0x8e0 [ 826.574593][ C0] free_pgtables+0x2e7/0xd80 [ 826.579189][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 826.584320][ C0] exit_mmap+0x44c/0xa00 [ 826.588586][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 826.593352][ C0] ? rcu_is_watching+0x12/0xc0 [ 826.598113][ C0] ? __lock_acquire+0x49f/0x1a40 [ 826.603065][ C0] ? find_held_lock+0x2b/0x80 [ 826.607743][ C0] ? uprobe_clear_state+0x5f/0x260 [ 826.612860][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 826.618519][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 826.624170][ C0] __mmput+0x12a/0x410 [ 826.628249][ C0] mmput+0x67/0x80 [ 826.631960][ C0] do_exit+0x8b1/0x2ae0 [ 826.636138][ C0] ? do_raw_spin_lock+0x128/0x260 [ 826.641155][ C0] ? __pfx_do_exit+0x10/0x10 [ 826.645734][ C0] ? do_group_exit+0x1bd/0x2a0 [ 826.650519][ C0] ? rcu_is_watching+0x12/0xc0 [ 826.655301][ C0] do_group_exit+0xd5/0x2a0 [ 826.659831][ C0] __x64_sys_exit_group+0x3e/0x50 [ 826.664897][ C0] x64_sys_call+0x102c/0x1530 [ 826.669746][ C0] do_syscall_64+0x115/0x840 [ 826.674352][ C0] ? clear_bhb_loop+0x40/0x90 [ 826.679021][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.684904][ C0] RIP: 0033:0x7fc5e46f16c5 [ 826.689308][ C0] RSP: 002b:00007ffc05473c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 826.697711][ C0] RAX: ffffffffffffffda RBX: 0000563eb6975040 RCX: 00007fc5e46f16c5 [ 826.705691][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 826.713647][ C0] RBP: 0000563eb6953910 R08: 0000000000000000 R09: 0000000000000000 [ 826.721609][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.729682][ C0] R13: 00007ffc05473ca0 R14: 0000000000000000 R15: 0000000000000000 [ 826.737656][ C0] [ 826.740697][ C0] rcu: rcu_preempt kthread starved for 282 jiffies! g244149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 826.751823][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 826.761809][ C0] rcu: RCU grace-period kthread stack dump: [ 826.767683][ C0] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 826.781164][ C0] Call Trace: [ 826.784435][ C0] [ 826.787356][ C0] __schedule+0x125c/0x6730 [ 826.791863][ C0] ? __pfx___schedule+0x10/0x10 [ 826.796789][ C0] ? find_held_lock+0x2b/0x80 [ 826.801465][ C0] ? schedule+0x225/0x2c0 [ 826.805788][ C0] schedule+0xdd/0x2c0 [ 826.809848][ C0] schedule_timeout+0x127/0x280 [ 826.814713][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 826.820092][ C0] ? __pfx_process_timeout+0x10/0x10 [ 826.825376][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 826.831175][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 826.836718][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 826.841489][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 826.846777][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 826.851708][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 826.856900][ C0] ? rcu_is_watching+0x12/0xc0 [ 826.861657][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 826.867548][ C0] rcu_gp_kthread+0x179/0x230 [ 826.872305][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 826.877532][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 826.883343][ C0] ? __kthread_parkme+0x18c/0x230 [ 826.888377][ C0] ? kthread+0x13a/0x450 [ 826.892610][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 826.897805][ C0] kthread+0x370/0x450 [ 826.901864][ C0] ? __pfx_kthread+0x10/0x10 [ 826.906536][ C0] ret_from_fork+0x72b/0xd50 [ 826.911126][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 826.916228][ C0] ? __switch_to+0x800/0x10f0 [ 826.920899][ C0] ? __switch_to_asm+0x39/0x70 [ 826.925678][ C0] ? __pfx_kthread+0x10/0x10 [ 826.930265][ C0] ret_from_fork_asm+0x1a/0x30 [ 826.935030][ C0] [ 826.938035][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 826.944360][ C0] CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 826.955635][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 826.960824][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.970981][ C0] Workqueue: bat_events batadv_dat_purge [ 826.976800][ C0] RIP: 0010:__orc_find+0x97/0xf0 [ 826.981785][ C0] Code: b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 <4d> 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41 [ 827.001404][ C0] RSP: 0018:ffffc90000006848 EFLAGS: 00000297 [ 827.007492][ C0] RAX: ffffffff92786bc4 RBX: ffffffff91b3a0e4 RCX: dffffc0000000000 [ 827.015451][ C0] RDX: ffffffff8b81f2a4 RSI: 0000000000000000 RDI: ffffffff91b3a0e4 [ 827.023412][ C0] RBP: ffffffff91b3a0e8 R08: ffffffff92786bfa R09: 0000000000000007 [ 827.031374][ C0] R10: 0000000000000200 R11: 00000000000a81f5 R12: ffffffff91b3a0e4 [ 827.039341][ C0] R13: ffffffff8b81f523 R14: ffffffff91b3a0e4 R15: ffffffff91b3a0e4 [ 827.047312][ C0] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 827.056251][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.062919][ C0] CR2: 0000563eb695f088 CR3: 00000000656e6000 CR4: 00000000003526f0 [ 827.070902][ C0] Call Trace: [ 827.074184][ C0] [ 827.077028][ C0] ? __batadv_dat_purge.part.0+0x293/0x3c0 [ 827.082846][ C0] unwind_next_frame+0x2ec/0x2090 [ 827.087894][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 827.093707][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 827.099859][ C0] arch_stack_walk+0x94/0xf0 [ 827.104449][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 827.110247][ C0] ? __skb_ext_put+0x102/0x2f0 [ 827.115018][ C0] stack_trace_save+0x8e/0xc0 [ 827.119698][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 827.125084][ C0] ? __lock_acquire+0x49f/0x1a40 [ 827.130023][ C0] kasan_save_stack+0x30/0x50 [ 827.134809][ C0] ? kasan_save_stack+0x30/0x50 [ 827.139681][ C0] ? kasan_save_track+0x14/0x30 [ 827.144544][ C0] ? kasan_save_free_info+0x3b/0x70 [ 827.149742][ C0] ? __kasan_slab_free+0x5f/0x80 [ 827.154682][ C0] ? kmem_cache_free+0x127/0x6b0 [ 827.159628][ C0] ? __skb_ext_put+0x102/0x2f0 [ 827.164384][ C0] ? __skb_ext_del+0xf8/0x380 [ 827.169048][ C0] ? br_nf_dev_queue_xmit+0x7a5/0x2730 [ 827.174576][ C0] ? br_nf_post_routing+0xcbb/0x16a0 [ 827.179864][ C0] ? nf_hook_slow+0xbf/0x220 [ 827.184498][ C0] ? br_forward_finish+0x261/0x4d0 [ 827.189777][ C0] ? br_nf_hook_thresh+0x30d/0x420 [ 827.194887][ C0] ? br_nf_forward_finish+0x693/0xb30 [ 827.200269][ C0] ? br_nf_forward_ip.part.0+0x61e/0x820 [ 827.205894][ C0] ? br_nf_forward+0xfe5/0x19f0 [ 827.210734][ C0] ? nf_hook_slow+0xbf/0x220 [ 827.215323][ C0] ? __br_forward+0x2f7/0x970 [ 827.219989][ C0] ? br_flood+0x372/0x7b0 [ 827.224306][ C0] ? br_handle_frame_finish+0x1014/0x1fa0 [ 827.230032][ C0] ? br_nf_hook_thresh+0x30d/0x420 [ 827.235147][ C0] ? br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 827.241399][ C0] ? br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 827.246942][ C0] ? br_nf_pre_routing+0x90f/0x1560 [ 827.252127][ C0] ? br_handle_frame+0xce9/0x1540 [ 827.257143][ C0] ? __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 827.264096][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 827.270086][ C0] ? __netif_receive_skb+0x1f/0x120 [ 827.275385][ C0] ? process_backlog+0x37a/0x1580 [ 827.280418][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 827.285952][ C0] ? net_rx_action+0xa40/0xf20 [ 827.290731][ C0] ? handle_softirqs+0x1ea/0x9b0 [ 827.295921][ C0] ? do_softirq+0xac/0xe0 [ 827.300498][ C0] ? __local_bh_enable_ip+0xf8/0x120 [ 827.305858][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 827.311667][ C0] kasan_save_track+0x14/0x30 [ 827.316433][ C0] kasan_save_free_info+0x3b/0x70 [ 827.321467][ C0] __kasan_slab_free+0x5f/0x80 [ 827.326327][ C0] kmem_cache_free+0x127/0x6b0 [ 827.331428][ C0] __skb_ext_put+0x102/0x2f0 [ 827.336134][ C0] __skb_ext_del+0xf8/0x380 [ 827.340646][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 827.346469][ C0] br_nf_dev_queue_xmit+0x7a5/0x2730 [ 827.351758][ C0] ? find_held_lock+0x2b/0x80 [ 827.356453][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 827.362157][ C0] ? br_nf_post_routing+0xafb/0x16a0 [ 827.367452][ C0] br_nf_post_routing+0xcbb/0x16a0 [ 827.372554][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 827.378087][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 827.383798][ C0] ? lock_acquire+0x1b9/0x370 [ 827.388479][ C0] nf_hook_slow+0xbf/0x220 [ 827.392906][ C0] br_forward_finish+0x261/0x4d0 [ 827.397842][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 827.403297][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 827.409206][ C0] ? nf_hook_slow+0x167/0x220 [ 827.413892][ C0] br_nf_hook_thresh+0x30d/0x420 [ 827.418828][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 827.424282][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 827.429737][ C0] ? lock_acquire+0x1b9/0x370 [ 827.434437][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 827.440040][ C0] ? net_generic+0xea/0x2a0 [ 827.444679][ C0] br_nf_forward_finish+0x693/0xb30 [ 827.449945][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 827.455418][ C0] br_nf_forward_ip.part.0+0x61e/0x820 [ 827.460898][ C0] br_nf_forward+0xfe5/0x19f0 [ 827.465589][ C0] nf_hook_slow+0xbf/0x220 [ 827.470055][ C0] __br_forward+0x2f7/0x970 [ 827.474572][ C0] ? __pfx___br_forward+0x10/0x10 [ 827.479606][ C0] ? __asan_memcpy+0x3c/0x60 [ 827.484192][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 827.489641][ C0] ? __skb_clone+0x570/0x760 [ 827.494236][ C0] br_flood+0x372/0x7b0 [ 827.498395][ C0] br_handle_frame_finish+0x1014/0x1fa0 [ 827.503988][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 827.509897][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 827.515181][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 827.520082][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 827.525208][ C0] ? nf_hook_slow+0x167/0x220 [ 827.529882][ C0] br_nf_hook_thresh+0x30d/0x420 [ 827.534913][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 827.540846][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 827.546311][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 827.552225][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 827.557518][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 827.563410][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 827.569315][ C0] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 827.575305][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 827.581210][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 827.586587][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 827.592471][ C0] ? lock_acquire+0x1b9/0x370 [ 827.597146][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 827.603634][ C0] ? net_generic+0xea/0x2a0 [ 827.608136][ C0] br_nf_pre_routing+0x90f/0x1560 [ 827.613153][ C0] br_handle_frame+0xce9/0x1540 [ 827.618003][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 827.623284][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 827.629192][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 827.634478][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 827.641155][ C0] ? kmem_cache_free+0x127/0x6b0 [ 827.646087][ C0] ? skb_release_data+0x6ca/0x8e0 [ 827.651116][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 827.658222][ C0] ? kfree_skbmem+0x19f/0x210 [ 827.662934][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 827.668173][ C0] ? ip6_mc_input+0x51a/0xf50 [ 827.672848][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 827.677870][ C0] ? __lock_acquire+0x49f/0x1a40 [ 827.682880][ C0] ? process_backlog+0x32a/0x1580 [ 827.687927][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 827.693731][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 827.700274][ C0] ? lock_acquire+0x1b9/0x370 [ 827.704974][ C0] ? process_backlog+0x32a/0x1580 [ 827.710003][ C0] ? process_backlog+0x32a/0x1580 [ 827.715029][ C0] __netif_receive_skb+0x1f/0x120 [ 827.720044][ C0] process_backlog+0x37a/0x1580 [ 827.724887][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 827.730252][ C0] net_rx_action+0xa40/0xf20 [ 827.734855][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 827.739993][ C0] ? mark_held_locks+0x40/0x70 [ 827.744752][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 827.749943][ C0] ? tmigr_handle_remote+0x132/0x380 [ 827.755253][ C0] ? mark_held_locks+0x40/0x70 [ 827.760036][ C0] handle_softirqs+0x1ea/0x9b0 [ 827.764791][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 827.770067][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 827.775344][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 827.780974][ C0] ? __batadv_dat_purge.part.0+0x294/0x3c0 [ 827.786768][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 827.792391][ C0] do_softirq+0xac/0xe0 [ 827.796545][ C0] [ 827.799474][ C0] [ 827.802494][ C0] __local_bh_enable_ip+0xf8/0x120 [ 827.807620][ C0] __batadv_dat_purge.part.0+0x294/0x3c0 [ 827.813248][ C0] batadv_dat_purge+0x4b/0xa0 [ 827.817929][ C0] process_one_work+0xa23/0x1940 [ 827.822882][ C0] ? __pfx_process_one_work+0x10/0x10 [ 827.828256][ C0] ? __pfx_batadv_dat_purge+0x10/0x10 [ 827.833620][ C0] rescuer_thread+0x905/0x14a0 [ 827.838474][ C0] ? rescuer_thread+0x240/0x14a0 [ 827.843408][ C0] ? rescuer_thread+0x118/0x14a0 [ 827.848376][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 827.853571][ C0] ? __kthread_parkme+0x18c/0x230 [ 827.858587][ C0] ? kthread+0x13a/0x450 [ 827.862819][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 827.868037][ C0] kthread+0x370/0x450 [ 827.872104][ C0] ? __pfx_kthread+0x10/0x10 [ 827.876687][ C0] ret_from_fork+0x72b/0xd50 [ 827.881290][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 827.886445][ C0] ? __switch_to+0x800/0x10f0 [ 827.891138][ C0] ? __switch_to_asm+0x39/0x70 [ 827.895919][ C0] ? __pfx_kthread+0x10/0x10 [ 827.900535][ C0] ret_from_fork_asm+0x1a/0x30 [ 827.905303][ C0] [ 828.906740][ C0] net_ratelimit: 12586 callbacks suppressed [ 828.906758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.924966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.937323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.949754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.962117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.974438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.986720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.999169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.011450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.023744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.890972][ C0] net_ratelimit: 15694 callbacks suppressed [ 833.890995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.909391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.922005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.934412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.946809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.959107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.971428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.983948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.996565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.008904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)