last executing test programs: 9m24.896383284s ago: executing program 0 (id=2533): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop11/rqos/wbt/min_lat_nsec\x00', 0x200, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000040)=""/67, 0x43) 9m24.831842728s ago: executing program 0 (id=2535): r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r0, 0x80045301, 0x38) 9m24.766282171s ago: executing program 0 (id=2537): r0 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x10}, 0x1) 9m24.648095468s ago: executing program 0 (id=2540): r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000340)='1\x00', 0xe95) 9m24.491889575s ago: executing program 0 (id=2543): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 9m23.97213665s ago: executing program 0 (id=2552): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/system/node/has_memory\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b00)=""/4077, 0xffd0) 9m23.634684011s ago: executing program 32 (id=2552): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/system/node/has_memory\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b00)=""/4077, 0xffd0) 2.042357069s ago: executing program 3 (id=11503): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000040)={0xc4}) 1.749350758s ago: executing program 3 (id=11508): close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x24, 0x0, 0x8) 1.669126243s ago: executing program 2 (id=11510): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, r1, 0x301, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8040) 1.567450263s ago: executing program 3 (id=11512): mmap$auto(0x0, 0x2020009, 0x9, 0xf8, 0xffffffffffffffff, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec26\x00', 0x1a1600, 0x0) ioctl$auto_CEC_RECEIVE(r0, 0xc0386106, 0x0) 1.499861304s ago: executing program 4 (id=11513): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) 1.457673604s ago: executing program 1 (id=11514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 1.44621526s ago: executing program 2 (id=11515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) recvfrom$auto(r0, &(0x7f0000000600), 0x4, 0x4, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1.3244507s ago: executing program 4 (id=11516): r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) setresuid$auto(r1, 0xffffffffffffffff, 0x0) 1.300232373s ago: executing program 1 (id=11517): mmap$auto(0x200000000000, 0x2020006, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) 1.167992496s ago: executing program 4 (id=11518): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xffd8) 1.163230535s ago: executing program 2 (id=11519): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000b, 0x0) r0 = socket(0x28, 0x1, 0x0) getsockopt$auto(r0, 0x28, 0x8, 0x0, 0x0) 1.069951001s ago: executing program 1 (id=11520): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x41555856, 0x3f, 0x2008, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$auto(r0, 0x890b, 0x1) 1.031326669s ago: executing program 3 (id=11521): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'\x00\xc9\n\xbf\xb9\x12\xfa\x00\x00\xcfk', 0x6) mincore$auto(0x9, 0xc0, 0x0) socket(0x15, 0x5, 0x0) 973.771671ms ago: executing program 4 (id=11522): close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x18, 0xa, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 961.818798ms ago: executing program 2 (id=11523): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x800, 0x5, 0xd) setxattrat$auto(r0, 0x0, 0xa, 0x0, 0x0, 0x1) 653.636627ms ago: executing program 1 (id=11524): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) write$auto(r0, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'\x00\xc9\n\xbf\xb9\x12\xfa\x00\x00\xcfk', 0xb7f) clock_gettime$auto(0x5, 0x0) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, &(0x7f0000000340)={@siginfo_0_0={0x5, 0x5, 0x99, @_sigfault={0x0, @_addr_bnd={"926879002247c181", 0x0, 0x0}}}}) 615.17007ms ago: executing program 3 (id=11525): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_11={0x7, 0x7, 0x10000, 0x3, 0x7, 0x400003, 0x2}, 0x6f4) 572.636594ms ago: executing program 2 (id=11526): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002040)='/dev/binderfs/binder1\x00', 0x80000, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nbd10\x00', 0x8080, 0x0) close_range$auto(0x2, 0x8, 0x0) 551.066514ms ago: executing program 4 (id=11527): mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/apparmor/parameters/debug\x00', 0x182b02, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) write$auto(r0, 0x0, 0xa3d9) 252.14396ms ago: executing program 1 (id=11528): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) close_range$auto(0x2, 0x8, 0x0) 190.747471ms ago: executing program 3 (id=11529): mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400006, 0x2000df, 0x9b72, 0xffffffffffffffff, 0x8000) 104.447709ms ago: executing program 2 (id=11530): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setuid$auto(0x800000000008) iopl$auto(0x3) 83.061378ms ago: executing program 4 (id=11531): setns(0xc9, 0x0) socket(0x27, 0x2, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3f00, 0x0) 0s ago: executing program 1 (id=11532): mmap$auto(0x0, 0x2020009, 0x2, 0x100000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(r0, 0x0, 0x10007c) kernel console output (not intermixed with test programs): 8] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7993'. [ 524.256565][T22987] FAULT_INJECTION: forcing a failure. [ 524.256565][T22987] name failslab, interval 1, probability 0, space 0, times 0 [ 524.256597][T22987] CPU: 0 UID: 0 PID: 22987 Comm: syz.3.8010 Tainted: G U L syzkaller #0 PREEMPT(full) [ 524.256628][T22987] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 524.256636][T22987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 524.256648][T22987] Call Trace: [ 524.256655][T22987] [ 524.256662][T22987] dump_stack_lvl+0x100/0x190 [ 524.256699][T22987] should_fail_ex.cold+0x5/0xa [ 524.256729][T22987] should_failslab+0xc2/0x120 [ 524.256754][T22987] __kvmalloc_node_noprof+0x113/0x9b0 [ 524.256789][T22987] ? do_raw_spin_lock+0x128/0x260 [ 524.256816][T22987] ? alloc_fdtable+0x17f/0x2d0 [ 524.256841][T22987] alloc_fdtable+0x17f/0x2d0 [ 524.256863][T22987] dup_fd+0xa1e/0xd90 [ 524.256886][T22987] ? copy_fs_struct+0x29b/0x340 [ 524.256908][T22987] ? do_raw_spin_unlock+0x145/0x1e0 [ 524.256937][T22987] unshare_fd+0xd6/0x140 [ 524.256961][T22987] ksys_unshare+0x3c7/0x980 [ 524.257021][T22987] ? __pfx_ksys_unshare+0x10/0x10 [ 524.257056][T22987] __x64_sys_unshare+0x31/0x40 [ 524.257078][T22987] do_syscall_64+0x121/0x770 [ 524.257104][T22987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.257126][T22987] RIP: 0033:0x7f2c4139f559 [ 524.257149][T22987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.257169][T22987] RSP: 002b:00007f2c42236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 524.257189][T22987] RAX: ffffffffffffffda RBX: 00007f2c41625fa0 RCX: 00007f2c4139f559 [ 524.257202][T22987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020600 [ 524.257214][T22987] RBP: 00007f2c41436b20 R08: 0000000000000000 R09: 0000000000000000 [ 524.257226][T22987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.257238][T22987] R13: 00007f2c41626038 R14: 00007f2c41625fa0 R15: 00007ffff10fb9e8 [ 524.257265][T22987] [ 525.133015][T23012] openvswitch: netlink: IP tunnel dst address not specified [ 526.321416][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 528.726304][T23113] sg_read: process 4008 (syz.3.8072) changed security contexts after opening file descriptor, this is not allowed. [ 529.008088][T23106] NFSD: Failed to start, no listeners configured. [ 530.769697][T23188] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 531.557498][T23218] openvswitch: netlink: Flow key attr not present in new flow. [ 532.736421][T23265] MTRR 1 not used [ 533.749834][T23305] openvswitch: netlink: IP tunnel dst address not specified [ 534.005882][T23316] netlink: 'syz.2.8162': attribute type 1 has an invalid length. [ 534.911830][T23353] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 535.555583][T23381] ERROR: Out of memory at tomoyo_memory_ok. [ 535.555670][T23381] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci-qemu-gce-upstream-auto/syz-executor /root/ci-qemu-gce-upstream-auto/syz-executor /newroot/2005/:,' not defined. [ 537.545497][T23461] openvswitch: netlink: Multiple metadata blocks provided [ 537.597541][T23463] FAULT_INJECTION: forcing a failure. [ 537.597541][T23463] name failslab, interval 1, probability 0, space 0, times 0 [ 537.597574][T23463] CPU: 0 UID: 0 PID: 23463 Comm: syz.3.8234 Tainted: G U L syzkaller #0 PREEMPT(full) [ 537.597604][T23463] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 537.597612][T23463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 537.597625][T23463] Call Trace: [ 537.597631][T23463] [ 537.597638][T23463] dump_stack_lvl+0x100/0x190 [ 537.597675][T23463] should_fail_ex.cold+0x5/0xa [ 537.597705][T23463] should_failslab+0xc2/0x120 [ 537.597731][T23463] __kmalloc_cache_noprof+0x91/0x6d0 [ 537.597762][T23463] ? proc_thread_self_get_link+0x1a6/0x210 [ 537.597798][T23463] proc_thread_self_get_link+0x1a6/0x210 [ 537.597829][T23463] pick_link+0xabc/0x13c0 [ 537.597862][T23463] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 537.597896][T23463] step_into_slowpath+0x9ba/0xf90 [ 537.597944][T23463] ? __pfx_step_into_slowpath+0x10/0x10 [ 537.597981][T23463] ? lookup_fast+0x2da/0x600 [ 537.598011][T23463] ? inode_permission+0x377/0x630 [ 537.598043][T23463] link_path_walk+0xf32/0x1cc0 [ 537.598085][T23463] path_openat+0x1a7/0x23f0 [ 537.598113][T23463] ? __pfx_path_openat+0x10/0x10 [ 537.598143][T23463] do_file_open+0x20e/0x430 [ 537.598168][T23463] ? __pfx_do_file_open+0x10/0x10 [ 537.598211][T23463] ? _raw_spin_unlock+0x28/0x50 [ 537.598245][T23463] ? alloc_fd+0x471/0x7a0 [ 537.598275][T23463] do_sys_openat2+0x163/0x1d0 [ 537.598303][T23463] ? __pfx_do_sys_openat2+0x10/0x10 [ 537.598332][T23463] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 537.598364][T23463] __x64_sys_openat+0x12d/0x210 [ 537.598392][T23463] ? __pfx___x64_sys_openat+0x10/0x10 [ 537.598430][T23463] do_syscall_64+0x121/0x770 [ 537.598455][T23463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.598476][T23463] RIP: 0033:0x7f2c4139f559 [ 537.598492][T23463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.598511][T23463] RSP: 002b:00007f2c42236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.598531][T23463] RAX: ffffffffffffffda RBX: 00007f2c41625fa0 RCX: 00007f2c4139f559 [ 537.598544][T23463] RDX: 0000000000000400 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 537.598557][T23463] RBP: 00007f2c41436b20 R08: 0000000000000000 R09: 0000000000000000 [ 537.598569][T23463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.598581][T23463] R13: 00007f2c41626038 R14: 00007f2c41625fa0 R15: 00007ffff10fb9e8 [ 537.598608][T23463] [ 538.103905][T23470] device-mapper: ioctl: Invalid ioctl structure: name €, dev 7f00000006 [ 538.151555][T23472] ERROR: Out of memory at tomoyo_memory_ok. [ 538.263864][T23476] netlink: 'syz.4.8240': attribute type 1 has an invalid length. [ 539.028051][T23506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8255'. [ 539.079896][T23506] $!NW: entered promiscuous mode [ 539.340849][T23519] openvswitch: netlink: Message has 4 unknown bytes. [ 539.962934][T23545] netlink: ct family unspecified [ 540.188285][T23551] netlink: 'syz.4.8272': attribute type 1 has an invalid length. [ 541.208101][T23591] FAULT_INJECTION: forcing a failure. [ 541.208101][T23591] name failslab, interval 1, probability 0, space 0, times 0 [ 541.208134][T23591] CPU: 0 UID: 0 PID: 23591 Comm: syz.3.8292 Tainted: G U L syzkaller #0 PREEMPT(full) [ 541.208165][T23591] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 541.208173][T23591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 541.208185][T23591] Call Trace: [ 541.208191][T23591] [ 541.208198][T23591] dump_stack_lvl+0x100/0x190 [ 541.208235][T23591] should_fail_ex.cold+0x5/0xa [ 541.208265][T23591] should_failslab+0xc2/0x120 [ 541.208289][T23591] __kmalloc_node_noprof+0xff/0x870 [ 541.208323][T23591] ? get_callchain_buffers+0x1e5/0x380 [ 541.208445][T23591] get_callchain_buffers+0x1e5/0x380 [ 541.208472][T23591] ? security_capable+0x80/0x260 [ 541.208499][T23591] stack_map_alloc+0x316/0x610 [ 541.208547][T23591] map_create+0x874/0x3150 [ 541.208617][T23591] ? __lock_acquire+0x5c0/0x1f40 [ 541.208647][T23591] ? __pfx_map_create+0x10/0x10 [ 541.208679][T23591] ? lock_acquire+0x1d1/0x380 [ 541.208699][T23591] ? __might_fault+0xc5/0x140 [ 541.208726][T23591] ? __might_fault+0xc5/0x140 [ 541.208761][T23591] __sys_bpf+0x14cb/0x4b60 [ 541.208808][T23591] ? __pfx___sys_bpf+0x10/0x10 [ 541.208826][T23591] ? find_held_lock+0x2b/0x80 [ 541.208854][T23591] ? futex_wake+0x4ea/0x5e0 [ 541.208892][T23591] ? rcu_read_lock_any_held+0x6a/0x90 [ 541.208944][T23591] ? find_held_lock+0x2b/0x80 [ 541.208972][T23591] ? ksys_write+0x190/0x250 [ 541.208991][T23591] ? ksys_write+0x190/0x250 [ 541.209026][T23591] ? __x64_sys_futex+0x34f/0x4d0 [ 541.209054][T23591] ? __x64_sys_futex+0x358/0x4d0 [ 541.209086][T23591] ? xfd_validate_state+0x129/0x190 [ 541.209112][T23591] ? __x64_sys_bpf+0xce/0x140 [ 541.209150][T23591] __x64_sys_bpf+0xce/0x140 [ 541.209172][T23591] ? do_syscall_64+0xae/0x770 [ 541.209198][T23591] do_syscall_64+0x121/0x770 [ 541.209224][T23591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.209246][T23591] RIP: 0033:0x7f2c4139f559 [ 541.209263][T23591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.209284][T23591] RSP: 002b:00007f2c42236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 541.209305][T23591] RAX: ffffffffffffffda RBX: 00007f2c41625fa0 RCX: 00007f2c4139f559 [ 541.209319][T23591] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 541.209332][T23591] RBP: 00007f2c41436b20 R08: 0000000000000000 R09: 0000000000000000 [ 541.209356][T23591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.209368][T23591] R13: 00007f2c41626038 R14: 00007f2c41625fa0 R15: 00007ffff10fb9e8 [ 541.209394][T23591] [ 542.142436][T23617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8304'. [ 542.769555][T23641] openvswitch: Â: Dropping previously announced user features [ 545.226899][T23740] netlink: Invalid conntrack timeout [ 545.794027][T23763] openvswitch: netlink: IP tunnel dst address not specified [ 546.351189][T23786] openvswitch: netlink: Key type 261 is out of range max 32 [ 546.460429][T23789] netlink: 'syz.2.8387': attribute type 1 has an invalid length. [ 546.582799][T23793] FAULT_INJECTION: forcing a failure. [ 546.582799][T23793] name failslab, interval 1, probability 0, space 0, times 0 [ 546.582832][T23793] CPU: 0 UID: 0 PID: 23793 Comm: syz.3.8389 Tainted: G U L syzkaller #0 PREEMPT(full) [ 546.582862][T23793] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 546.582870][T23793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 546.582881][T23793] Call Trace: [ 546.582888][T23793] [ 546.582895][T23793] dump_stack_lvl+0x100/0x190 [ 546.582931][T23793] should_fail_ex.cold+0x5/0xa [ 546.582960][T23793] should_failslab+0xc2/0x120 [ 546.582984][T23793] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 546.583018][T23793] ? sock_alloc_inode+0x26/0x2c0 [ 546.583051][T23793] ? __pfx_sock_alloc_inode+0x10/0x10 [ 546.583088][T23793] sock_alloc_inode+0x26/0x2c0 [ 546.583117][T23793] ? __pfx_sock_alloc_inode+0x10/0x10 [ 546.583145][T23793] alloc_inode+0x68/0x250 [ 546.583176][T23793] sock_alloc+0x42/0x240 [ 546.583204][T23793] __sock_create+0xc2/0x860 [ 546.583235][T23793] ? __local_bh_enable_ip+0xa5/0x120 [ 546.583259][T23793] smc_create_clcsk+0x37/0xd0 [ 546.583358][T23793] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 546.583415][T23793] inet6_create+0xb1a/0x12b0 [ 546.583449][T23793] ? inet6_create+0x7f/0x12b0 [ 546.583482][T23793] __sock_create+0x339/0x860 [ 546.583518][T23793] __sys_socket+0x14d/0x260 [ 546.583538][T23793] ? __pfx___sys_socket+0x10/0x10 [ 546.583564][T23793] __x64_sys_socket+0x72/0xb0 [ 546.583582][T23793] ? lockdep_hardirqs_on+0x7d/0x110 [ 546.583605][T23793] do_syscall_64+0x121/0x770 [ 546.583630][T23793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.583650][T23793] RIP: 0033:0x7f2c4139f559 [ 546.583667][T23793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.583686][T23793] RSP: 002b:00007f2c42236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 546.583705][T23793] RAX: ffffffffffffffda RBX: 00007f2c41625fa0 RCX: 00007f2c4139f559 [ 546.583719][T23793] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 000000000000000a [ 546.583731][T23793] RBP: 00007f2c41436b20 R08: 0000000000000000 R09: 0000000000000000 [ 546.583743][T23793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.583755][T23793] R13: 00007f2c41626038 R14: 00007f2c41625fa0 R15: 00007ffff10fb9e8 [ 546.583782][T23793] [ 546.609846][T23793] socket: no more sockets [ 546.929177][T23797] netlink: 'syz.2.8391': attribute type 1 has an invalid length. [ 547.167556][T23803] forcing mempool usage for swap_add_folio+0x464/0xfe0 [ 548.150435][T23847] ieee802154 phy0 wpan0: encryption failed: -22 [ 548.325246][ T6201] Bluetooth: hci3: unexpected event 0x3e length: 508 > 255 [ 548.325272][ T6201] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 254 [ 548.325289][ T6201] Bluetooth: hci3: Dropping invalid advertising data [ 548.325300][ T6201] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 548.325323][ T6201] Bluetooth: hci3: unknown advertising packet type: 0x8b [ 548.325337][ T6201] Bluetooth: hci3: unknown advertising packet type: 0xee [ 548.997475][T23878] nfsd: Unknown parameter 'batadv' [ 548.999924][T23880] random: crng reseeded on system resumption [ 550.557041][T23940] netlink: 'syz.2.8456': attribute type 1 has an invalid length. [ 551.008520][T23962] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 551.377364][T23974] MTRR 1 not used [ 551.569219][T23983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8476'. [ 552.720607][T24022] FAULT_INJECTION: forcing a failure. [ 552.720607][T24022] name failslab, interval 1, probability 0, space 0, times 0 [ 552.720664][T24022] CPU: 0 UID: 0 PID: 24022 Comm: syz.2.8495 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.720696][T24022] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.720704][T24022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 552.720720][T24022] Call Trace: [ 552.720727][T24022] [ 552.720737][T24022] dump_stack_lvl+0x100/0x190 [ 552.720780][T24022] should_fail_ex.cold+0x5/0xa [ 552.720811][T24022] should_failslab+0xc2/0x120 [ 552.720835][T24022] __kmalloc_cache_noprof+0x91/0x6d0 [ 552.720884][T24022] ? assoc_array_insert+0x10b/0x32c0 [ 552.720923][T24022] assoc_array_insert+0x10b/0x32c0 [ 552.720961][T24022] ? __mutex_lock+0x267/0x1c10 [ 552.720988][T24022] ? key_link+0x2bb/0x390 [ 552.721045][T24022] ? __pfx___mutex_lock+0x10/0x10 [ 552.721075][T24022] ? __pfx_assoc_array_insert+0x10/0x10 [ 552.721112][T24022] ? __pfx___might_resched+0x10/0x10 [ 552.721157][T24022] ? down_write+0x141/0x1f0 [ 552.721186][T24022] ? __pfx_down_write+0x10/0x10 [ 552.721218][T24022] __key_link_begin+0xf5/0x260 [ 552.721256][T24022] key_link+0x103/0x390 [ 552.721291][T24022] ? __up_read+0x333/0x980 [ 552.721320][T24022] ? __pfx_key_link+0x10/0x10 [ 552.721355][T24022] ? bpf_lsm_key_permission+0x9/0x10 [ 552.721381][T24022] ? key_task_permission+0x2c7/0x3c0 [ 552.721412][T24022] keyctl_get_persistent+0x5bd/0x860 [ 552.721450][T24022] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 552.721490][T24022] ? __x64_sys_futex+0x34f/0x4d0 [ 552.721531][T24022] ? __x64_sys_futex+0x358/0x4d0 [ 552.721570][T24022] ? xfd_validate_state+0x129/0x190 [ 552.721603][T24022] __do_sys_keyctl+0x3b2/0x5a0 [ 552.721632][T24022] do_syscall_64+0x121/0x770 [ 552.721661][T24022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.721687][T24022] RIP: 0033:0x7fd14ff9f559 [ 552.721706][T24022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.721730][T24022] RSP: 002b:00007fd150e5c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 552.721758][T24022] RAX: ffffffffffffffda RBX: 00007fd150225fa0 RCX: 00007fd14ff9f559 [ 552.721774][T24022] RDX: 00000000fffffffe RSI: ffffffffffffffff RDI: 2000000000000016 [ 552.721790][T24022] RBP: 00007fd150036b20 R08: 0000000000001000 R09: 0000000000000000 [ 552.721805][T24022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.721819][T24022] R13: 00007fd150226038 R14: 00007fd150225fa0 R15: 00007ffc98c32468 [ 552.721851][T24022] [ 553.564189][T24040] bond0: option packets_per_slave: invalid value () [ 553.564212][T24040] bond0: option packets_per_slave: allowed values 0 - 65535 [ 554.116111][T24061] FAULT_INJECTION: forcing a failure. [ 554.116111][T24061] name failslab, interval 1, probability 0, space 0, times 0 [ 554.116144][T24061] CPU: 0 UID: 0 PID: 24061 Comm: syz.3.8512 Tainted: G U L syzkaller #0 PREEMPT(full) [ 554.116176][T24061] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 554.116184][T24061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 554.116196][T24061] Call Trace: [ 554.116203][T24061] [ 554.116210][T24061] dump_stack_lvl+0x100/0x190 [ 554.116246][T24061] should_fail_ex.cold+0x5/0xa [ 554.116277][T24061] should_failslab+0xc2/0x120 [ 554.116301][T24061] __kmalloc_noprof+0xfc/0x840 [ 554.116333][T24061] ? lsm_blob_alloc+0x68/0x90 [ 554.116370][T24061] lsm_blob_alloc+0x68/0x90 [ 554.116411][T24061] security_prepare_creds+0x2d/0x290 [ 554.116443][T24061] prepare_creds+0x5d6/0x950 [ 554.116559][T24061] copy_creds+0xa7/0xa50 [ 554.116595][T24061] copy_process+0x144f/0x84c0 [ 554.116615][T24061] ? futex_unqueue+0x133/0x2c0 [ 554.116643][T24061] ? futex_unqueue+0x133/0x2c0 [ 554.116682][T24061] ? __pfx_copy_process+0x10/0x10 [ 554.116709][T24061] ? _copy_from_user+0x59/0xd0 [ 554.116775][T24061] kernel_clone+0x176/0x9d0 [ 554.116799][T24061] ? __pfx_kernel_clone+0x10/0x10 [ 554.116834][T24061] __do_sys_clone3+0x214/0x290 [ 554.116856][T24061] ? __pfx___do_sys_clone3+0x10/0x10 [ 554.116877][T24061] ? ksys_write+0x190/0x250 [ 554.116907][T24061] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 554.116953][T24061] do_syscall_64+0x121/0x770 [ 554.116978][T24061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.116999][T24061] RIP: 0033:0x7f2c4139f559 [ 554.117016][T24061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.117036][T24061] RSP: 002b:00007f2c42235ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 554.117056][T24061] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f2c4139f559 [ 554.117069][T24061] RDX: 00007f2c42235f10 RSI: 0000000000000058 RDI: 00007f2c42235f10 [ 554.117082][T24061] RBP: 00007f2c41436b20 R08: 0000000000000000 R09: 0000000000000058 [ 554.117095][T24061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.117107][T24061] R13: 00007f2c41626038 R14: 00007f2c41625fa0 R15: 00007ffff10fb9e8 [ 554.117135][T24061] [ 556.601864][T24147] MTRR 1 not used [ 557.407211][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8564'. [ 557.407234][T24175] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 559.284879][T23464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.411540][T23464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.534259][T23464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.680637][T23464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.758881][T24237] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.8594:24237 [ 560.179748][T23464] bridge_slave_1: left allmulticast mode [ 560.179771][T23464] bridge_slave_1: left promiscuous mode [ 560.181338][T23464] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.230272][T23464] bridge_slave_0: left allmulticast mode [ 560.230295][T23464] bridge_slave_0: left promiscuous mode [ 560.230450][T23464] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.306978][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.310788][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.330394][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.339183][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 560.339614][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 560.735954][T24274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8602'. [ 561.062530][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.062581][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.101856][T23464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.116602][T23464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.131770][T23464] bond0 (unregistering): Released all slaves [ 561.209924][T23464] .^: left promiscuous mode [ 561.441659][T23464] Â: left promiscuous mode [ 561.972288][T24303] CIFS: VFS: Invalid SecurityFlags: [ 562.410655][ T6201] Bluetooth: hci2: command tx timeout [ 562.630523][T24258] rxe_eth0 speed is unknown, defaulting to 1000 [ 562.959253][ T6201] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 563.399992][ T5299] 8021q: adding VLAN 0 to HW filter on device eth5 [ 564.045441][T23464] hsr_slave_0: left promiscuous mode [ 564.046696][T23464] hsr_slave_1: left promiscuous mode [ 564.049156][T23464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.049175][T23464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.057809][T23464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.057826][T23464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.124965][T23464] veth1_macvtap: left promiscuous mode [ 564.124998][T23464] veth0_macvtap: left promiscuous mode [ 564.125070][T23464] veth1_vlan: left promiscuous mode [ 564.125120][T23464] veth0_vlan: left promiscuous mode [ 564.479893][ T6201] Bluetooth: hci2: command tx timeout [ 565.059818][T23464] team0 (unregistering): Port device team_slave_1 removed [ 565.089037][T23464] team0 (unregistering): Port device team_slave_0 removed [ 565.449988][ T5299] 8021q: adding VLAN 0 to HW filter on device eth6 [ 566.319176][T24258] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.325921][T24258] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.326016][T24258] bridge_slave_0: entered allmulticast mode [ 566.355763][T24258] bridge_slave_0: entered promiscuous mode [ 566.369323][T24258] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.369478][T24258] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.369572][T24258] bridge_slave_1: entered allmulticast mode [ 566.401464][T24258] bridge_slave_1: entered promiscuous mode [ 566.464194][T24529] netlink: zone id is out of range [ 566.538812][T24258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.549555][ T6201] Bluetooth: hci2: command tx timeout [ 566.573592][T24258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.715404][T24258] team0: Port device team_slave_0 added [ 566.731935][T24258] team0: Port device team_slave_1 added [ 566.853852][T24258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.853868][T24258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.853892][T24258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.896481][T24258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.896494][T24258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.896519][T24258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.173341][T24258] hsr_slave_0: entered promiscuous mode [ 567.187934][T24258] hsr_slave_1: entered promiscuous mode [ 567.188536][T24258] debugfs: 'hsr0' already exists in 'hsr' [ 567.188557][T24258] Cannot create hsr debugfs directory [ 567.905455][T24704] FAULT_INJECTION: forcing a failure. [ 567.905455][T24704] name failslab, interval 1, probability 0, space 0, times 0 [ 567.905491][T24704] CPU: 0 UID: 0 PID: 24704 Comm: syz.2.8660 Tainted: G U L syzkaller #0 PREEMPT(full) [ 567.905526][T24704] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 567.905535][T24704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 567.905553][T24704] Call Trace: [ 567.905560][T24704] [ 567.905569][T24704] dump_stack_lvl+0x100/0x190 [ 567.905609][T24704] should_fail_ex.cold+0x5/0xa [ 567.905642][T24704] should_failslab+0xc2/0x120 [ 567.905670][T24704] kmem_cache_alloc_noprof+0x92/0x6a0 [ 567.905718][T24704] ? d_instantiate+0x8a/0xb0 [ 567.905745][T24704] ? alloc_empty_file+0x5b/0x1c0 [ 567.905779][T24704] alloc_empty_file+0x5b/0x1c0 [ 567.905809][T24704] alloc_file_pseudo+0x17e/0x290 [ 567.905840][T24704] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 567.905869][T24704] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 567.905900][T24704] ? secretmem_file_create.isra.0+0x9c/0x470 [ 567.905934][T24704] secretmem_file_create.isra.0+0x1ce/0x470 [ 567.905964][T24704] __x64_sys_memfd_secret+0xd7/0x170 [ 567.905993][T24704] do_syscall_64+0x121/0x770 [ 567.906020][T24704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.906061][T24704] RIP: 0033:0x7fd14ff9f559 [ 567.906080][T24704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.906103][T24704] RSP: 002b:00007fd150e5c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 567.906125][T24704] RAX: ffffffffffffffda RBX: 00007fd150225fa0 RCX: 00007fd14ff9f559 [ 567.906141][T24704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.906154][T24704] RBP: 00007fd150036b20 R08: 0000000000000000 R09: 0000000000000000 [ 567.906168][T24704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.906182][T24704] R13: 00007fd150226038 R14: 00007fd150225fa0 R15: 00007ffc98c32468 [ 567.906222][T24704] [ 568.296867][ T5299] 8021q: adding VLAN 0 to HW filter on device eth7 [ 568.620144][ T6201] Bluetooth: hci2: command tx timeout [ 569.456889][T24258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 569.495216][T24258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.498813][T24258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 569.524308][T24258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.546279][T24258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 569.572911][T24258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.591302][T24258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 569.628388][T24258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.029272][T24258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.098807][T24258] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.123548][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.123633][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.193876][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.193960][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.461677][T24804] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 572.106778][T24258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.291070][T24258] veth0_vlan: entered promiscuous mode [ 572.333435][T24258] veth1_vlan: entered promiscuous mode [ 572.466996][T24258] veth0_macvtap: entered promiscuous mode [ 572.502583][T24258] veth1_macvtap: entered promiscuous mode [ 572.571753][T24258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.605971][T24258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.649885][T23464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.649932][T23464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.649963][T23464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.649994][T23464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.103315][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.103335][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.327351][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.327393][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.948643][T24258] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 575.740103][T24983] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 576.138633][T24999] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 577.182272][T25033] Unsupported ieee802154 address type: 0 [ 577.483084][T25039] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 578.564079][T25081] FAULT_INJECTION: forcing a failure. [ 578.564079][T25081] name failslab, interval 1, probability 0, space 0, times 0 [ 578.564121][T25081] CPU: 0 UID: 0 PID: 25081 Comm: syz.2.8786 Tainted: G U L syzkaller #0 PREEMPT(full) [ 578.564153][T25081] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 578.564161][T25081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 578.564174][T25081] Call Trace: [ 578.564180][T25081] [ 578.564188][T25081] dump_stack_lvl+0x100/0x190 [ 578.564226][T25081] should_fail_ex.cold+0x5/0xa [ 578.564256][T25081] should_failslab+0xc2/0x120 [ 578.564280][T25081] kmem_cache_alloc_noprof+0x92/0x6a0 [ 578.564313][T25081] ? kcm_create+0x11e/0x6a0 [ 578.564347][T25081] kcm_create+0x11e/0x6a0 [ 578.564377][T25081] __sock_create+0x339/0x860 [ 578.564415][T25081] __sys_socket+0x14d/0x260 [ 578.564434][T25081] ? __pfx___sys_socket+0x10/0x10 [ 578.564461][T25081] __x64_sys_socket+0x72/0xb0 [ 578.564480][T25081] ? lockdep_hardirqs_on+0x7d/0x110 [ 578.564503][T25081] do_syscall_64+0x121/0x770 [ 578.564527][T25081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.564549][T25081] RIP: 0033:0x7fd14ff9f559 [ 578.564565][T25081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.564585][T25081] RSP: 002b:00007fd150e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 578.564604][T25081] RAX: ffffffffffffffda RBX: 00007fd150225fa0 RCX: 00007fd14ff9f559 [ 578.564618][T25081] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 578.564630][T25081] RBP: 00007fd150036b20 R08: 0000000000000000 R09: 0000000000000000 [ 578.564642][T25081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.564655][T25081] R13: 00007fd150226038 R14: 00007fd150225fa0 R15: 00007ffc98c32468 [ 578.564681][T25081] [ 579.200311][T25103] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.69206016.4294967293), cmd(3) [ 579.637266][T25117] openvswitch: netlink: Key type 29 is not supported [ 579.976502][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8800'. [ 582.465971][T25232] FAULT_INJECTION: forcing a failure. [ 582.465971][T25232] name failslab, interval 1, probability 0, space 0, times 0 [ 582.466004][T25232] CPU: 0 UID: 0 PID: 25232 Comm: syz.4.8849 Tainted: G U L syzkaller #0 PREEMPT(full) [ 582.466035][T25232] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 582.466044][T25232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 582.466057][T25232] Call Trace: [ 582.466064][T25232] [ 582.466072][T25232] dump_stack_lvl+0x100/0x190 [ 582.466107][T25232] should_fail_ex.cold+0x5/0xa [ 582.466137][T25232] should_failslab+0xc2/0x120 [ 582.466162][T25232] __kvmalloc_node_noprof+0x113/0x9b0 [ 582.466197][T25232] ? do_raw_spin_lock+0x128/0x260 [ 582.466226][T25232] ? alloc_fdtable+0x17f/0x2d0 [ 582.466251][T25232] alloc_fdtable+0x17f/0x2d0 [ 582.466273][T25232] dup_fd+0xa1e/0xd90 [ 582.466296][T25232] ? copy_fs_struct+0x29b/0x340 [ 582.466318][T25232] ? do_raw_spin_unlock+0x145/0x1e0 [ 582.466347][T25232] unshare_fd+0xd6/0x140 [ 582.466371][T25232] ksys_unshare+0x3c7/0x980 [ 582.466393][T25232] ? __pfx_ksys_unshare+0x10/0x10 [ 582.466428][T25232] __x64_sys_unshare+0x31/0x40 [ 582.466450][T25232] do_syscall_64+0x121/0x770 [ 582.466475][T25232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.466496][T25232] RIP: 0033:0x7f790239f559 [ 582.466512][T25232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.466533][T25232] RSP: 002b:00007f79005f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 582.466552][T25232] RAX: ffffffffffffffda RBX: 00007f7902625fa0 RCX: 00007f790239f559 [ 582.466566][T25232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020600 [ 582.466578][T25232] RBP: 00007f7902436b20 R08: 0000000000000000 R09: 0000000000000000 [ 582.466591][T25232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.466603][T25232] R13: 00007f7902626038 R14: 00007f7902625fa0 R15: 00007fff06bf9e58 [ 582.466630][T25232] [ 583.453882][T25263] netlink: 'syz.2.8863': attribute type 11 has an invalid length. [ 585.113899][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 586.979819][T25396] NFSD: Failed to start, no listeners configured. [ 588.409579][T25461] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 589.182449][T25493] openvswitch: netlink: Flow key attr not present in new flow. [ 590.046176][T25526] MTRR 1 not used [ 590.258065][T25533] openvswitch: netlink: IP tunnel dst address not specified [ 591.674662][T25587] openvswitch: netlink: IP tunnel dst address not specified [ 591.974411][T25599] netlink: 'syz.1.9020': attribute type 1 has an invalid length. [ 593.636260][T25667] ERROR: Out of memory at tomoyo_memory_ok. [ 595.295775][T25731] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 596.003560][T25760] ERROR: Out of memory at tomoyo_memory_ok. [ 596.628087][T25781] netlink: 'syz.3.9109': attribute type 1 has an invalid length. [ 597.107376][T25800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9115'. [ 597.162138][T25800] $!NW: entered promiscuous mode [ 597.425550][T25811] netlink: 'syz.2.9121': attribute type 1 has an invalid length. [ 598.102858][T25839] FAULT_INJECTION: forcing a failure. [ 598.102858][T25839] name failslab, interval 1, probability 0, space 0, times 0 [ 598.102918][T25839] CPU: 0 UID: 0 PID: 25839 Comm: syz.2.9135 Tainted: G U L syzkaller #0 PREEMPT(full) [ 598.102951][T25839] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 598.102959][T25839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 598.102971][T25839] Call Trace: [ 598.102978][T25839] [ 598.102986][T25839] dump_stack_lvl+0x100/0x190 [ 598.103023][T25839] should_fail_ex.cold+0x5/0xa [ 598.103054][T25839] should_failslab+0xc2/0x120 [ 598.103079][T25839] __kmalloc_node_noprof+0xff/0x870 [ 598.103114][T25839] ? get_callchain_buffers+0x1e5/0x380 [ 598.103146][T25839] get_callchain_buffers+0x1e5/0x380 [ 598.103171][T25839] ? security_capable+0x80/0x260 [ 598.103194][T25839] stack_map_alloc+0x316/0x610 [ 598.103217][T25839] map_create+0x874/0x3150 [ 598.103251][T25839] ? __lock_acquire+0x5c0/0x1f40 [ 598.103280][T25839] ? __pfx_map_create+0x10/0x10 [ 598.103320][T25839] ? lock_acquire+0x1d1/0x380 [ 598.103340][T25839] ? __might_fault+0xc5/0x140 [ 598.103368][T25839] ? __might_fault+0xc5/0x140 [ 598.103403][T25839] __sys_bpf+0x14cb/0x4b60 [ 598.103430][T25839] ? __pfx___sys_bpf+0x10/0x10 [ 598.103449][T25839] ? find_held_lock+0x2b/0x80 [ 598.103476][T25839] ? futex_wake+0x4ea/0x5e0 [ 598.103514][T25839] ? rcu_read_lock_any_held+0x6a/0x90 [ 598.103545][T25839] ? find_held_lock+0x2b/0x80 [ 598.103572][T25839] ? ksys_write+0x190/0x250 [ 598.103592][T25839] ? ksys_write+0x190/0x250 [ 598.103626][T25839] ? __x64_sys_futex+0x34f/0x4d0 [ 598.103655][T25839] ? __x64_sys_futex+0x358/0x4d0 [ 598.103687][T25839] ? xfd_validate_state+0x129/0x190 [ 598.103713][T25839] ? __x64_sys_bpf+0xce/0x140 [ 598.103732][T25839] __x64_sys_bpf+0xce/0x140 [ 598.103753][T25839] ? do_syscall_64+0xae/0x770 [ 598.103777][T25839] do_syscall_64+0x121/0x770 [ 598.103802][T25839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.103823][T25839] RIP: 0033:0x7fd14ff9f559 [ 598.103840][T25839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.103861][T25839] RSP: 002b:00007fd150e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.103881][T25839] RAX: ffffffffffffffda RBX: 00007fd150225fa0 RCX: 00007fd14ff9f559 [ 598.103894][T25839] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 598.103907][T25839] RBP: 00007fd150036b20 R08: 0000000000000000 R09: 0000000000000000 [ 598.103920][T25839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.103932][T25839] R13: 00007fd150226038 R14: 00007fd150225fa0 R15: 00007ffc98c32468 [ 598.103959][T25839] [ 598.601396][T25847] FAULT_INJECTION: forcing a failure. [ 598.601396][T25847] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 598.601493][T25847] CPU: 0 UID: 0 PID: 25847 Comm: syz.2.9139 Tainted: G U L syzkaller #0 PREEMPT(full) [ 598.601531][T25847] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 598.601540][T25847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 598.601555][T25847] Call Trace: [ 598.601563][T25847] [ 598.601572][T25847] dump_stack_lvl+0x100/0x190 [ 598.601615][T25847] should_fail_ex.cold+0x5/0xa [ 598.601650][T25847] core_sys_select+0x938/0xc20 [ 598.601683][T25847] ? __pfx_core_sys_select+0x10/0x10 [ 598.601716][T25847] ? __lock_acquire+0x5c0/0x1f40 [ 598.601764][T25847] ? ktime_get_ts64+0x306/0x420 [ 598.601868][T25847] ? ktime_get_ts64+0x318/0x420 [ 598.601896][T25847] ? ktime_get_ts64+0x257/0x420 [ 598.601929][T25847] kern_select+0x1d0/0x280 [ 598.601957][T25847] ? __pfx_kern_select+0x10/0x10 [ 598.601993][T25847] __x64_sys_select+0xbd/0x160 [ 598.602017][T25847] ? do_syscall_64+0xae/0x770 [ 598.602043][T25847] ? lockdep_hardirqs_on+0x7d/0x110 [ 598.602069][T25847] do_syscall_64+0x121/0x770 [ 598.602098][T25847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.602124][T25847] RIP: 0033:0x7fd14ff9f559 [ 598.602143][T25847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.602166][T25847] RSP: 002b:00007fd150e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 598.602190][T25847] RAX: ffffffffffffffda RBX: 00007fd150225fa0 RCX: 00007fd14ff9f559 [ 598.602206][T25847] RDX: 0000200000000680 RSI: 0000200000000600 RDI: 0000000000000005 [ 598.602233][T25847] RBP: 00007fd150036b20 R08: 0000200000000780 R09: 0000000000000000 [ 598.602247][T25847] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000 [ 598.602294][T25847] R13: 00007fd150226038 R14: 00007fd150225fa0 R15: 00007ffc98c32468 [ 598.602324][T25847] [ 599.011519][T25855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9143'. [ 599.396157][T25872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9150'. [ 601.332435][T25947] openvswitch: netlink: IP tunnel dst address not specified [ 601.855173][T25967] netlink: 'syz.1.9205': attribute type 1 has an invalid length. [ 601.886691][T25969] openvswitch: netlink: Key type 261 is out of range max 32 [ 602.184290][T25979] netlink: Invalid conntrack timeout [ 602.808101][T26005] FAULT_INJECTION: forcing a failure. [ 602.808101][T26005] name failslab, interval 1, probability 0, space 0, times 0 [ 602.808133][T26005] CPU: 0 UID: 0 PID: 26005 Comm: syz.1.9213 Tainted: G U L syzkaller #0 PREEMPT(full) [ 602.808165][T26005] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 602.808173][T26005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 602.808185][T26005] Call Trace: [ 602.808192][T26005] [ 602.808200][T26005] dump_stack_lvl+0x100/0x190 [ 602.808237][T26005] should_fail_ex.cold+0x5/0xa [ 602.808268][T26005] should_failslab+0xc2/0x120 [ 602.808292][T26005] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 602.808327][T26005] ? sock_alloc_inode+0x26/0x2c0 [ 602.808358][T26005] ? __pfx_sock_alloc_inode+0x10/0x10 [ 602.808389][T26005] sock_alloc_inode+0x26/0x2c0 [ 602.808417][T26005] ? __pfx_sock_alloc_inode+0x10/0x10 [ 602.808446][T26005] alloc_inode+0x68/0x250 [ 602.808476][T26005] sock_alloc+0x42/0x240 [ 602.808504][T26005] __sock_create+0xc2/0x860 [ 602.808535][T26005] ? __local_bh_enable_ip+0xa5/0x120 [ 602.808559][T26005] smc_create_clcsk+0x37/0xd0 [ 602.808581][T26005] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 602.808610][T26005] inet6_create+0xb1a/0x12b0 [ 602.808643][T26005] ? inet6_create+0x7f/0x12b0 [ 602.808676][T26005] __sock_create+0x339/0x860 [ 602.808712][T26005] __sys_socket+0x14d/0x260 [ 602.808732][T26005] ? __pfx___sys_socket+0x10/0x10 [ 602.808758][T26005] __x64_sys_socket+0x72/0xb0 [ 602.808777][T26005] ? lockdep_hardirqs_on+0x7d/0x110 [ 602.808799][T26005] do_syscall_64+0x121/0x770 [ 602.808824][T26005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.808846][T26005] RIP: 0033:0x7fd0b1f9f559 [ 602.808870][T26005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.808893][T26005] RSP: 002b:00007fd0b2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 602.808913][T26005] RAX: ffffffffffffffda RBX: 00007fd0b2225fa0 RCX: 00007fd0b1f9f559 [ 602.808927][T26005] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 000000000000000a [ 602.808940][T26005] RBP: 00007fd0b2036b20 R08: 0000000000000000 R09: 0000000000000000 [ 602.808952][T26005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.808965][T26005] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 602.808993][T26005] [ 602.886626][T26005] socket: no more sockets [ 603.267750][T26011] netlink: 'syz.3.9215': attribute type 1 has an invalid length. [ 603.711146][T26028] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.996389][T26040] nfsd: Unknown parameter 'batadv' [ 604.358240][T26056] random: crng reseeded on system resumption [ 604.741201][T26071] openvswitch: netlink: Multiple metadata blocks provided [ 605.263644][T26089] netlink: 'syz.4.9248': attribute type 1 has an invalid length. [ 605.958942][T26118] MTRR 1 not used [ 606.286420][ T6201] Bluetooth: hci0: unexpected event 0x3e length: 508 > 255 [ 606.286444][ T6201] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 254 [ 606.286461][ T6201] Bluetooth: hci0: Dropping invalid advertising data [ 606.286473][ T6201] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 606.286495][ T6201] Bluetooth: hci0: unknown advertising packet type: 0x8b [ 606.286509][ T6201] Bluetooth: hci0: unknown advertising packet type: 0xee [ 606.976730][T26156] FAULT_INJECTION: forcing a failure. [ 606.976730][T26156] name failslab, interval 1, probability 0, space 0, times 0 [ 606.976766][T26156] CPU: 0 UID: 0 PID: 26156 Comm: syz.3.9280 Tainted: G U L syzkaller #0 PREEMPT(full) [ 606.976804][T26156] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 606.976813][T26156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 606.976828][T26156] Call Trace: [ 606.976836][T26156] [ 606.976845][T26156] dump_stack_lvl+0x100/0x190 [ 606.976887][T26156] should_fail_ex.cold+0x5/0xa [ 606.976922][T26156] should_failslab+0xc2/0x120 [ 606.976950][T26156] __kmalloc_cache_noprof+0x91/0x6d0 [ 606.976986][T26156] ? assoc_array_insert+0x10b/0x32c0 [ 606.977029][T26156] assoc_array_insert+0x10b/0x32c0 [ 606.977067][T26156] ? __mutex_lock+0x267/0x1c10 [ 606.977094][T26156] ? key_link+0x2bb/0x390 [ 606.977158][T26156] ? __pfx___mutex_lock+0x10/0x10 [ 606.977184][T26156] ? __pfx_assoc_array_insert+0x10/0x10 [ 606.977214][T26156] ? __pfx___might_resched+0x10/0x10 [ 606.977251][T26156] ? down_write+0x141/0x1f0 [ 606.977276][T26156] ? __pfx_down_write+0x10/0x10 [ 606.977303][T26156] __key_link_begin+0xf5/0x260 [ 606.977336][T26156] key_link+0x103/0x390 [ 606.977365][T26156] ? __up_read+0x333/0x980 [ 606.977391][T26156] ? __pfx_key_link+0x10/0x10 [ 606.977420][T26156] ? bpf_lsm_key_permission+0x9/0x10 [ 606.977442][T26156] ? key_task_permission+0x2c7/0x3c0 [ 606.977476][T26156] keyctl_get_persistent+0x5bd/0x860 [ 606.977510][T26156] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 606.977544][T26156] ? __x64_sys_futex+0x34f/0x4d0 [ 606.977574][T26156] ? __x64_sys_futex+0x358/0x4d0 [ 606.977607][T26156] ? xfd_validate_state+0x129/0x190 [ 606.977639][T26156] __do_sys_keyctl+0x3b2/0x5a0 [ 606.977663][T26156] do_syscall_64+0x121/0x770 [ 606.977688][T26156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.977710][T26156] RIP: 0033:0x7f6f7a99f559 [ 606.977727][T26156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.977747][T26156] RSP: 002b:00007f6f7b827028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 606.977766][T26156] RAX: ffffffffffffffda RBX: 00007f6f7ac25fa0 RCX: 00007f6f7a99f559 [ 606.977780][T26156] RDX: 00000000fffffffe RSI: ffffffffffffffff RDI: 2000000000000016 [ 606.977793][T26156] RBP: 00007f6f7aa36b20 R08: 0000000000001000 R09: 0000000000000000 [ 606.977806][T26156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.977818][T26156] R13: 00007f6f7ac26038 R14: 00007f6f7ac25fa0 R15: 00007ffc6bf31d68 [ 606.977846][T26156] [ 607.693853][T26175] bond0: option packets_per_slave: invalid value () [ 607.693877][T26175] bond0: option packets_per_slave: allowed values 0 - 65535 [ 607.975828][T26186] FAULT_INJECTION: forcing a failure. [ 607.975828][T26186] name failslab, interval 1, probability 0, space 0, times 0 [ 607.975882][T26186] CPU: 0 UID: 0 PID: 26186 Comm: syz.2.9296 Tainted: G U L syzkaller #0 PREEMPT(full) [ 607.975917][T26186] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 607.975927][T26186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 607.975941][T26186] Call Trace: [ 607.975949][T26186] [ 607.975957][T26186] dump_stack_lvl+0x100/0x190 [ 607.975998][T26186] should_fail_ex.cold+0x5/0xa [ 607.976032][T26186] should_failslab+0xc2/0x120 [ 607.976059][T26186] __kmalloc_noprof+0xfc/0x840 [ 607.976096][T26186] ? lsm_blob_alloc+0x68/0x90 [ 607.976137][T26186] lsm_blob_alloc+0x68/0x90 [ 607.976173][T26186] security_prepare_creds+0x2d/0x290 [ 607.976208][T26186] prepare_creds+0x5d6/0x950 [ 607.976247][T26186] copy_creds+0xa7/0xa50 [ 607.976287][T26186] copy_process+0x144f/0x84c0 [ 607.976309][T26186] ? futex_unqueue+0x133/0x2c0 [ 607.976340][T26186] ? futex_unqueue+0x133/0x2c0 [ 607.976385][T26186] ? __pfx_copy_process+0x10/0x10 [ 607.976425][T26186] ? _copy_from_user+0x59/0xd0 [ 607.976461][T26186] kernel_clone+0x176/0x9d0 [ 607.976487][T26186] ? __pfx_kernel_clone+0x10/0x10 [ 607.976528][T26186] __do_sys_clone3+0x214/0x290 [ 607.976552][T26186] ? __pfx___do_sys_clone3+0x10/0x10 [ 607.976576][T26186] ? ksys_write+0x190/0x250 [ 607.976610][T26186] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 607.976663][T26186] do_syscall_64+0x121/0x770 [ 607.976692][T26186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.976727][T26186] RIP: 0033:0x7fd14ff9f559 [ 607.976746][T26186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.976767][T26186] RSP: 002b:00007fd150e5bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 607.976788][T26186] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd14ff9f559 [ 607.976802][T26186] RDX: 00007fd150e5bf10 RSI: 0000000000000058 RDI: 00007fd150e5bf10 [ 607.976816][T26186] RBP: 00007fd150036b20 R08: 0000000000000000 R09: 0000000000000058 [ 607.976829][T26186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.976843][T26186] R13: 00007fd150226038 R14: 00007fd150225fa0 R15: 00007ffc98c32468 [ 607.976870][T26186] [ 611.679946][ T31] bridge_slave_1: left allmulticast mode [ 611.679971][ T31] bridge_slave_1: left promiscuous mode [ 611.680135][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.726071][ T31] bridge_slave_0: left allmulticast mode [ 611.726155][ T31] bridge_slave_0: left promiscuous mode [ 611.726313][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.215420][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.217291][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.218348][ T31] bond0 (unregistering): Released all slaves [ 612.622725][T26336] Â: entered promiscuous mode [ 612.869831][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 612.874324][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.876767][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.878024][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.915345][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 613.330350][T26377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9369'. [ 613.618492][T26387] device-mapper: ioctl: Invalid ioctl structure: name €, dev 7f00000006 [ 613.899379][ T31] hsr_slave_0: left promiscuous mode [ 613.901713][ T31] hsr_slave_1: left promiscuous mode [ 613.902441][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.902459][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.936491][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.936513][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.988705][ T31] veth1_macvtap: left promiscuous mode [ 613.988738][ T31] veth0_macvtap: left promiscuous mode [ 613.988810][ T31] veth1_vlan: left promiscuous mode [ 613.988869][ T31] veth0_vlan: left promiscuous mode [ 614.717219][ T31] team0 (unregistering): Port device team_slave_1 removed [ 614.755186][ T31] team0 (unregistering): Port device team_slave_0 removed [ 615.017259][ T53] Bluetooth: hci3: command tx timeout [ 615.370293][T26355] rxe_eth0 speed is unknown, defaulting to 1000 [ 615.851545][T26444] netlink: ct family unspecified [ 616.073773][T26465] CIFS: VFS: Invalid SecurityFlags: [ 616.377723][T26503] FAULT_INJECTION: forcing a failure. [ 616.377723][T26503] name failslab, interval 1, probability 0, space 0, times 0 [ 616.377759][T26503] CPU: 0 UID: 0 PID: 26503 Comm: syz.4.9413 Tainted: G U L syzkaller #0 PREEMPT(full) [ 616.377795][T26503] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 616.377805][T26503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 616.377819][T26503] Call Trace: [ 616.377827][T26503] [ 616.377835][T26503] dump_stack_lvl+0x100/0x190 [ 616.377878][T26503] should_fail_ex.cold+0x5/0xa [ 616.377913][T26503] should_failslab+0xc2/0x120 [ 616.377940][T26503] __kmalloc_cache_noprof+0x91/0x6d0 [ 616.377973][T26503] ? proc_thread_self_get_link+0x1a6/0x210 [ 616.378012][T26503] proc_thread_self_get_link+0x1a6/0x210 [ 616.378047][T26503] pick_link+0xabc/0x13c0 [ 616.378083][T26503] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 616.378125][T26503] step_into_slowpath+0x9ba/0xf90 [ 616.378170][T26503] ? __pfx_step_into_slowpath+0x10/0x10 [ 616.378213][T26503] ? lookup_fast+0x2da/0x600 [ 616.378248][T26503] ? inode_permission+0x377/0x630 [ 616.378285][T26503] link_path_walk+0xf32/0x1cc0 [ 616.378333][T26503] path_openat+0x1a7/0x23f0 [ 616.378364][T26503] ? __pfx_path_openat+0x10/0x10 [ 616.378399][T26503] do_file_open+0x20e/0x430 [ 616.378428][T26503] ? __pfx_do_file_open+0x10/0x10 [ 616.378475][T26503] ? _raw_spin_unlock+0x28/0x50 [ 616.378512][T26503] ? alloc_fd+0x471/0x7a0 [ 616.378557][T26503] do_sys_openat2+0x163/0x1d0 [ 616.378588][T26503] ? __pfx_do_sys_openat2+0x10/0x10 [ 616.378631][T26503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.378665][T26503] __x64_sys_openat+0x12d/0x210 [ 616.378697][T26503] ? __pfx___x64_sys_openat+0x10/0x10 [ 616.378749][T26503] do_syscall_64+0x121/0x770 [ 616.378775][T26503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.378796][T26503] RIP: 0033:0x7f790239f559 [ 616.378813][T26503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.378833][T26503] RSP: 002b:00007f79005f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 616.378853][T26503] RAX: ffffffffffffffda RBX: 00007f7902625fa0 RCX: 00007f790239f559 [ 616.378867][T26503] RDX: 0000000000000400 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 616.378880][T26503] RBP: 00007f7902436b20 R08: 0000000000000000 R09: 0000000000000000 [ 616.378892][T26503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.378905][T26503] R13: 00007f7902626038 R14: 00007f7902625fa0 R15: 00007fff06bf9e58 [ 616.378932][T26503] [ 617.070416][T26355] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.072938][T26355] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.074939][T26355] bridge_slave_0: entered allmulticast mode [ 617.093148][ T53] Bluetooth: hci3: command tx timeout [ 617.115277][T26355] bridge_slave_0: entered promiscuous mode [ 617.126950][T26355] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.130232][T26355] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.130334][T26355] bridge_slave_1: entered allmulticast mode [ 617.131782][T26355] bridge_slave_1: entered promiscuous mode [ 617.280924][T26355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.308059][T26355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.419098][T26355] team0: Port device team_slave_0 added [ 617.423518][T26355] team0: Port device team_slave_1 added [ 617.523603][T26355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.523619][T26355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.523644][T26355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.588967][T26355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.588983][T26355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.589008][T26355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.797960][T26355] hsr_slave_0: entered promiscuous mode [ 617.800323][T26355] hsr_slave_1: entered promiscuous mode [ 617.802455][T26355] debugfs: 'hsr0' already exists in 'hsr' [ 617.802958][T26355] Cannot create hsr debugfs directory [ 618.731636][T26355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 618.751184][T26355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.752016][T26355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 618.755311][T26355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.772239][T26355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 618.799489][T26355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.800575][T26355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 618.806046][T26355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.941068][T26767] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 619.094208][T26355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.150500][T26355] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.162396][ T53] Bluetooth: hci3: command tx timeout [ 619.185006][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.185090][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.219881][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.219958][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.561828][T26784] netlink: zone id is out of range [ 620.435773][T26355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.542109][T26355] veth0_vlan: entered promiscuous mode [ 620.564084][T26355] veth1_vlan: entered promiscuous mode [ 620.693380][T26355] veth0_macvtap: entered promiscuous mode [ 620.720236][T26355] veth1_macvtap: entered promiscuous mode [ 620.768485][T26825] FAULT_INJECTION: forcing a failure. [ 620.768485][T26825] name failslab, interval 1, probability 0, space 0, times 0 [ 620.768520][T26825] CPU: 0 UID: 0 PID: 26825 Comm: syz.3.9446 Tainted: G U L syzkaller #0 PREEMPT(full) [ 620.768551][T26825] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 620.768558][T26825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 620.768571][T26825] Call Trace: [ 620.768577][T26825] [ 620.768585][T26825] dump_stack_lvl+0x100/0x190 [ 620.768622][T26825] should_fail_ex.cold+0x5/0xa [ 620.768652][T26825] should_failslab+0xc2/0x120 [ 620.768676][T26825] kmem_cache_alloc_noprof+0x92/0x6a0 [ 620.768708][T26825] ? d_instantiate+0x8a/0xb0 [ 620.768734][T26825] ? alloc_empty_file+0x5b/0x1c0 [ 620.768764][T26825] alloc_empty_file+0x5b/0x1c0 [ 620.768792][T26825] alloc_file_pseudo+0x17e/0x290 [ 620.768820][T26825] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 620.768846][T26825] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 620.768874][T26825] ? secretmem_file_create.isra.0+0x9c/0x470 [ 620.768905][T26825] secretmem_file_create.isra.0+0x1ce/0x470 [ 620.768933][T26825] __x64_sys_memfd_secret+0xd7/0x170 [ 620.768963][T26825] do_syscall_64+0x121/0x770 [ 620.768988][T26825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.769010][T26825] RIP: 0033:0x7f6f7a99f559 [ 620.769026][T26825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.769046][T26825] RSP: 002b:00007f6f7b827028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 620.769066][T26825] RAX: ffffffffffffffda RBX: 00007f6f7ac25fa0 RCX: 00007f6f7a99f559 [ 620.769080][T26825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.769091][T26825] RBP: 00007f6f7aa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 620.769104][T26825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.769116][T26825] R13: 00007f6f7ac26038 R14: 00007f6f7ac25fa0 R15: 00007ffc6bf31d68 [ 620.769142][T26825] [ 620.770084][T26355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.029627][T26355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.096603][ T3273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.126552][ T3273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.127641][ T3273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.127677][ T3273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.225511][ T53] Bluetooth: hci3: command tx timeout [ 621.376184][ T3273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.376204][ T3273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.542197][ T3273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.542217][ T3273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.181817][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.181869][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.799003][T26932] netlink: 'syz.4.9501': attribute type 2 has an invalid length. [ 623.840669][T26933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 624.033886][T26939] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 625.648823][T27003] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9528'. [ 625.648870][T27003] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9528'. [ 625.967397][T27013] FAULT_INJECTION: forcing a failure. [ 625.967397][T27013] name failslab, interval 1, probability 0, space 0, times 0 [ 625.967430][T27013] CPU: 0 UID: 0 PID: 27013 Comm: syz.1.9533 Tainted: G U L syzkaller #0 PREEMPT(full) [ 625.967462][T27013] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 625.967470][T27013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 625.967482][T27013] Call Trace: [ 625.967489][T27013] [ 625.967497][T27013] dump_stack_lvl+0x100/0x190 [ 625.967535][T27013] should_fail_ex.cold+0x5/0xa [ 625.967567][T27013] should_failslab+0xc2/0x120 [ 625.967591][T27013] __kmalloc_noprof+0xfc/0x840 [ 625.967624][T27013] ? tomoyo_encode2+0xfb/0x3c0 [ 625.967732][T27013] tomoyo_encode2+0xfb/0x3c0 [ 625.967766][T27013] tomoyo_encode+0x29/0x50 [ 625.967795][T27013] tomoyo_realpath_from_path+0x18c/0x690 [ 625.967832][T27013] tomoyo_mkdev_perm+0x231/0x570 [ 625.967857][T27013] ? tomoyo_mkdev_perm+0x21d/0x570 [ 625.967885][T27013] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 625.967911][T27013] ? do_raw_spin_lock+0x128/0x260 [ 625.967945][T27013] ? do_raw_spin_unlock+0x145/0x1e0 [ 625.967989][T27013] ? simple_lookup+0xfc/0x1d0 [ 625.968038][T27013] tomoyo_path_mknod+0xe2/0x190 [ 625.968058][T27013] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 625.968080][T27013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.968139][T27013] security_path_mknod+0x161/0x300 [ 625.968172][T27013] filename_mknodat+0x241/0x7f0 [ 625.968202][T27013] ? __pfx_filename_mknodat+0x10/0x10 [ 625.968227][T27013] ? strncpy_from_user+0x19d/0x2d0 [ 625.968289][T27013] ? do_getname+0x191/0x390 [ 625.968320][T27013] __x64_sys_mknod+0x8f/0xc0 [ 625.968346][T27013] do_syscall_64+0x121/0x770 [ 625.968373][T27013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.968395][T27013] RIP: 0033:0x7fd0b1f9f559 [ 625.968412][T27013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.968432][T27013] RSP: 002b:00007fd0b2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 625.968453][T27013] RAX: ffffffffffffffda RBX: 00007fd0b2225fa0 RCX: 00007fd0b1f9f559 [ 625.968466][T27013] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 625.968479][T27013] RBP: 00007fd0b2036b20 R08: 0000000000000000 R09: 0000000000000000 [ 625.968492][T27013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.968504][T27013] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 625.968533][T27013] [ 625.968551][T27013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 627.886781][ T6201] Bluetooth: hci0: ISO packet for unknown connection handle 4095 [ 628.309061][ T6201] Bluetooth: hci3: command 0x0405 tx timeout [ 628.669866][T27107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9576'. [ 628.698880][T27107] netlink: 29 bytes leftover after parsing attributes in process `syz.4.9576'. [ 629.126623][T27119] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 629.778372][T27147] [U] [ 629.778417][T27147] [U] [ 629.778454][T27147] [U] [ 629.778488][T27147] [U] [ 629.778689][T27147] [U] [ 629.778727][T27147] [U] [ 629.778768][T27147] [U] [ 629.778807][T27147] [U] [ 629.810173][T27147] [U] [ 629.810211][T27147] [U] [ 629.810244][T27147] [U] [ 629.810277][T27147] [U] [ 629.810445][T27147] [U] [ 629.810478][T27147] [U] [ 629.810512][T27147] [U] [ 629.810544][T27147] [U] [ 629.819170][T27147] [U] [ 629.819206][T27147] [U] [ 629.819239][T27147] [U] [ 629.819271][T27147] [U] [ 629.819446][T27147] [U] [ 629.819480][T27147] [U] [ 629.819512][T27147] [U] [ 629.819544][T27147] [U] [ 629.822452][T27147] [U] [ 629.822488][T27147] [U] [ 629.822520][T27147] [U] [ 629.822553][T27147] [U] [ 629.822712][T27147] [U] [ 629.822744][T27147] [U] [ 629.822776][T27147] [U] [ 629.822808][T27147] [U] [ 629.823007][T27147] [U] [ 629.823042][T27147] [U] [ 629.823075][T27147] [U] [ 629.823107][T27147] [U] [ 629.910370][T27147] [U] [ 629.910407][T27147] [U] [ 629.910446][T27147] [U] [ 629.910478][T27147] [U] [ 629.915012][T27147] [U] [ 629.915049][T27147] [U] [ 629.915082][T27147] [U] [ 629.915114][T27147] [U] [ 629.915281][T27147] [U] [ 629.915314][T27147] [U] [ 629.915347][T27147] [U] [ 629.915385][T27147] [U] [ 629.915579][T27147] [U] [ 629.915612][T27147] [U] [ 629.915644][T27147] [U] [ 629.915677][T27147] [U] [ 629.915834][T27147] [U] [ 629.915870][T27147] [U] [ 629.915902][T27147] [U] [ 629.915934][T27147] [U] [ 629.985709][T27144] [U] [ 631.203030][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9624'. [ 631.203053][T27195] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 631.469540][T27207] Unsupported ieee802154 address type: 0 [ 632.749381][T27260] FAULT_INJECTION: forcing a failure. [ 632.749381][T27260] name failslab, interval 1, probability 0, space 0, times 0 [ 632.749418][T27260] CPU: 0 UID: 0 PID: 27260 Comm: syz.2.9650 Tainted: G U L syzkaller #0 PREEMPT(full) [ 632.749451][T27260] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 632.749459][T27260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 632.749473][T27260] Call Trace: [ 632.749480][T27260] [ 632.749488][T27260] dump_stack_lvl+0x100/0x190 [ 632.749527][T27260] should_fail_ex.cold+0x5/0xa [ 632.749559][T27260] should_failslab+0xc2/0x120 [ 632.749585][T27260] __kvmalloc_node_noprof+0x113/0x9b0 [ 632.749622][T27260] ? do_raw_spin_lock+0x128/0x260 [ 632.749649][T27260] ? alloc_fdtable+0x17f/0x2d0 [ 632.749676][T27260] alloc_fdtable+0x17f/0x2d0 [ 632.749710][T27260] dup_fd+0xa1e/0xd90 [ 632.749733][T27260] ? copy_fs_struct+0x29b/0x340 [ 632.749755][T27260] ? do_raw_spin_unlock+0x145/0x1e0 [ 632.749784][T27260] unshare_fd+0xd6/0x140 [ 632.749807][T27260] ksys_unshare+0x3c7/0x980 [ 632.749830][T27260] ? __pfx_ksys_unshare+0x10/0x10 [ 632.749864][T27260] __x64_sys_unshare+0x31/0x40 [ 632.749886][T27260] do_syscall_64+0x121/0x770 [ 632.749912][T27260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.749933][T27260] RIP: 0033:0x7f892d99f559 [ 632.749949][T27260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.749970][T27260] RSP: 002b:00007f892e7f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 632.749990][T27260] RAX: ffffffffffffffda RBX: 00007f892dc25fa0 RCX: 00007f892d99f559 [ 632.750004][T27260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020600 [ 632.750016][T27260] RBP: 00007f892da36b20 R08: 0000000000000000 R09: 0000000000000000 [ 632.750028][T27260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.750041][T27260] R13: 00007f892dc26038 R14: 00007f892dc25fa0 R15: 00007ffc1275fa68 [ 632.750067][T27260] [ 633.758177][T27290] netlink: 'syz.1.9655': attribute type 11 has an invalid length. [ 638.071681][T27453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9734'. [ 638.474275][T27464] openvswitch: netlink: Key type 29 is not supported [ 638.694267][T27472] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.69206016.4294967293), cmd(3) [ 641.226983][T27572] netlink: set zone limit has 4 unknown bytes [ 641.390569][T27578] nbd: must specify a size in bytes for the device [ 641.698686][T27590] ieee802154 phy0 wpan0: encryption failed: -22 [ 641.910170][ T53] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 642.017570][T27598] rxe_eth0 speed is unknown, defaulting to 1000 [ 642.299708][T27616] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 642.602573][ T2249] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 643.367837][T27683] FAULT_INJECTION: forcing a failure. [ 643.367837][T27683] name failslab, interval 1, probability 0, space 0, times 0 [ 643.367871][T27683] CPU: 0 UID: 0 PID: 27683 Comm: syz.4.9829 Tainted: G U L syzkaller #0 PREEMPT(full) [ 643.367903][T27683] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 643.367911][T27683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 643.367924][T27683] Call Trace: [ 643.367931][T27683] [ 643.367939][T27683] dump_stack_lvl+0x100/0x190 [ 643.367976][T27683] should_fail_ex.cold+0x5/0xa [ 643.368006][T27683] should_failslab+0xc2/0x120 [ 643.368031][T27683] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 643.368065][T27683] ? __d_alloc+0x34/0xad0 [ 643.368095][T27683] __d_alloc+0x34/0xad0 [ 643.368138][T27683] d_alloc_pseudo+0x1c/0xc0 [ 643.368170][T27683] alloc_file_pseudo+0x118/0x290 [ 643.368200][T27683] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 643.368229][T27683] ? hugetlbfs_get_inode+0x394/0x740 [ 643.368346][T27683] hugetlb_file_setup+0x2a8/0x5b0 [ 643.368385][T27683] ksys_mmap_pgoff+0x242/0x610 [ 643.368421][T27683] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 643.368454][T27683] ? xfd_validate_state+0x129/0x190 [ 643.368482][T27683] __x64_sys_mmap+0x125/0x190 [ 643.368509][T27683] do_syscall_64+0x121/0x770 [ 643.368535][T27683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.368556][T27683] RIP: 0033:0x7f790239f559 [ 643.368573][T27683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.368593][T27683] RSP: 002b:00007f79005f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 643.368613][T27683] RAX: ffffffffffffffda RBX: 00007f7902625fa0 RCX: 00007f790239f559 [ 643.368627][T27683] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 643.368639][T27683] RBP: 00007f7902436b20 R08: ffffffffffffffff R09: 0000308000000000 [ 643.368653][T27683] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 643.368666][T27683] R13: 00007f7902626038 R14: 00007f7902625fa0 R15: 00007fff06bf9e58 [ 643.368693][T27683] [ 644.208448][T27703] vmstat_refresh: nr_hugetlb -7680 [ 644.766043][T27728] openvswitch: netlink: IP tunnel dst address not specified [ 645.572004][T27758] openvswitch: netlink: Missing valid actions attribute. [ 646.146392][T27779] openvswitch: netlink: Message has 1 unknown bytes. [ 648.480186][T27863] netlink: 'syz.3.9911': attribute type 1 has an invalid length. [ 649.902046][T27923] openvswitch: netlink: Flow key attr not present in new flow. [ 650.659965][T27950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 652.810130][T28039] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 652.941076][T28041] MTRR 1 not used [ 654.554895][T28108] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.10025:28108 [ 655.212686][T28133] NFSD: Failed to start, no listeners configured. [ 656.252217][T28181] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 656.680398][T28198] ERROR: Out of memory at tomoyo_memory_ok. [ 660.308291][T28336] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 661.096843][T28335] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 661.135344][T28368] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 661.663231][T28385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10155'. [ 661.870531][T28391] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 661.908691][T28392] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 662.370074][T28366] kexec: Could not allocate control_code_buffer [ 663.140076][T28435] netlink: 'syz.4.10179': attribute type 2 has an invalid length. [ 663.342228][T28443] sd 0:0:1:0: PR command failed: 1026 [ 663.342274][T28443] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 663.342331][T28443] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 664.842309][T28497] netlink: 334 bytes leftover after parsing attributes in process `syz.1.10209'. [ 665.244633][T28516] nbd: must specify an index to disconnect [ 665.678093][T28537] openvswitch: netlink: IP tunnel TTL not specified. [ 665.979004][T28549] FAULT_INJECTION: forcing a failure. [ 665.979004][T28549] name failslab, interval 1, probability 0, space 0, times 0 [ 665.979044][T28549] CPU: 0 UID: 0 PID: 28549 Comm: syz.1.10231 Tainted: G U L syzkaller #0 PREEMPT(full) [ 665.979075][T28549] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 665.979083][T28549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 665.979096][T28549] Call Trace: [ 665.979103][T28549] [ 665.979110][T28549] dump_stack_lvl+0x100/0x190 [ 665.979147][T28549] should_fail_ex.cold+0x5/0xa [ 665.979179][T28549] should_failslab+0xc2/0x120 [ 665.979204][T28549] __kmalloc_cache_noprof+0x91/0x6d0 [ 665.979234][T28549] ? watch_queue_init+0x45/0x170 [ 665.979259][T28549] watch_queue_init+0x45/0x170 [ 665.979280][T28549] create_pipe_files+0x64c/0x930 [ 665.979309][T28549] do_pipe2+0xbd/0x1e0 [ 665.979333][T28549] ? __pfx_do_pipe2+0x10/0x10 [ 665.979357][T28549] ? xfd_validate_state+0x129/0x190 [ 665.979387][T28549] __x64_sys_pipe2+0x54/0x80 [ 665.979412][T28549] do_syscall_64+0x121/0x770 [ 665.979439][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.979461][T28549] RIP: 0033:0x7fd0b1f9f559 [ 665.979478][T28549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.979498][T28549] RSP: 002b:00007fd0b2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 665.979517][T28549] RAX: ffffffffffffffda RBX: 00007fd0b2225fa0 RCX: 00007fd0b1f9f559 [ 665.979531][T28549] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 665.979543][T28549] RBP: 00007fd0b2036b20 R08: 0000000000000000 R09: 0000000000000000 [ 665.979555][T28549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.979568][T28549] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 665.979594][T28549] [ 667.041643][T28583] FAULT_INJECTION: forcing a failure. [ 667.041643][T28583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.041682][T28583] CPU: 0 UID: 0 PID: 28583 Comm: syz.1.10244 Tainted: G U L syzkaller #0 PREEMPT(full) [ 667.041718][T28583] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 667.041728][T28583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 667.041742][T28583] Call Trace: [ 667.041750][T28583] [ 667.041759][T28583] dump_stack_lvl+0x100/0x190 [ 667.041802][T28583] should_fail_ex.cold+0x5/0xa [ 667.041837][T28583] core_sys_select+0x938/0xc20 [ 667.041871][T28583] ? __pfx_core_sys_select+0x10/0x10 [ 667.041903][T28583] ? __lock_acquire+0x5c0/0x1f40 [ 667.041959][T28583] ? ktime_get_ts64+0x306/0x420 [ 667.041992][T28583] ? ktime_get_ts64+0x318/0x420 [ 667.042019][T28583] ? ktime_get_ts64+0x257/0x420 [ 667.042052][T28583] kern_select+0x1d0/0x280 [ 667.042080][T28583] ? __pfx_kern_select+0x10/0x10 [ 667.042116][T28583] __x64_sys_select+0xbd/0x160 [ 667.042140][T28583] ? do_syscall_64+0xae/0x770 [ 667.042166][T28583] ? lockdep_hardirqs_on+0x7d/0x110 [ 667.042192][T28583] do_syscall_64+0x121/0x770 [ 667.042221][T28583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.042246][T28583] RIP: 0033:0x7fd0b1f9f559 [ 667.042278][T28583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.042301][T28583] RSP: 002b:00007fd0b2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 667.042323][T28583] RAX: ffffffffffffffda RBX: 00007fd0b2225fa0 RCX: 00007fd0b1f9f559 [ 667.042338][T28583] RDX: 0000200000000680 RSI: 0000200000000600 RDI: 0000000000000005 [ 667.042353][T28583] RBP: 00007fd0b2036b20 R08: 0000200000000780 R09: 0000000000000000 [ 667.042367][T28583] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000 [ 667.042382][T28583] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 667.042413][T28583] [ 667.361230][T28586] CIFS: VFS: Invalid SecurityFlags: [ 668.143789][T28617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10261'. [ 669.018141][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.218811][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.322846][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.410056][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.949231][T28676] FAULT_INJECTION: forcing a failure. [ 669.949231][T28676] name failslab, interval 1, probability 0, space 0, times 0 [ 669.949269][T28676] CPU: 0 UID: 0 PID: 28676 Comm: syz.1.10278 Tainted: G U L syzkaller #0 PREEMPT(full) [ 669.949305][T28676] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 669.949315][T28676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 669.949330][T28676] Call Trace: [ 669.949338][T28676] [ 669.949347][T28676] dump_stack_lvl+0x100/0x190 [ 669.949411][T28676] should_fail_ex.cold+0x5/0xa [ 669.949448][T28676] should_failslab+0xc2/0x120 [ 669.949476][T28676] __kmalloc_noprof+0xfc/0x840 [ 669.949514][T28676] ? lsm_blob_alloc+0x68/0x90 [ 669.949558][T28676] lsm_blob_alloc+0x68/0x90 [ 669.949595][T28676] security_prepare_creds+0x2d/0x290 [ 669.949632][T28676] prepare_creds+0x5d6/0x950 [ 669.949679][T28676] copy_creds+0xa7/0xa50 [ 669.949721][T28676] copy_process+0x144f/0x84c0 [ 669.949745][T28676] ? futex_unqueue+0x133/0x2c0 [ 669.949777][T28676] ? futex_unqueue+0x133/0x2c0 [ 669.949824][T28676] ? __pfx_copy_process+0x10/0x10 [ 669.949869][T28676] ? _copy_from_user+0x59/0xd0 [ 669.949905][T28676] kernel_clone+0x176/0x9d0 [ 669.949931][T28676] ? __pfx_kernel_clone+0x10/0x10 [ 669.949973][T28676] __do_sys_clone3+0x214/0x290 [ 669.950009][T28676] ? __pfx___do_sys_clone3+0x10/0x10 [ 669.950031][T28676] ? ksys_write+0x190/0x250 [ 669.950062][T28676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 669.950111][T28676] do_syscall_64+0x121/0x770 [ 669.950137][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.950160][T28676] RIP: 0033:0x7fd0b1f9f559 [ 669.950178][T28676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.950199][T28676] RSP: 002b:00007fd0b2e89ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 669.950220][T28676] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd0b1f9f559 [ 669.950234][T28676] RDX: 00007fd0b2e89f10 RSI: 0000000000000058 RDI: 00007fd0b2e89f10 [ 669.950248][T28676] RBP: 00007fd0b2036b20 R08: 0000000000000000 R09: 0000000000000058 [ 669.950262][T28676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.950275][T28676] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 669.950303][T28676] [ 670.256627][ T6201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 670.269561][ T6201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 670.277345][ T6201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 670.278697][ T6201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 670.298592][ T6201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 670.368659][ T13] bridge_slave_1: left allmulticast mode [ 670.368685][ T13] bridge_slave_1: left promiscuous mode [ 670.368867][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.416952][ T13] bridge_slave_0: left allmulticast mode [ 670.416976][ T13] bridge_slave_0: left promiscuous mode [ 670.417131][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.051948][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.067192][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.071105][ T13] bond0 (unregistering): Released all slaves [ 671.160978][ T13] $!NW: left promiscuous mode [ 671.407888][T28712] netlink: 'syz.1.10287': attribute type 1 has an invalid length. [ 672.321239][ T6201] Bluetooth: hci0: command tx timeout [ 672.496093][ T5299] 8021q: adding VLAN 0 to HW filter on device eth5 [ 672.647136][T28682] rxe_eth0 speed is unknown, defaulting to 1000 [ 673.487899][T28799] nfsd: Unknown parameter 'batadv' [ 674.175704][ T13] hsr_slave_0: left promiscuous mode [ 674.176150][ T13] hsr_slave_1: left promiscuous mode [ 674.176682][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.176699][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.211713][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.211736][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.268138][ T13] veth1_macvtap: left promiscuous mode [ 674.268172][ T13] veth0_macvtap: left promiscuous mode [ 674.268262][ T13] veth1_vlan: left promiscuous mode [ 674.268315][ T13] veth0_vlan: left promiscuous mode [ 674.388951][ T6201] Bluetooth: hci0: command tx timeout [ 674.813634][T28858] forcing mempool usage for swap_add_folio+0x464/0xfe0 [ 675.057443][ T13] team0 (unregistering): Port device team_slave_1 removed [ 675.084397][T28865] ieee802154 phy0 wpan0: encryption failed: -22 [ 675.101301][ T13] team0 (unregistering): Port device team_slave_0 removed [ 675.293212][ T5299] 8021q: adding VLAN 0 to HW filter on device eth6 [ 675.559219][T28886] FAULT_INJECTION: forcing a failure. [ 675.559219][T28886] name failslab, interval 1, probability 0, space 0, times 0 [ 675.559262][T28886] CPU: 0 UID: 0 PID: 28886 Comm: syz.2.10328 Tainted: G U L syzkaller #0 PREEMPT(full) [ 675.559294][T28886] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 675.559302][T28886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 675.559315][T28886] Call Trace: [ 675.559321][T28886] [ 675.559329][T28886] dump_stack_lvl+0x100/0x190 [ 675.559365][T28886] should_fail_ex.cold+0x5/0xa [ 675.559396][T28886] should_failslab+0xc2/0x120 [ 675.559421][T28886] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 675.559455][T28886] ? sock_alloc_inode+0x26/0x2c0 [ 675.559489][T28886] ? __pfx_sock_alloc_inode+0x10/0x10 [ 675.559519][T28886] sock_alloc_inode+0x26/0x2c0 [ 675.559548][T28886] ? __pfx_sock_alloc_inode+0x10/0x10 [ 675.559576][T28886] alloc_inode+0x68/0x250 [ 675.559606][T28886] sock_alloc+0x42/0x240 [ 675.559635][T28886] __sock_create+0xc2/0x860 [ 675.559666][T28886] ? __local_bh_enable_ip+0xa5/0x120 [ 675.559690][T28886] smc_create_clcsk+0x37/0xd0 [ 675.559712][T28886] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 675.559741][T28886] inet6_create+0xb1a/0x12b0 [ 675.559775][T28886] ? inet6_create+0x7f/0x12b0 [ 675.559807][T28886] __sock_create+0x339/0x860 [ 675.559844][T28886] __sys_socket+0x14d/0x260 [ 675.559864][T28886] ? __pfx___sys_socket+0x10/0x10 [ 675.559891][T28886] __x64_sys_socket+0x72/0xb0 [ 675.559909][T28886] ? lockdep_hardirqs_on+0x7d/0x110 [ 675.559931][T28886] do_syscall_64+0x121/0x770 [ 675.559956][T28886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.559977][T28886] RIP: 0033:0x7f892d99f559 [ 675.559993][T28886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.560014][T28886] RSP: 002b:00007f892e7f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 675.560033][T28886] RAX: ffffffffffffffda RBX: 00007f892dc25fa0 RCX: 00007f892d99f559 [ 675.560048][T28886] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 000000000000000a [ 675.560060][T28886] RBP: 00007f892da36b20 R08: 0000000000000000 R09: 0000000000000000 [ 675.560072][T28886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.560084][T28886] R13: 00007f892dc26038 R14: 00007f892dc25fa0 R15: 00007ffc1275fa68 [ 675.560110][T28886] [ 675.560120][T28886] socket: no more sockets [ 675.905272][T28885] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 676.379645][T28947] netlink: Unknown conntrack attr (type=332, max=9) [ 676.393671][T28682] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.393744][T28682] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.393865][T28682] bridge_slave_0: entered allmulticast mode [ 676.424425][T28682] bridge_slave_0: entered promiscuous mode [ 676.440811][T28682] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.442480][T28682] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.442603][T28682] bridge_slave_1: entered allmulticast mode [ 676.461965][ T6201] Bluetooth: hci0: command tx timeout [ 676.475171][T28682] bridge_slave_1: entered promiscuous mode [ 676.612245][T28682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.632916][T28682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.730111][T28682] team0: Port device team_slave_0 added [ 676.743518][T28682] team0: Port device team_slave_1 added [ 676.842401][T28682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.842418][T28682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.842442][T28682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.910039][T28682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.926413][T28682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.926446][T28682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.156234][T28682] hsr_slave_0: entered promiscuous mode [ 677.173175][T28682] hsr_slave_1: entered promiscuous mode [ 677.173704][T28682] debugfs: 'hsr0' already exists in 'hsr' [ 677.195873][T28682] Cannot create hsr debugfs directory [ 677.484637][T29079] netlink: 'syz.3.10326': attribute type 1 has an invalid length. [ 677.928474][ T5299] 8021q: adding VLAN 0 to HW filter on device eth7 [ 678.526971][ T6201] Bluetooth: hci0: command tx timeout [ 678.680804][T29165] openvswitch: netlink: IP tunnel dst address not specified [ 679.116807][T28682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 679.145693][T28682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.146419][T28682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 679.172886][T28682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 679.185140][T28682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 679.208009][T28682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.211492][T28682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 679.239950][T28682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 679.604109][T28682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.677618][T28682] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.712645][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.712722][ T3391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.765613][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.765713][ T3391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.519998][T28682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.566949][T28682] veth0_vlan: entered promiscuous mode [ 682.594663][T28682] veth1_vlan: entered promiscuous mode [ 682.711442][T28682] veth0_macvtap: entered promiscuous mode [ 682.738445][T28682] veth1_macvtap: entered promiscuous mode [ 682.817973][T28682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.847252][T28682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.894979][ T3391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.895022][ T3391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.895055][ T3391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.895088][ T3391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.188551][T23464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.188571][T23464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.315475][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.315521][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.348787][T23464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.348806][T23464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.342024][T29360] netlink: 'syz.3.10395': attribute type 1 has an invalid length. [ 684.855211][T29375] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10401'. [ 684.855254][T29375] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10401'. [ 685.226319][T29392] FAULT_INJECTION: forcing a failure. [ 685.226319][T29392] name failslab, interval 1, probability 0, space 0, times 0 [ 685.226352][T29392] CPU: 0 UID: 0 PID: 29392 Comm: syz.3.10406 Tainted: G U L syzkaller #0 PREEMPT(full) [ 685.226384][T29392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 685.226392][T29392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 685.226404][T29392] Call Trace: [ 685.226411][T29392] [ 685.226419][T29392] dump_stack_lvl+0x100/0x190 [ 685.226455][T29392] should_fail_ex.cold+0x5/0xa [ 685.226488][T29392] should_failslab+0xc2/0x120 [ 685.226512][T29392] __kmalloc_noprof+0xfc/0x840 [ 685.226545][T29392] ? tomoyo_encode2+0xfb/0x3c0 [ 685.226580][T29392] tomoyo_encode2+0xfb/0x3c0 [ 685.226613][T29392] tomoyo_encode+0x29/0x50 [ 685.226641][T29392] tomoyo_realpath_from_path+0x18c/0x690 [ 685.226678][T29392] tomoyo_mkdev_perm+0x231/0x570 [ 685.226702][T29392] ? tomoyo_mkdev_perm+0x21d/0x570 [ 685.226729][T29392] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 685.226755][T29392] ? do_raw_spin_lock+0x128/0x260 [ 685.226788][T29392] ? do_raw_spin_unlock+0x145/0x1e0 [ 685.226831][T29392] ? simple_lookup+0xfc/0x1d0 [ 685.226859][T29392] tomoyo_path_mknod+0xe2/0x190 [ 685.226878][T29392] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 685.226900][T29392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 685.226931][T29392] security_path_mknod+0x161/0x300 [ 685.226963][T29392] filename_mknodat+0x241/0x7f0 [ 685.227005][T29392] ? __pfx_filename_mknodat+0x10/0x10 [ 685.227030][T29392] ? strncpy_from_user+0x19d/0x2d0 [ 685.227066][T29392] ? do_getname+0x191/0x390 [ 685.227098][T29392] __x64_sys_mknod+0x8f/0xc0 [ 685.227123][T29392] do_syscall_64+0x121/0x770 [ 685.227149][T29392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.227170][T29392] RIP: 0033:0x7f6f7a99f559 [ 685.227187][T29392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.227208][T29392] RSP: 002b:00007f6f7b827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 685.227228][T29392] RAX: ffffffffffffffda RBX: 00007f6f7ac25fa0 RCX: 00007f6f7a99f559 [ 685.227248][T29392] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 685.227261][T29392] RBP: 00007f6f7aa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 685.227274][T29392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.227304][T29392] R13: 00007f6f7ac26038 R14: 00007f6f7ac25fa0 R15: 00007ffc6bf31d68 [ 685.227333][T29392] [ 685.230115][T29392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 685.374056][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 687.119710][ T6201] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 687.271973][T29454] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 688.328134][T29495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 688.899004][T29515] netlink: zone id is out of range [ 690.415054][T29579] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 691.514110][T29624] bond0: option packets_per_slave: invalid value () [ 691.514141][T29624] bond0: option packets_per_slave: allowed values 0 - 65535 [ 693.305395][T29689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10539'. [ 693.879517][T29710] MTRR 1 not used [ 694.933066][T29755] openvswitch: netlink: IP tunnel dst address not specified [ 695.114776][T29761] openvswitch: netlink: Key type 261 is out of range max 32 [ 695.134611][T29763] netlink: 'syz.4.10571': attribute type 1 has an invalid length. [ 695.604073][T29782] openvswitch: netlink: IP tunnel dst address not specified [ 696.160122][T29799] netlink: Invalid conntrack timeout [ 697.943651][T29868] Â: entered promiscuous mode [ 698.281400][T29883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10631'. [ 698.719120][T29898] netlink: ct family unspecified [ 698.788046][T29902] FAULT_INJECTION: forcing a failure. [ 698.788046][T29902] name failslab, interval 1, probability 0, space 0, times 0 [ 698.788080][T29902] CPU: 0 UID: 0 PID: 29902 Comm: syz.1.10637 Tainted: G U L syzkaller #0 PREEMPT(full) [ 698.788112][T29902] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 698.788120][T29902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 698.788133][T29902] Call Trace: [ 698.788140][T29902] [ 698.788148][T29902] dump_stack_lvl+0x100/0x190 [ 698.788185][T29902] should_fail_ex.cold+0x5/0xa [ 698.788215][T29902] should_failslab+0xc2/0x120 [ 698.788240][T29902] __kmalloc_node_noprof+0xff/0x870 [ 698.788275][T29902] ? get_callchain_buffers+0x1e5/0x380 [ 698.788306][T29902] get_callchain_buffers+0x1e5/0x380 [ 698.788331][T29902] ? security_capable+0x80/0x260 [ 698.788354][T29902] stack_map_alloc+0x316/0x610 [ 698.788376][T29902] map_create+0x874/0x3150 [ 698.788410][T29902] ? __lock_acquire+0x5c0/0x1f40 [ 698.788439][T29902] ? __pfx_map_create+0x10/0x10 [ 698.788471][T29902] ? lock_acquire+0x1d1/0x380 [ 698.788491][T29902] ? __might_fault+0xc5/0x140 [ 698.788521][T29902] ? __might_fault+0xc5/0x140 [ 698.788557][T29902] __sys_bpf+0x14cb/0x4b60 [ 698.788584][T29902] ? __pfx___sys_bpf+0x10/0x10 [ 698.788601][T29902] ? find_held_lock+0x2b/0x80 [ 698.788629][T29902] ? futex_wake+0x4ea/0x5e0 [ 698.788666][T29902] ? rcu_read_lock_any_held+0x6a/0x90 [ 698.788697][T29902] ? find_held_lock+0x2b/0x80 [ 698.788725][T29902] ? ksys_write+0x190/0x250 [ 698.788743][T29902] ? ksys_write+0x190/0x250 [ 698.788778][T29902] ? __x64_sys_futex+0x34f/0x4d0 [ 698.788806][T29902] ? __x64_sys_futex+0x358/0x4d0 [ 698.788838][T29902] ? xfd_validate_state+0x129/0x190 [ 698.788865][T29902] ? __x64_sys_bpf+0xce/0x140 [ 698.788883][T29902] __x64_sys_bpf+0xce/0x140 [ 698.788905][T29902] ? do_syscall_64+0xae/0x770 [ 698.788930][T29902] do_syscall_64+0x121/0x770 [ 698.788954][T29902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.788983][T29902] RIP: 0033:0x7fd0b1f9f559 [ 698.789000][T29902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.789020][T29902] RSP: 002b:00007fd0b2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 698.789040][T29902] RAX: ffffffffffffffda RBX: 00007fd0b2225fa0 RCX: 00007fd0b1f9f559 [ 698.789054][T29902] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 698.789067][T29902] RBP: 00007fd0b2036b20 R08: 0000000000000000 R09: 0000000000000000 [ 698.789080][T29902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.789092][T29902] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 698.789119][T29902] [ 699.976745][T29929] openvswitch: netlink: Message has 4 unknown bytes. [ 700.003249][T29927] sd 0:0:1:0: PR command failed: 1026 [ 700.003287][T29927] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 700.003323][T29927] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 700.766867][T29952] netlink: 'syz.2.10661': attribute type 1 has an invalid length. [ 700.875169][T29955] ERROR: Out of memory at tomoyo_memory_ok. [ 700.986985][T29960] FAULT_INJECTION: forcing a failure. [ 700.986985][T29960] name failslab, interval 1, probability 0, space 0, times 0 [ 700.987018][T29960] CPU: 0 UID: 0 PID: 29960 Comm: syz.1.10665 Tainted: G U L syzkaller #0 PREEMPT(full) [ 700.987049][T29960] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 700.987058][T29960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 700.987071][T29960] Call Trace: [ 700.987077][T29960] [ 700.987085][T29960] dump_stack_lvl+0x100/0x190 [ 700.987121][T29960] should_fail_ex.cold+0x5/0xa [ 700.987152][T29960] should_failslab+0xc2/0x120 [ 700.987176][T29960] __kmalloc_cache_noprof+0x91/0x6d0 [ 700.987206][T29960] ? proc_thread_self_get_link+0x1a6/0x210 [ 700.987242][T29960] proc_thread_self_get_link+0x1a6/0x210 [ 700.987273][T29960] pick_link+0xabc/0x13c0 [ 700.987304][T29960] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 700.987337][T29960] step_into_slowpath+0x9ba/0xf90 [ 700.987375][T29960] ? __pfx_step_into_slowpath+0x10/0x10 [ 700.987412][T29960] ? lookup_fast+0x2da/0x600 [ 700.987441][T29960] ? inode_permission+0x377/0x630 [ 700.987473][T29960] link_path_walk+0xf32/0x1cc0 [ 700.987515][T29960] path_openat+0x1a7/0x23f0 [ 700.987543][T29960] ? __pfx_path_openat+0x10/0x10 [ 700.987573][T29960] do_file_open+0x20e/0x430 [ 700.987599][T29960] ? __pfx_do_file_open+0x10/0x10 [ 700.987640][T29960] ? _raw_spin_unlock+0x28/0x50 [ 700.987673][T29960] ? alloc_fd+0x471/0x7a0 [ 700.987703][T29960] do_sys_openat2+0x163/0x1d0 [ 700.987732][T29960] ? __pfx_do_sys_openat2+0x10/0x10 [ 700.987771][T29960] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 700.987803][T29960] __x64_sys_openat+0x12d/0x210 [ 700.987833][T29960] ? __pfx___x64_sys_openat+0x10/0x10 [ 700.987872][T29960] do_syscall_64+0x121/0x770 [ 700.987897][T29960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.987918][T29960] RIP: 0033:0x7fd0b1f9f559 [ 700.987935][T29960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.987955][T29960] RSP: 002b:00007fd0b2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 700.987976][T29960] RAX: ffffffffffffffda RBX: 00007fd0b2225fa0 RCX: 00007fd0b1f9f559 [ 700.987989][T29960] RDX: 0000000000000400 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 700.988002][T29960] RBP: 00007fd0b2036b20 R08: 0000000000000000 R09: 0000000000000000 [ 700.988015][T29960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.988027][T29960] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 700.988054][T29960] [ 701.230624][T29961] device-mapper: ioctl: Invalid ioctl structure: name €, dev 7f00000006 [ 701.443161][T29967] openvswitch: netlink: Multiple metadata blocks provided [ 704.932522][T30096] ieee802154 phy0 wpan0: encryption failed: -22 [ 705.098351][T30101] netlink: set zone limit has 4 unknown bytes [ 705.325964][T30111] nbd: must specify a size in bytes for the device [ 705.516969][T30118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10742'. [ 706.616317][ T6201] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 706.715694][T30163] rxe_eth0 speed is unknown, defaulting to 1000 [ 708.224427][T30248] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 708.848365][T30269] openvswitch: netlink: Missing valid actions attribute. [ 709.336399][T30288] openvswitch: netlink: Message has 1 unknown bytes. [ 710.353806][T30325] openvswitch: netlink: Key type 29 is not supported [ 710.825335][T30340] [U] [ 710.825380][T30340] [U] [ 710.825418][T30340] [U] [ 710.825456][T30340] [U] [ 710.825655][T30340] [U] [ 710.825693][T30340] [U] [ 710.825730][T30340] [U] [ 710.825768][T30340] [U] [ 710.826014][T30340] [U] [ 710.826052][T30340] [U] [ 710.826088][T30340] [U] [ 710.826125][T30340] [U] [ 710.826304][T30340] [U] [ 710.826341][T30340] [U] [ 710.826377][T30340] [U] [ 710.826426][T30340] [U] [ 710.876794][T30340] [U] [ 710.876831][T30340] [U] [ 710.876864][T30340] [U] [ 710.876896][T30340] [U] [ 710.877065][T30340] [U] [ 710.877097][T30340] [U] [ 710.877128][T30340] [U] [ 710.877161][T30340] [U] [ 710.877390][T30340] [U] [ 710.877423][T30340] [U] [ 710.877455][T30340] [U] [ 710.877487][T30340] [U] [ 710.877645][T30340] [U] [ 710.877677][T30340] [U] [ 710.877709][T30340] [U] [ 710.877741][T30340] [U] [ 710.877939][T30340] [U] [ 710.877972][T30340] [U] [ 710.878004][T30340] [U] [ 710.878036][T30340] [U] [ 710.951252][T30340] [U] [ 710.951297][T30340] [U] [ 710.951336][T30340] [U] [ 710.951374][T30340] [U] [ 710.951618][T30340] [U] [ 710.951660][T30340] [U] [ 710.951699][T30340] [U] [ 710.951736][T30340] [U] [ 710.951932][T30340] [U] [ 710.951971][T30340] [U] [ 710.952015][T30340] [U] [ 710.952054][T30340] [U] [ 710.954957][T30340] [U] [ 710.954998][T30340] [U] [ 710.955050][T30340] [U] [ 710.955085][T30340] [U] [ 711.009459][T30340] [U] [ 711.009496][T30340] [U] [ 711.009532][T30340] [U] [ 711.009566][T30340] [U] [ 711.045549][T30338] [U] [ 711.738967][T30372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10840'. [ 711.760371][T30372] netlink: 29 bytes leftover after parsing attributes in process `syz.1.10840'. [ 712.489782][T30400] netlink: 'syz.2.10854': attribute type 2 has an invalid length. [ 716.947659][T30576] netlink: 'syz.1.10939': attribute type 11 has an invalid length. [ 716.947683][T30576] netlink: 'syz.1.10939': attribute type 11 has an invalid length. [ 716.947697][T30576] netlink: 'syz.1.10939': attribute type 11 has an invalid length. [ 717.385921][T30590] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 717.649154][T30598] No such timeout policy "" [ 717.649171][T30598] netlink: Failed to associated timeout policy '' [ 717.964705][T30611] FAULT_INJECTION: forcing a failure. [ 717.964705][T30611] name failslab, interval 1, probability 0, space 0, times 0 [ 717.964742][T30611] CPU: 0 UID: 0 PID: 30611 Comm: syz.2.10955 Tainted: G U L syzkaller #0 PREEMPT(full) [ 717.964789][T30611] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 717.964798][T30611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 717.964811][T30611] Call Trace: [ 717.964818][T30611] [ 717.964826][T30611] dump_stack_lvl+0x100/0x190 [ 717.964866][T30611] should_fail_ex.cold+0x5/0xa [ 717.964898][T30611] should_failslab+0xc2/0x120 [ 717.964923][T30611] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 717.964960][T30611] ? __d_alloc+0x34/0xad0 [ 717.964991][T30611] __d_alloc+0x34/0xad0 [ 717.965020][T30611] d_alloc_pseudo+0x1c/0xc0 [ 717.965053][T30611] alloc_file_pseudo+0x118/0x290 [ 717.965084][T30611] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 717.965113][T30611] ? alloc_fd+0x471/0x7a0 [ 717.965142][T30611] sock_alloc_file+0x50/0x210 [ 717.965187][T30611] __sys_socket+0x1c0/0x260 [ 717.965207][T30611] ? __pfx___sys_socket+0x10/0x10 [ 717.965233][T30611] __x64_sys_socket+0x72/0xb0 [ 717.965261][T30611] ? lockdep_hardirqs_on+0x7d/0x110 [ 717.965285][T30611] do_syscall_64+0x121/0x770 [ 717.965310][T30611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.965331][T30611] RIP: 0033:0x7f892d99f559 [ 717.965348][T30611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.965368][T30611] RSP: 002b:00007f892e7f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 717.965387][T30611] RAX: ffffffffffffffda RBX: 00007f892dc25fa0 RCX: 00007f892d99f559 [ 717.965401][T30611] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 717.965413][T30611] RBP: 00007f892da36b20 R08: 0000000000000000 R09: 0000000000000000 [ 717.965426][T30611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.965438][T30611] R13: 00007f892dc26038 R14: 00007f892dc25fa0 R15: 00007ffc1275fa68 [ 717.965465][T30611] [ 719.125256][ T6201] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 719.365638][T30652] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 719.735747][T30666] netlink: 'syz.2.10981': attribute type 11 has an invalid length. [ 719.735768][T30666] netlink: 'syz.2.10981': attribute type 11 has an invalid length. [ 719.735781][T30666] netlink: 'syz.2.10981': attribute type 11 has an invalid length. [ 720.187060][T30682] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 720.773484][T28893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.942686][T28893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.003586][T28893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.071865][T28893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.172972][T30708] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 721.418523][T28893] bridge_slave_1: left allmulticast mode [ 721.418549][T28893] bridge_slave_1: left promiscuous mode [ 721.418754][T28893] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.450698][T28893] bridge_slave_0: left allmulticast mode [ 721.450722][T28893] bridge_slave_0: left promiscuous mode [ 721.450878][T28893] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.667960][T30731] netlink: 'syz.4.11001': attribute type 1 has an invalid length. [ 721.844079][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 721.848995][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 721.849742][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 721.850407][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 721.886916][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 722.032819][T28893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.041671][T28893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.061798][T28893] bond0 (unregistering): Released all slaves [ 722.123984][T28893] Â: left promiscuous mode [ 722.403966][T30748] openvswitch: netlink: Flow key attr not present in new flow. [ 723.399301][T30791] FAULT_INJECTION: forcing a failure. [ 723.399301][T30791] name failslab, interval 1, probability 0, space 0, times 0 [ 723.399333][T30791] CPU: 0 UID: 0 PID: 30791 Comm: syz.1.11021 Tainted: G U L syzkaller #0 PREEMPT(full) [ 723.399366][T30791] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 723.399374][T30791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 723.399386][T30791] Call Trace: [ 723.399393][T30791] [ 723.399401][T30791] dump_stack_lvl+0x100/0x190 [ 723.399437][T30791] should_fail_ex.cold+0x5/0xa [ 723.399467][T30791] should_failslab+0xc2/0x120 [ 723.399491][T30791] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 723.399526][T30791] ? __d_alloc+0x34/0xad0 [ 723.399556][T30791] __d_alloc+0x34/0xad0 [ 723.399584][T30791] d_alloc_pseudo+0x1c/0xc0 [ 723.399616][T30791] alloc_file_pseudo+0x118/0x290 [ 723.399646][T30791] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 723.399675][T30791] ? hugetlbfs_get_inode+0x394/0x740 [ 723.399721][T30791] hugetlb_file_setup+0x2a8/0x5b0 [ 723.399744][T30791] ksys_mmap_pgoff+0x242/0x610 [ 723.399781][T30791] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 723.399812][T30791] ? xfd_validate_state+0x129/0x190 [ 723.399840][T30791] __x64_sys_mmap+0x125/0x190 [ 723.399865][T30791] do_syscall_64+0x121/0x770 [ 723.399892][T30791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.399913][T30791] RIP: 0033:0x7fd0b1f9f559 [ 723.399929][T30791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.399949][T30791] RSP: 002b:00007fd0b2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 723.399969][T30791] RAX: ffffffffffffffda RBX: 00007fd0b2225fa0 RCX: 00007fd0b1f9f559 [ 723.399983][T30791] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 723.399995][T30791] RBP: 00007fd0b2036b20 R08: ffffffffffffffff R09: 0000308000000000 [ 723.400008][T30791] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 723.400021][T30791] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 723.400047][T30791] [ 723.825451][T30732] rxe_eth0 speed is unknown, defaulting to 1000 [ 723.972069][ T53] Bluetooth: hci3: command tx timeout [ 724.118768][T28893] hsr_slave_0: left promiscuous mode [ 724.129450][T28893] hsr_slave_1: left promiscuous mode [ 724.131525][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.131544][T28893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.159297][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.159316][T28893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.200243][T28893] veth1_macvtap: left promiscuous mode [ 724.200288][T28893] veth0_macvtap: left promiscuous mode [ 724.200387][T28893] veth1_vlan: left promiscuous mode [ 724.200437][T28893] veth0_vlan: left promiscuous mode [ 724.761841][T28893] team0 (unregistering): Port device team_slave_1 removed [ 724.780615][T28893] team0 (unregistering): Port device team_slave_0 removed [ 724.900349][ T5299] 8021q: adding VLAN 0 to HW filter on device eth5 [ 725.595195][T30732] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.596861][T30732] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.596957][T30732] bridge_slave_0: entered allmulticast mode [ 725.599733][T30732] bridge_slave_0: entered promiscuous mode [ 725.631651][T30732] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.633366][T30732] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.633511][T30732] bridge_slave_1: entered allmulticast mode [ 725.636156][T30732] bridge_slave_1: entered promiscuous mode [ 725.718625][T30732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.743731][T30732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.814645][T30732] team0: Port device team_slave_0 added [ 725.818320][T30732] team0: Port device team_slave_1 added [ 725.886008][T30732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.886024][T30732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.886049][T30732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.887460][T30732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.887473][T30732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.887498][T30732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.039916][ T53] Bluetooth: hci3: command tx timeout [ 726.083794][T30732] hsr_slave_0: entered promiscuous mode [ 726.086106][T30732] hsr_slave_1: entered promiscuous mode [ 726.088181][T30732] debugfs: 'hsr0' already exists in 'hsr' [ 726.088199][T30732] Cannot create hsr debugfs directory [ 726.247453][ T5299] 8021q: adding VLAN 0 to HW filter on device eth6 [ 727.003172][T30732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 727.020263][T30732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.021331][T30732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 727.046933][T30732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.048022][T30732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 727.070528][T30732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.072285][T30732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 727.098849][T30732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.266808][T30732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.298262][T30732] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.318373][T26827] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.318450][T26827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.350122][T26827] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.350197][T26827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.109430][ T53] Bluetooth: hci3: command tx timeout [ 728.176145][T30732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.260231][T30732] veth0_vlan: entered promiscuous mode [ 728.281957][T30732] veth1_vlan: entered promiscuous mode [ 728.336501][T30732] veth0_macvtap: entered promiscuous mode [ 728.356059][T30732] veth1_macvtap: entered promiscuous mode [ 728.388822][T30732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.406717][T30732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.437549][T23464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.438167][T23464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.438200][T23464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.438230][T23464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.633165][T23464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.633185][T23464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.720490][T23464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.720509][T23464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.178521][ T53] Bluetooth: hci3: command tx timeout [ 731.508378][T31252] NFSD: Failed to start, no listeners configured. [ 732.153445][T31281] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 733.884736][T31318] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 734.121730][T31333] ERROR: Out of memory at tomoyo_memory_ok. [ 735.085200][T31350] vmstat_refresh: nr_hugetlb -7680 [ 738.636036][T31484] openvswitch: netlink: IP tunnel TTL not specified. [ 739.009423][T31500] nbd: must specify an index to disconnect [ 739.248165][T31512] netlink: 334 bytes leftover after parsing attributes in process `syz.4.11168'. [ 740.519419][T31560] sd 0:0:1:0: PR command failed: 1026 [ 740.519457][T31560] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 740.519491][T31560] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 740.813506][T31571] netlink: 'syz.1.11196': attribute type 2 has an invalid length. [ 741.315942][T31586] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 742.375251][T31615] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 742.739252][T31582] kexec: Could not allocate control_code_buffer [ 744.426957][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.427003][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.093471][T29310] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 745.296163][T31721] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd43 [ 745.584443][T31729] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 745.586101][T31729] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 745.701319][T31729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 745.701425][T31729] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 745.755284][T31729] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 746.449653][T31765] netlink: 'syz.1.11288': attribute type 23 has an invalid length. [ 746.660585][T31774] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 747.339516][T31802] netlink: Unknown NAT attribute (type=262, max=9) [ 747.607992][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 747.687177][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 748.215731][T31834] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 749.677947][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 749.757697][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 750.285438][T31919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11359'. [ 750.657199][T31931] netlink: 'syz.4.11364': attribute type 1 has an invalid length. [ 751.098619][T31947] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 751.174175][T31949] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 751.826209][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 753.941170][T32060] netlink: 'syz.3.11427': attribute type 11 has an invalid length. [ 755.424514][T32117] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 756.085893][T32143] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 756.331799][T32151] netlink: 'syz.4.11471': attribute type 2 has an invalid length. [ 756.754733][T32169] netlink: 342 bytes leftover after parsing attributes in process `syz.3.11478'. [ 757.493333][T32167] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 759.277898][T32268] FAULT_INJECTION: forcing a failure. [ 759.277898][T32268] name failslab, interval 1, probability 0, space 0, times 0 [ 759.277933][T32268] CPU: 0 UID: 0 PID: 32268 Comm: syz.3.11521 Tainted: G U L syzkaller #0 PREEMPT(full) [ 759.277965][T32268] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 759.277973][T32268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 759.277986][T32268] Call Trace: [ 759.277992][T32268] [ 759.278000][T32268] dump_stack_lvl+0x100/0x190 [ 759.278039][T32268] should_fail_ex.cold+0x5/0xa [ 759.278070][T32268] should_failslab+0xc2/0x120 [ 759.278095][T32268] kmem_cache_alloc_noprof+0x92/0x6a0 [ 759.278128][T32268] ? sk_prot_alloc+0x60/0x2a0 [ 759.278235][T32268] sk_prot_alloc+0x60/0x2a0 [ 759.278267][T32268] sk_alloc+0x36/0xe80 [ 759.278293][T32268] rds_create+0x9e/0x5e0 [ 759.278355][T32268] __sock_create+0x339/0x860 [ 759.278399][T32268] __sys_socket+0x14d/0x260 [ 759.278419][T32268] ? __pfx___sys_socket+0x10/0x10 [ 759.278446][T32268] __x64_sys_socket+0x72/0xb0 [ 759.278464][T32268] ? lockdep_hardirqs_on+0x7d/0x110 [ 759.278488][T32268] do_syscall_64+0x121/0x770 [ 759.278513][T32268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.278534][T32268] RIP: 0033:0x7f6f7a99f559 [ 759.278551][T32268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.278571][T32268] RSP: 002b:00007f6f7b827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 759.278591][T32268] RAX: ffffffffffffffda RBX: 00007f6f7ac25fa0 RCX: 00007f6f7a99f559 [ 759.278605][T32268] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 759.278617][T32268] RBP: 00007f6f7aa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 759.278629][T32268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.278641][T32268] R13: 00007f6f7ac26038 R14: 00007f6f7ac25fa0 R15: 00007ffc6bf31d68 [ 759.278668][T32268] [ 759.657272][T32274] FAULT_INJECTION: forcing a failure. [ 759.657272][T32274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.657306][T32274] CPU: 0 UID: 0 PID: 32274 Comm: syz.1.11524 Tainted: G U L syzkaller #0 PREEMPT(full) [ 759.657345][T32274] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 759.657353][T32274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 759.657365][T32274] Call Trace: [ 759.657372][T32274] [ 759.657380][T32274] dump_stack_lvl+0x100/0x190 [ 759.657418][T32274] should_fail_ex.cold+0x5/0xa [ 759.657448][T32274] _copy_from_user+0x2e/0xd0 [ 759.657478][T32274] post_copy_siginfo_from_user.isra.0+0x16e/0x300 [ 759.657509][T32274] ? __pfx_post_copy_siginfo_from_user.isra.0+0x10/0x10 [ 759.657539][T32274] ? find_held_lock+0x2b/0x80 [ 759.657584][T32274] __x64_sys_rt_tgsigqueueinfo+0x151/0x210 [ 759.657691][T32274] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 759.657730][T32274] do_syscall_64+0x121/0x770 [ 759.657756][T32274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.657778][T32274] RIP: 0033:0x7fd0b1f9f559 [ 759.657794][T32274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.657815][T32274] RSP: 002b:00007fd0b2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 759.657835][T32274] RAX: ffffffffffffffda RBX: 00007fd0b2225fa0 RCX: 00007fd0b1f9f559 [ 759.657848][T32274] RDX: 0000000000000021 RSI: 0000000000000000 RDI: 0000000000000000 [ 759.657861][T32274] RBP: 00007fd0b2036b20 R08: 0000000000000000 R09: 0000000000000000 [ 759.657873][T32274] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 759.657885][T32274] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 759.657912][T32274] [ 760.206566][T32284] FAULT_INJECTION: forcing a failure. [ 760.206566][T32284] name failslab, interval 1, probability 0, space 0, times 0 [ 760.206599][T32284] CPU: 0 UID: 0 PID: 32284 Comm: syz.3.11529 Tainted: G U L syzkaller #0 PREEMPT(full) [ 760.206630][T32284] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 760.206638][T32284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 760.206651][T32284] Call Trace: [ 760.206657][T32284] [ 760.206665][T32284] dump_stack_lvl+0x100/0x190 [ 760.206701][T32284] should_fail_ex.cold+0x5/0xa [ 760.206731][T32284] should_failslab+0xc2/0x120 [ 760.206756][T32284] kmem_cache_alloc_noprof+0x92/0x6a0 [ 760.206790][T32284] ? vm_area_alloc+0x1f/0x160 [ 760.206816][T32284] vm_area_alloc+0x1f/0x160 [ 760.206836][T32284] __mmap_region+0x121c/0x3940 [ 760.206872][T32284] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 760.206902][T32284] ? __pfx___mmap_region+0x10/0x10 [ 760.206936][T32284] ? find_held_lock+0x2b/0x80 [ 760.206965][T32284] ? ima_match_policy+0x8c4/0x23f0 [ 760.206996][T32284] ? ima_match_policy+0x8c4/0x23f0 [ 760.207059][T32284] ? do_raw_spin_lock+0x128/0x260 [ 760.207088][T32284] ? __lock_acquire+0x5c0/0x1f40 [ 760.207123][T32284] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 760.207206][T32284] mmap_region+0x3db/0x6d0 [ 760.207236][T32284] ? rcu_is_watching+0x13/0xc0 [ 760.207265][T32284] ? __pfx_mmap_region+0x10/0x10 [ 760.207304][T32284] ? cap_mmap_addr+0x4b/0x120 [ 760.207323][T32284] ? bpf_lsm_mmap_addr+0x9/0x30 [ 760.207355][T32284] ? security_mmap_addr+0x71/0x1e0 [ 760.207384][T32284] ? __get_unmapped_area+0x255/0x3e0 [ 760.207420][T32284] do_mmap+0x12c7/0x1c30 [ 760.207457][T32284] ? lock_acquire+0x1d1/0x380 [ 760.207478][T32284] ? __pfx_do_mmap+0x10/0x10 [ 760.207511][T32284] ? __pfx___might_resched+0x10/0x10 [ 760.207550][T32284] ? __pfx_down_write_killable+0x10/0x10 [ 760.207583][T32284] vm_mmap_pgoff+0x283/0x490 [ 760.207614][T32284] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 760.207646][T32284] ? __pfx_do_futex+0x10/0x10 [ 760.207682][T32284] ksys_mmap_pgoff+0xe4/0x610 [ 760.207714][T32284] ? __x64_sys_futex+0x358/0x4d0 [ 760.207744][T32284] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 760.207776][T32284] ? xfd_validate_state+0x129/0x190 [ 760.207804][T32284] __x64_sys_mmap+0x125/0x190 [ 760.207831][T32284] do_syscall_64+0x121/0x770 [ 760.207855][T32284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.207876][T32284] RIP: 0033:0x7f6f7a99f559 [ 760.207893][T32284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.207913][T32284] RSP: 002b:00007f6f7b827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 760.207951][T32284] RAX: ffffffffffffffda RBX: 00007f6f7ac25fa0 RCX: 00007f6f7a99f559 [ 760.207966][T32284] RDX: 00000000002000df RSI: 0000000000400006 RDI: 0000000000000000 [ 760.207979][T32284] RBP: 00007f6f7aa36b20 R08: ffffffffffffffff R09: 0000000000008000 [ 760.207994][T32284] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 760.208007][T32284] R13: 00007f6f7ac26038 R14: 00007f6f7ac25fa0 R15: 00007ffc6bf31d68 [ 760.208036][T32284] [ 760.648998][T32290] [ 760.651440][T32290] ============================================ [ 760.657596][T32290] WARNING: possible recursive locking detected [ 760.663741][T32290] syzkaller #0 Tainted: G U L [ 760.669800][T32290] -------------------------------------------- [ 760.675942][T32290] syz.1.11532/32290 is trying to acquire lock: [ 760.682094][T32290] ffff888026159ee8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_buffered_write+0xff/0x180 [ 760.692912][T32290] [ 760.692912][T32290] but task is already holding lock: [ 760.700285][T32290] ffff888026159ee8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0xbba/0xfb0 [ 760.710753][T32290] [ 760.710753][T32290] other info that might help us debug this: [ 760.718803][T32290] Possible unsafe locking scenario: [ 760.718803][T32290] [ 760.726246][T32290] CPU0 [ 760.729541][T32290] ---- [ 760.732817][T32290] lock(&sb->s_type->i_mutex_key#10); [ 760.738284][T32290] lock(&sb->s_type->i_mutex_key#10); [ 760.743748][T32290] [ 760.743748][T32290] *** DEADLOCK *** [ 760.743748][T32290] [ 760.751891][T32290] May be due to missing lock nesting notation [ 760.751891][T32290] [ 760.760217][T32290] locks held by syz.1.11532/32290: 1, last CPU#0: [ 760.766636][T32290] #0: ffff888026159ee8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0xbba/0xfb0 [ 760.777620][T32290] [ 760.777620][T32290] stack backtrace: [ 760.783510][T32290] CPU: 0 UID: 0 PID: 32290 Comm: syz.1.11532 Tainted: G U L syzkaller #0 PREEMPT(full) [ 760.794626][T32290] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 760.799832][T32290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 760.809886][T32290] Call Trace: [ 760.813169][T32290] [ 760.816103][T32290] dump_stack_lvl+0x100/0x190 [ 760.820794][T32290] print_deadlock_bug.cold+0xbd/0xca [ 760.826099][T32290] __lock_acquire+0x13f4/0x1f40 [ 760.830961][T32290] lock_acquire+0x1d1/0x380 [ 760.835467][T32290] ? blkdev_buffered_write+0xff/0x180 [ 760.840847][T32290] ? __pfx___might_resched+0x10/0x10 [ 760.846156][T32290] down_read+0x94/0x4c0 [ 760.850335][T32290] ? blkdev_buffered_write+0xff/0x180 [ 760.855723][T32290] ? __pfx_down_read+0x10/0x10 [ 760.860510][T32290] ? down_read+0x136/0x4c0 [ 760.864939][T32290] ? __pfx_down_read+0x10/0x10 [ 760.869711][T32290] ? filemap_check_errors+0xa9/0x150 [ 760.875006][T32290] blkdev_buffered_write+0xff/0x180 [ 760.880221][T32290] blkdev_write_iter+0xbc5/0xfb0 [ 760.885173][T32290] vfs_write+0x6af/0x1050 [ 760.889516][T32290] ? __pfx_blkdev_write_iter+0x10/0x10 [ 760.894981][T32290] ? __pfx_vfs_write+0x10/0x10 [ 760.899749][T32290] ? find_held_lock+0x2b/0x80 [ 760.904466][T32290] ksys_write+0x12a/0x250 [ 760.908821][T32290] ? __pfx_ksys_write+0x10/0x10 [ 760.913680][T32290] do_syscall_64+0x121/0x770 [ 760.918299][T32290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.924200][T32290] RIP: 0033:0x7fd0b1f9f559 [ 760.928638][T32290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.948279][T32290] RSP: 002b:00007fd0b2e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 760.956696][T32290] RAX: ffffffffffffffda RBX: 00007fd0b2225fa0 RCX: 00007fd0b1f9f559 [ 760.964667][T32290] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000003 [ 760.972641][T32290] RBP: 00007fd0b2036b20 R08: 0000000000000000 R09: 0000000000000000 [ 760.980617][T32290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.988592][T32290] R13: 00007fd0b2226038 R14: 00007fd0b2225fa0 R15: 00007ffc726870f8 [ 760.996578][T32290] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 761.500568][T28893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.585918][T28893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.672598][T28893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.717597][T28893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.876205][T28893] bridge_slave_1: left allmulticast mode [ 761.876225][T28893] bridge_slave_1: left promiscuous mode [ 761.876329][T28893] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.900060][T28893] bridge_slave_0: left allmulticast mode [ 761.900079][T28893] bridge_slave_0: left promiscuous mode [ 761.900178][T28893] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.117966][T28893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.119074][T28893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.121349][T28893] bond0 (unregistering): Released all slaves [ 762.435546][T28893] hsr_slave_0: left promiscuous mode [ 762.435889][T28893] hsr_slave_1: left promiscuous mode [ 762.436238][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.436253][T28893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.436613][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.436635][T28893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.486339][T28893] veth1_macvtap: left promiscuous mode [ 762.486375][T28893] veth0_macvtap: left promiscuous mode [ 762.486423][T28893] veth1_vlan: left promiscuous mode [ 762.486458][T28893] veth0_vlan: left promiscuous mode [ 762.781989][T28893] team0 (unregistering): Port device team_slave_1 removed [ 762.803587][T28893] team0 (unregistering): Port device team_slave_0 removed [ 762.896081][T28893] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 762.917373][ T5299] 8021q: adding VLAN 0 to HW filter on device eth5 [ 763.082259][T28893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.111376][T28893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.144241][T28893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.182098][T28893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.282063][T28893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.305104][T28893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.330116][T28893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.359467][T28893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.453563][T28893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.485996][T28893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.514349][T28893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.549845][T28893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.635009][T28893] bridge_slave_1: left allmulticast mode [ 763.635033][T28893] bridge_slave_1: left promiscuous mode [ 763.635144][T28893] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.636022][T28893] bridge_slave_0: left allmulticast mode [ 763.636038][T28893] bridge_slave_0: left promiscuous mode [ 763.636129][T28893] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.685658][T28893] bridge_slave_1: left allmulticast mode [ 763.685678][T28893] bridge_slave_1: left promiscuous mode [ 763.685777][T28893] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.687414][T28893] bridge_slave_0: left allmulticast mode [ 763.687431][T28893] bridge_slave_0: left promiscuous mode [ 763.687523][T28893] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.739251][T28893] bridge_slave_1: left allmulticast mode [ 763.739272][T28893] bridge_slave_1: left promiscuous mode [ 763.739377][T28893] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.740476][T28893] bridge_slave_0: left allmulticast mode [ 763.740494][T28893] bridge_slave_0: left promiscuous mode [ 763.740616][T28893] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.891481][T28893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.892708][T28893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.918844][T28893] bond0 (unregistering): Released all slaves [ 763.957721][T28893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.960291][T28893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.961074][T28893] bond0 (unregistering): Released all slaves [ 764.027334][T28893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.028372][T28893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.029067][T28893] bond0 (unregistering): Released all slaves [ 764.031315][ T5299] 8021q: adding VLAN 0 to HW filter on device eth6 [ 764.109700][T28893] .^: left promiscuous mode [ 764.134640][T28893] $!NW: left promiscuous mode [ 764.156052][T28893] Â: left promiscuous mode [ 764.593952][ T5299] 8021q: adding VLAN 0 to HW filter on device eth8 [ 765.165376][T28893] hsr_slave_0: left promiscuous mode [ 765.165697][T28893] hsr_slave_1: left promiscuous mode [ 765.166061][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.166076][T28893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.194832][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.194849][T28893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.215826][T28893] hsr_slave_0: left promiscuous mode [ 765.216272][T28893] hsr_slave_1: left promiscuous mode [ 765.216612][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.216626][T28893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.218533][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.218547][T28893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.266189][T28893] hsr_slave_0: left promiscuous mode [ 765.266572][T28893] hsr_slave_1: left promiscuous mode [ 765.267002][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.267018][T28893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.267371][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.267384][T28893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.323130][T28893] veth1_macvtap: left promiscuous mode [ 765.323156][T28893] veth0_macvtap: left promiscuous mode [ 765.323215][T28893] veth1_vlan: left promiscuous mode [ 765.323250][T28893] veth0_vlan: left promiscuous mode [ 765.325206][T28893] veth1_macvtap: left promiscuous mode [ 765.325227][T28893] veth0_macvtap: left promiscuous mode [ 765.325429][T28893] veth1_vlan: left promiscuous mode [ 765.325466][T28893] veth0_vlan: left promiscuous mode [ 765.369759][T28893] veth1_macvtap: left promiscuous mode [ 765.369784][T28893] veth0_macvtap: left promiscuous mode [ 765.369835][T28893] veth1_vlan: left promiscuous mode [ 765.369870][T28893] veth0_vlan: left promiscuous mode [ 765.580756][T28893] team0 (unregistering): Port device team_slave_1 removed [ 765.600046][T28893] team0 (unregistering): Port device team_slave_0 removed [ 765.711911][T28893] team0 (unregistering): Port device team_slave_1 removed [ 765.729316][T28893] team0 (unregistering): Port device team_slave_0 removed [ 765.844739][T28893] team0 (unregistering): Port device team_slave_1 removed [ 765.848186][T28893] team0 (unregistering): Port device team_slave_0 removed [ 765.920661][ T5299] 8021q: adding VLAN 0 to HW filter on device eth7 [ 766.483275][ T5299] 8021q: adding VLAN 0 to HW filter on device eth9 [ 766.746458][ T5299] 8021q: adding VLAN 0 to HW filter on device eth10 [ 767.015621][ T5299] 8021q: adding VLAN 0 to HW filter on device eth11 [ 767.281136][ T5299] 8021q: adding VLAN 0 to HW filter on device eth12 [ 767.543433][ T5299] 8021q: adding VLAN 0 to HW filter on device eth13 [ 767.809488][ T5299] 8021q: adding VLAN 0 to HW filter on device eth14 [ 768.086637][ T5299] 8021q: adding VLAN 0 to HW filter on device eth15 [ 768.357179][ T5299] 8021q: adding VLAN 0 to HW filter on device eth16 [ 768.627494][ T5299] 8021q: adding VLAN 0 to HW filter on device eth17 [ 768.895837][ T5299] 8021q: adding VLAN 0 to HW filter on device eth18 [ 769.163588][ T5299] 8021q: adding VLAN 0 to HW filter on device eth19 [ 769.459981][ T5299] 8021q: adding VLAN 0 to HW filter on device eth20