last executing test programs: 2m24.34642286s ago: executing program 3 (id=3114): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/min_resvport\x00', 0xe3102, 0x0) mmap$auto(0x0, 0x2, 0x10000000000df, 0x18f1, 0x7, 0x20000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r1) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000280)={0x24, r2, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @private=0xac14140a}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) 2m24.254725735s ago: executing program 3 (id=3117): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x4, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x11, 0x2, 0x6}]}) 2m24.103401951s ago: executing program 3 (id=3118): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1544, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) write$auto(0x3, 0x0, 0x100082) io_uring_register$auto(r0, 0x15, 0x0, 0x3) 2m23.823112146s ago: executing program 3 (id=3122): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 2m23.457023809s ago: executing program 3 (id=3125): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x3) socket(0x25, 0x6, 0x80000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x402, 0x0) 2m22.825656004s ago: executing program 3 (id=3133): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x81) shutdown$auto(0x200000003, 0x2) 2m22.625123178s ago: executing program 32 (id=3133): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x81) shutdown$auto(0x200000003, 0x2) 41.274186057s ago: executing program 4 (id=3960): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x7ffe}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x1}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24004c5d}, 0x24000080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 41.182065191s ago: executing program 4 (id=3961): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbf4250200080008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 40.883143362s ago: executing program 4 (id=3966): pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000820) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x4, 0x2, 0x0, 0x7ff, 0x7) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) read$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000100)=""/168, 0xa8) 39.051543672s ago: executing program 4 (id=3977): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0xc0000100, 0x97, 0xa80}]}) 38.86759047s ago: executing program 4 (id=3979): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x7, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) getrusage$auto_RUSAGE_BOTH(0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x9, 0x0, 0x0, 0x0, 0x0, 0x0) 37.399631964s ago: executing program 4 (id=3987): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) settimeofday$auto(&(0x7f0000000100)={0x4, 0x400}, 0x0) 34.666260322s ago: executing program 2 (id=4009): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc6}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x400a) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f2, 0x24) 33.561250859s ago: executing program 0 (id=4012): mmap$auto(0x0, 0x400008, 0x10df, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 33.268069615s ago: executing program 2 (id=4014): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x3) read$auto(r0, 0x0, 0x9a28) 33.044331435s ago: executing program 2 (id=4015): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x1) setsockopt$auto(0x7, 0x111, 0x100006, 0x0, 0x8) 32.848687439s ago: executing program 2 (id=4016): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x2102, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/resend_igmp\x00', 0x1e2142, 0x0) sendfile$auto(r0, r3, 0x0, 0x9) 32.812145877s ago: executing program 0 (id=4018): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x20342, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x14, 0x0, 0x6) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0xfffe}, 0x55) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) write$auto(0x3, 0x0, 0xffd8) 22.177748586s ago: executing program 33 (id=3987): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) settimeofday$auto(&(0x7f0000000100)={0x4, 0x400}, 0x0) 21.791531828s ago: executing program 0 (id=4020): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r3, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) 21.776258351s ago: executing program 2 (id=4022): close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd6c00fbdbdf25020000000800030000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 21.569376761s ago: executing program 2 (id=4024): openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 21.19304037s ago: executing program 0 (id=4026): mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x801, 0x106) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video31\x00', 0x101041, 0x0) ioctl$auto(0x3, 0x40045613, r0) 21.065295488s ago: executing program 0 (id=4028): ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead4005") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r0, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 21.044969357s ago: executing program 1 (id=4029): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) 20.868833135s ago: executing program 1 (id=4030): openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x2, 0x80002, 0x73) ioctl$auto(r0, 0x8915, 0x24) 20.745337438s ago: executing program 1 (id=4031): semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x7, &(0x7f0000000140)={0x7, 0x0, 0x70}, 0x1fc, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0xa8002, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setresgid$auto(0x81, 0x800000a0, 0x8) 20.691931649s ago: executing program 1 (id=4032): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1b54}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x8, 0x0, 0x1, 0x0, 0x1000002, 0x8}, 0x800}, 0x4000005, 0x8, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 20.362294426s ago: executing program 1 (id=4033): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x52600, 0x0) mmap$auto(0x6, 0x202000c, 0x10, 0xeb1, r0, 0xd) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x7, 0x13) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16.093940305s ago: executing program 1 (id=4034): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f0, 0x24) r2 = socket(0x29, 0x2, 0x0) ioctl$auto(r2, 0x89f3, 0x24) 15.187890427s ago: executing program 0 (id=4035): r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000200000004000a8008000800", @ANYRES32=r3, @ANYBLOB="0800070007740000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) 15.13170681s ago: executing program 5 (id=4019): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xa, 0x8) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x3, 0x73) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x3b, 0xffffffffffffffff, 0x0) 5.579353467s ago: executing program 34 (id=4024): openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 50.633152ms ago: executing program 35 (id=4035): r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000200000004000a8008000800", @ANYRES32=r3, @ANYBLOB="0800070007740000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) 0s ago: executing program 36 (id=4034): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f0, 0x24) r2 = socket(0x29, 0x2, 0x0) ioctl$auto(r2, 0x89f3, 0x24) kernel console output (not intermixed with test programs): vsim4 netdevsim3: renamed from eth3 [ 471.707128][T13670] Bluetooth: hci3: command tx timeout [ 471.812950][T14747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.846599][T14747] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.865391][T13685] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.872594][T13685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.901045][T13685] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.908240][T13685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.206927][T14747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.551085][T14747] veth0_vlan: entered promiscuous mode [ 472.564601][T14747] veth1_vlan: entered promiscuous mode [ 472.612387][T14747] veth0_macvtap: entered promiscuous mode [ 472.626586][T14747] veth1_macvtap: entered promiscuous mode [ 472.653112][T14747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.671702][T14747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.696648][T13674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.745278][T13674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.759846][T13674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.771836][T13674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.813009][T13674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.836645][T13674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.877413][T14812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.885814][T14812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.265856][T14904] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3157'. [ 473.788379][T13670] Bluetooth: hci3: command tx timeout [ 475.315806][T14951] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3175'. [ 475.869325][T13670] Bluetooth: hci3: command tx timeout [ 476.127848][T14963] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3178'. [ 476.196083][T14967] sd 0:0:1:0: PR command failed: 1026 [ 476.201969][T14967] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 476.229730][T14967] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 476.719665][T14980] FAULT_INJECTION: forcing a failure. [ 476.719665][T14980] name failslab, interval 1, probability 393216, space 0, times 0 [ 476.764792][T14980] CPU: 0 UID: 0 PID: 14980 Comm: syz.4.3187 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.764839][T14980] Tainted: [L]=SOFTLOCKUP [ 476.764849][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 476.764865][T14980] Call Trace: [ 476.764875][T14980] [ 476.764886][T14980] dump_stack_lvl+0x100/0x190 [ 476.764928][T14980] should_fail_ex.cold+0x5/0xa [ 476.764977][T14980] should_failslab+0xc2/0x120 [ 476.765018][T14980] kmem_cache_alloc_noprof+0x83/0x780 [ 476.765057][T14980] ? __pfx_map_id_range_down+0x10/0x10 [ 476.765087][T14980] ? security_inode_alloc+0x3b/0x2c0 [ 476.765134][T14980] ? security_inode_alloc+0x3b/0x2c0 [ 476.765171][T14980] security_inode_alloc+0x3b/0x2c0 [ 476.765211][T14980] inode_init_always_gfp+0xced/0x1040 [ 476.765254][T14980] alloc_inode+0x8e/0x250 [ 476.765297][T14980] new_inode+0x22/0x1c0 [ 476.765343][T14980] proc_pid_make_inode+0x22/0x160 [ 476.765386][T14980] proc_pident_instantiate+0x85/0x310 [ 476.765432][T14980] proc_pident_lookup+0x1e3/0x270 [ 476.765482][T14980] __lookup_slow+0x251/0x460 [ 476.765526][T14980] ? __pfx___lookup_slow+0x10/0x10 [ 476.765611][T14980] lookup_slow+0x50/0x70 [ 476.765654][T14980] link_path_walk+0x1377/0x1cc0 [ 476.765698][T14980] path_openat+0x1be/0x3120 [ 476.765730][T14980] ? getname_flags+0x93/0xf0 [ 476.765756][T14980] ? do_sys_openat2+0xc5/0x220 [ 476.765796][T14980] ? __x64_sys_openat+0x12d/0x210 [ 476.765839][T14980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.765879][T14980] ? __pfx_path_openat+0x10/0x10 [ 476.765928][T14980] do_filp_open+0x1f7/0x420 [ 476.765965][T14980] ? __pfx_do_filp_open+0x10/0x10 [ 476.766014][T14980] ? __pfx_kfree_link+0x10/0x10 [ 476.766068][T14980] ? _raw_spin_unlock+0x28/0x50 [ 476.766098][T14980] ? alloc_fd+0x476/0x790 [ 476.766142][T14980] do_sys_openat2+0x12e/0x220 [ 476.766186][T14980] ? __pfx_do_sys_openat2+0x10/0x10 [ 476.766244][T14980] __x64_sys_openat+0x12d/0x210 [ 476.766290][T14980] ? __pfx___x64_sys_openat+0x10/0x10 [ 476.766332][T14980] ? xfd_validate_state+0x129/0x190 [ 476.766391][T14980] do_syscall_64+0xc9/0xf80 [ 476.766429][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.766458][T14980] RIP: 0033:0x7f62e555b78e [ 476.766482][T14980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 476.766510][T14980] RSP: 002b:00007f62e63a0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 476.766539][T14980] RAX: ffffffffffffffda RBX: 00007f62e63a16c0 RCX: 00007f62e555b78e [ 476.766566][T14980] RDX: 0000000000000002 RSI: 00007f62e63a0f90 RDI: ffffffffffffff9c [ 476.766586][T14980] RBP: 00007f62e5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 476.766605][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.766623][T14980] R13: 00007f62e5816038 R14: 00007f62e5815fa0 R15: 00007ffff98a5138 [ 476.766664][T14980] [ 477.104233][T14984] type: 65536 invalid [ 477.217849][T14986] [U] [ 477.220704][T14986] [U] [ 477.223430][T14986] [U] [ 477.226157][T14986] [U] [ 477.271153][T14986] [U] [ 477.273913][T14986] [U] [ 477.276634][T14986] [U] [ 477.279352][T14986] [U] [ 477.314670][T14985] [U] [ 478.351449][T15013] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3199'. [ 481.067092][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'. [ 481.084460][T15079] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3217'. [ 481.106811][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 481.802677][T15090] netlink: 346 bytes leftover after parsing attributes in process `syz.0.3221'. [ 482.764683][T15118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3230'. [ 482.868359][T15120] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3231'. [ 484.809529][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3252'. [ 484.850338][T15179] unsupported nlmsg_type 40 [ 485.293247][T15201] FAULT_INJECTION: forcing a failure. [ 485.293247][T15201] name failslab, interval 1, probability 393216, space 0, times 0 [ 485.337947][T15201] CPU: 1 UID: 0 PID: 15201 Comm: syz.4.3257 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.337992][T15201] Tainted: [L]=SOFTLOCKUP [ 485.338002][T15201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 485.338025][T15201] Call Trace: [ 485.338035][T15201] [ 485.338046][T15201] dump_stack_lvl+0x100/0x190 [ 485.338088][T15201] should_fail_ex.cold+0x5/0xa [ 485.338134][T15201] should_failslab+0xc2/0x120 [ 485.338173][T15201] ? constrain_params_by_rules+0x175/0xcc0 [ 485.338211][T15201] __kmalloc_noprof+0xf6/0x9c0 [ 485.338238][T15201] ? kasan_quarantine_put+0x104/0x240 [ 485.338271][T15201] ? lockdep_hardirqs_on+0x78/0x100 [ 485.338315][T15201] ? constrain_params_by_rules+0x175/0xcc0 [ 485.338354][T15201] constrain_params_by_rules+0x175/0xcc0 [ 485.338404][T15201] ? constrain_params_by_rules+0xa22/0xcc0 [ 485.338450][T15201] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 485.338495][T15201] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 485.338557][T15201] snd_pcm_hw_refine+0x7e7/0xad0 [ 485.338602][T15201] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 485.338649][T15201] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 485.338698][T15201] snd_pcm_hw_param_first+0x2b0/0x680 [ 485.338745][T15201] snd_pcm_hw_params+0x496/0x1cb0 [ 485.338790][T15201] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 485.338827][T15201] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 485.338860][T15201] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 485.338897][T15201] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 485.338937][T15201] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 485.338979][T15201] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 485.339028][T15201] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 485.339085][T15201] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 485.339120][T15201] snd_pcm_oss_sync+0x265/0x840 [ 485.339156][T15201] snd_pcm_oss_release+0x238/0x300 [ 485.339188][T15201] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 485.339220][T15201] __fput+0x3ff/0xb40 [ 485.339262][T15201] task_work_run+0x150/0x240 [ 485.339302][T15201] ? __pfx_task_work_run+0x10/0x10 [ 485.339349][T15201] exit_to_user_mode_loop+0x100/0x4b0 [ 485.339385][T15201] ? rcu_is_watching+0x12/0xc0 [ 485.339412][T15201] do_syscall_64+0x4ea/0xf80 [ 485.339445][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.339471][T15201] RIP: 0033:0x7f62e559aeb9 [ 485.339492][T15201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.339516][T15201] RSP: 002b:00007f62e63a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 485.339541][T15201] RAX: 0000000000000000 RBX: 00007f62e5815fa0 RCX: 00007f62e559aeb9 [ 485.339558][T15201] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 485.339574][T15201] RBP: 00007f62e5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 485.339591][T15201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.339606][T15201] R13: 00007f62e5816038 R14: 00007f62e5815fa0 R15: 00007ffff98a5138 [ 485.339641][T15201] [ 486.078775][T15215] FAULT_INJECTION: forcing a failure. [ 486.078775][T15215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.095496][T15215] CPU: 0 UID: 0 PID: 15215 Comm: syz.4.3251 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.095546][T15215] Tainted: [L]=SOFTLOCKUP [ 486.095558][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 486.095576][T15215] Call Trace: [ 486.095586][T15215] [ 486.095598][T15215] dump_stack_lvl+0x100/0x190 [ 486.095641][T15215] should_fail_ex.cold+0x5/0xa [ 486.095689][T15215] _copy_from_iter+0x1f4/0x1690 [ 486.095739][T15215] ? __alloc_skb+0x220/0x410 [ 486.095777][T15215] ? __alloc_skb+0x35d/0x410 [ 486.095816][T15215] ? __pfx__copy_from_iter+0x10/0x10 [ 486.095860][T15215] ? netlink_autobind.isra.0+0xa0/0x370 [ 486.095920][T15215] netlink_sendmsg+0x808/0xda0 [ 486.095979][T15215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.096029][T15215] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 486.096070][T15215] __sys_sendto+0x4aa/0x520 [ 486.096112][T15215] ? __pfx___sys_sendto+0x10/0x10 [ 486.096165][T15215] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 486.096234][T15215] __x64_sys_sendto+0xe0/0x1c0 [ 486.096273][T15215] ? do_syscall_64+0x94/0xf80 [ 486.096307][T15215] ? lockdep_hardirqs_on+0x78/0x100 [ 486.096342][T15215] do_syscall_64+0xc9/0xf80 [ 486.096380][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.096411][T15215] RIP: 0033:0x7f62e555b78e [ 486.096435][T15215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 486.096464][T15215] RSP: 002b:00007f62e639fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 486.096494][T15215] RAX: ffffffffffffffda RBX: 00007f62e63a16c0 RCX: 00007f62e555b78e [ 486.096514][T15215] RDX: 0000000000000020 RSI: 00007f62e63a0000 RDI: 0000000000000003 [ 486.096533][T15215] RBP: 0000000000000000 R08: 00007f62e639ff04 R09: 000000000000000c [ 486.096552][T15215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 486.096570][T15215] R13: 00007f62e639ff58 R14: 00007f62e63a0000 R15: 0000000000000000 [ 486.096610][T15215] [ 487.661574][T15252] binder: 15251:15252 ioctl c0306201 2000000000c0 returned -14 [ 488.462369][T15263] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3262'. [ 490.353405][T15309] FAULT_INJECTION: forcing a failure. [ 490.353405][T15309] name failslab, interval 1, probability 393216, space 0, times 0 [ 490.367116][T15309] CPU: 0 UID: 0 PID: 15309 Comm: syz.2.3280 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.367165][T15309] Tainted: [L]=SOFTLOCKUP [ 490.367177][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 490.367196][T15309] Call Trace: [ 490.367206][T15309] [ 490.367217][T15309] dump_stack_lvl+0x100/0x190 [ 490.367260][T15309] should_fail_ex.cold+0x5/0xa [ 490.367318][T15309] should_failslab+0xc2/0x120 [ 490.367360][T15309] __kmalloc_cache_noprof+0x80/0x810 [ 490.367392][T15309] ? vkms_plane_duplicate_state+0x87/0x130 [ 490.367438][T15309] ? vkms_plane_duplicate_state+0x87/0x130 [ 490.367475][T15309] vkms_plane_duplicate_state+0x87/0x130 [ 490.367513][T15309] drm_atomic_get_plane_state+0x279/0x760 [ 490.367552][T15309] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 490.367596][T15309] ? trace_contention_end+0xd6/0x110 [ 490.367637][T15309] ? __mutex_lock+0x26a/0x1b90 [ 490.367678][T15309] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 490.367720][T15309] ? drm_master_internal_acquire+0x21/0x80 [ 490.367799][T15309] drm_client_modeset_commit_locked+0x14d/0x580 [ 490.367848][T15309] drm_client_modeset_commit+0x4f/0x80 [ 490.367891][T15309] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 490.367938][T15309] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 490.367983][T15309] drm_fbdev_client_restore+0x1b/0x30 [ 490.368017][T15309] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 490.368054][T15309] drm_client_dev_restore+0x205/0x2a0 [ 490.368103][T15309] drm_release+0x2c6/0x360 [ 490.368141][T15309] ? __pfx_drm_release+0x10/0x10 [ 490.368179][T15309] __fput+0x3ff/0xb40 [ 490.368228][T15309] task_work_run+0x150/0x240 [ 490.368273][T15309] ? __pfx_task_work_run+0x10/0x10 [ 490.368336][T15309] exit_to_user_mode_loop+0x100/0x4b0 [ 490.368377][T15309] ? rcu_is_watching+0x12/0xc0 [ 490.368409][T15309] do_syscall_64+0x4ea/0xf80 [ 490.368448][T15309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.368478][T15309] RIP: 0033:0x7f402479aeb9 [ 490.368502][T15309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.368530][T15309] RSP: 002b:00007f40255fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 490.368557][T15309] RAX: 0000000000000000 RBX: 00007f4024a15fa0 RCX: 00007f402479aeb9 [ 490.368577][T15309] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 490.368594][T15309] RBP: 00007f4024808c1f R08: 0000000000000000 R09: 0000000000000000 [ 490.368612][T15309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.368630][T15309] R13: 00007f4024a16038 R14: 00007f4024a15fa0 R15: 00007ffd9471fd28 [ 490.368672][T15309] [ 490.662116][T15311] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3281'. [ 492.860385][T15362] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 492.901123][T15362] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 492.937620][T15362] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 492.945219][T15362] page_type: f5(slab) [ 492.967384][T15362] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 493.010177][T15362] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 493.047161][T15362] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 493.057148][T15362] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 493.104741][T15362] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 493.126839][T15362] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 493.144445][T15362] page dumped because: unmovable page [ 493.150373][T15362] page_owner tracks the page as allocated [ 493.164159][T15362] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5209, tgid 5209 (udevd), ts 45069695649, free_ts 45037568433 [ 493.196138][T15374] FAULT_INJECTION: forcing a failure. [ 493.196138][T15374] name failslab, interval 1, probability 393216, space 0, times 0 [ 493.227877][T15362] post_alloc_hook+0x1e1/0x250 [ 493.232790][T15374] CPU: 1 UID: 0 PID: 15374 Comm: syz.4.3302 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.232829][T15374] Tainted: [L]=SOFTLOCKUP [ 493.232841][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 493.232858][T15374] Call Trace: [ 493.232868][T15374] [ 493.232879][T15374] dump_stack_lvl+0x100/0x190 [ 493.232917][T15374] should_fail_ex.cold+0x5/0xa [ 493.232965][T15374] should_failslab+0xc2/0x120 [ 493.233005][T15374] __kmalloc_cache_noprof+0x80/0x810 [ 493.233036][T15374] ? vkms_plane_duplicate_state+0x45/0x130 [ 493.233071][T15374] ? ww_mutex_lock+0x37/0x160 [ 493.233114][T15374] ? vkms_plane_duplicate_state+0x45/0x130 [ 493.233149][T15374] vkms_plane_duplicate_state+0x45/0x130 [ 493.233188][T15374] drm_atomic_get_plane_state+0x279/0x760 [ 493.233230][T15374] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 493.233280][T15374] ? trace_contention_end+0xd6/0x110 [ 493.233323][T15374] ? __mutex_lock+0x26a/0x1b90 [ 493.233364][T15374] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 493.233406][T15374] ? drm_master_internal_acquire+0x21/0x80 [ 493.233485][T15374] drm_client_modeset_commit_locked+0x14d/0x580 [ 493.233534][T15374] drm_client_modeset_commit+0x4f/0x80 [ 493.233576][T15374] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 493.233623][T15374] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 493.233668][T15374] drm_fbdev_client_restore+0x1b/0x30 [ 493.233701][T15374] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 493.233734][T15374] drm_client_dev_restore+0x205/0x2a0 [ 493.233782][T15374] drm_release+0x2c6/0x360 [ 493.233824][T15374] ? __pfx_drm_release+0x10/0x10 [ 493.233858][T15374] __fput+0x3ff/0xb40 [ 493.233904][T15374] task_work_run+0x150/0x240 [ 493.233948][T15374] ? __pfx_task_work_run+0x10/0x10 [ 493.234003][T15374] exit_to_user_mode_loop+0x100/0x4b0 [ 493.234042][T15374] ? rcu_is_watching+0x12/0xc0 [ 493.234070][T15374] do_syscall_64+0x4ea/0xf80 [ 493.234104][T15374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.234130][T15374] RIP: 0033:0x7f62e559aeb9 [ 493.234151][T15374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.234176][T15374] RSP: 002b:00007f62e63a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 493.234203][T15374] RAX: 0000000000000000 RBX: 00007f62e5815fa0 RCX: 00007f62e559aeb9 [ 493.234220][T15374] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 493.234236][T15374] RBP: 00007f62e5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 493.234253][T15374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.234274][T15374] R13: 00007f62e5816038 R14: 00007f62e5815fa0 R15: 00007ffff98a5138 [ 493.234311][T15374] [ 493.514898][T15362] get_page_from_freelist+0xe3d/0x2e10 [ 493.520530][T15362] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 493.526466][T15362] alloc_pages_mpol+0x1fb/0x550 [ 493.559876][T15362] new_slab+0x2c4/0x440 [ 493.565700][T15362] ___slab_alloc+0xda3/0x1ca0 [ 493.570665][T15362] __slab_alloc.isra.0+0x63/0x110 [ 493.575724][T15362] __kmalloc_noprof+0x618/0x9c0 [ 493.580655][T15362] tomoyo_realpath_from_path+0xb6/0x690 [ 493.586260][T15362] tomoyo_path_perm+0x276/0x460 [ 493.632180][T15362] security_inode_getattr+0x116/0x280 [ 493.677379][T15362] vfs_fstat+0x4b/0xe0 [ 493.687511][T15362] __do_sys_newfstat+0x8b/0x110 [ 493.724336][T15362] do_syscall_64+0xc9/0xf80 [ 493.744732][T15362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.758064][T15362] page last free pid 5196 tgid 5196 stack trace: [ 493.764438][T15362] __free_frozen_pages+0x822/0x1130 [ 493.787121][T15362] __put_partials+0x127/0x160 [ 493.802191][T15362] qlist_free_all+0x47/0xe0 [ 493.812550][T15362] kasan_quarantine_reduce+0x1a0/0x1f0 [ 493.828055][T15362] __kasan_slab_alloc+0x69/0x90 [ 493.844486][T15362] kmem_cache_alloc_noprof+0x2ad/0x780 [ 493.868049][T15362] getname_flags.part.0+0x4c/0x540 [ 493.884009][T15362] getname_flags+0x93/0xf0 [ 493.894139][T15362] do_sys_openat2+0xc5/0x220 [ 493.904324][T15362] __x64_sys_openat+0x12d/0x210 [ 493.914460][T15362] do_syscall_64+0xc9/0xf80 [ 493.924597][T15362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.415354][T15423] netlink: 146 bytes leftover after parsing attributes in process `syz.1.3323'. [ 497.232753][T15474] sd 0:0:1:0: device reset [ 497.494907][T15482] FAULT_INJECTION: forcing a failure. [ 497.494907][T15482] name failslab, interval 1, probability 393216, space 0, times 0 [ 497.564185][T15482] CPU: 0 UID: 0 PID: 15482 Comm: syz.4.3344 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.564231][T15482] Tainted: [L]=SOFTLOCKUP [ 497.564242][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 497.564258][T15482] Call Trace: [ 497.564267][T15482] [ 497.564276][T15482] dump_stack_lvl+0x100/0x190 [ 497.564317][T15482] should_fail_ex.cold+0x5/0xa [ 497.564362][T15482] should_failslab+0xc2/0x120 [ 497.564400][T15482] kmem_cache_alloc_noprof+0x83/0x780 [ 497.564443][T15482] ? alloc_empty_file+0x55/0x1c0 [ 497.564493][T15482] ? alloc_empty_file+0x55/0x1c0 [ 497.564532][T15482] alloc_empty_file+0x55/0x1c0 [ 497.564575][T15482] path_openat+0xe8/0x3120 [ 497.564606][T15482] ? getname_flags+0x93/0xf0 [ 497.564641][T15482] ? do_sys_openat2+0xc5/0x220 [ 497.564682][T15482] ? __x64_sys_openat+0x12d/0x210 [ 497.564724][T15482] ? do_syscall_64+0xc9/0xf80 [ 497.564756][T15482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.564795][T15482] ? __pfx_path_openat+0x10/0x10 [ 497.564843][T15482] do_filp_open+0x1f7/0x420 [ 497.564879][T15482] ? __pfx_do_filp_open+0x10/0x10 [ 497.564939][T15482] ? _raw_spin_unlock+0x28/0x50 [ 497.564967][T15482] ? alloc_fd+0x476/0x790 [ 497.565009][T15482] do_sys_openat2+0x12e/0x220 [ 497.565052][T15482] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.565110][T15482] __x64_sys_openat+0x12d/0x210 [ 497.565155][T15482] ? __pfx___x64_sys_openat+0x10/0x10 [ 497.565195][T15482] ? xfd_validate_state+0x129/0x190 [ 497.565252][T15482] do_syscall_64+0xc9/0xf80 [ 497.565288][T15482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.565318][T15482] RIP: 0033:0x7f62e555b78e [ 497.565340][T15482] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 497.565368][T15482] RSP: 002b:00007f62e63a0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.565395][T15482] RAX: ffffffffffffffda RBX: 00007f62e63a16c0 RCX: 00007f62e555b78e [ 497.565414][T15482] RDX: 0000000000000002 RSI: 00007f62e63a0f90 RDI: ffffffffffffff9c [ 497.565433][T15482] RBP: 00007f62e5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 497.565451][T15482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.565468][T15482] R13: 00007f62e5816038 R14: 00007f62e5815fa0 R15: 00007ffff98a5138 [ 497.565504][T15482] [ 498.292352][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3349'. [ 498.321161][T15486] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3349'. [ 498.544655][T15495] FAULT_INJECTION: forcing a failure. [ 498.544655][T15495] name failslab, interval 1, probability 393216, space 0, times 0 [ 498.611070][T15495] CPU: 1 UID: 0 PID: 15495 Comm: syz.0.3350 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.611119][T15495] Tainted: [L]=SOFTLOCKUP [ 498.611131][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 498.611148][T15495] Call Trace: [ 498.611159][T15495] [ 498.611170][T15495] dump_stack_lvl+0x100/0x190 [ 498.611212][T15495] should_fail_ex.cold+0x5/0xa [ 498.611260][T15495] should_failslab+0xc2/0x120 [ 498.611301][T15495] kmem_cache_alloc_noprof+0x83/0x780 [ 498.611340][T15495] ? do_epoll_ctl+0x2434/0x36a0 [ 498.611382][T15495] ? do_epoll_ctl+0x2434/0x36a0 [ 498.611416][T15495] do_epoll_ctl+0x2434/0x36a0 [ 498.611465][T15495] ? __pfx_do_epoll_ctl+0x10/0x10 [ 498.611498][T15495] ? find_held_lock+0x2b/0x80 [ 498.611526][T15495] ? __might_fault+0xc5/0x140 [ 498.611581][T15495] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 498.611617][T15495] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 498.611654][T15495] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 498.611702][T15495] do_syscall_64+0xc9/0xf80 [ 498.611742][T15495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.611772][T15495] RIP: 0033:0x7f203059aeb9 [ 498.611796][T15495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.611826][T15495] RSP: 002b:00007f2031371028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 498.611855][T15495] RAX: ffffffffffffffda RBX: 00007f2030816090 RCX: 00007f203059aeb9 [ 498.611876][T15495] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 498.611894][T15495] RBP: 00007f2030608c1f R08: 0000000000000000 R09: 0000000000000000 [ 498.611912][T15495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.611930][T15495] R13: 00007f2030816128 R14: 00007f2030816090 R15: 00007ffd0265d6b8 [ 498.611970][T15495] [ 499.556664][T15505] mkiss: ax0: crc mode is auto. [ 501.767295][T15560] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 501.786937][T15560] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 501.812098][T15560] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 501.844676][T15560] page_type: f5(slab) [ 501.852381][T15560] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 501.874360][T15560] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 501.912820][T15560] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 501.924404][T15560] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 501.952088][T15560] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 501.960840][T15560] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 502.036724][T15560] page dumped because: unmovable page [ 502.045412][T15560] page_owner tracks the page as allocated [ 502.051162][T15560] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5209, tgid 5209 (udevd), ts 45069695649, free_ts 45037568433 [ 502.075735][T15560] post_alloc_hook+0x1e1/0x250 [ 502.080551][T15560] get_page_from_freelist+0xe3d/0x2e10 [ 502.086458][T15560] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 502.094988][T15560] alloc_pages_mpol+0x1fb/0x550 [ 502.100212][T15560] new_slab+0x2c4/0x440 [ 502.104762][T15560] ___slab_alloc+0xda3/0x1ca0 [ 502.109776][T15560] __slab_alloc.isra.0+0x63/0x110 [ 502.120511][T15560] __kmalloc_noprof+0x618/0x9c0 [ 502.131133][T15560] tomoyo_realpath_from_path+0xb6/0x690 [ 502.149946][T15560] tomoyo_path_perm+0x276/0x460 [ 502.158751][T15560] security_inode_getattr+0x116/0x280 [ 502.164492][T15560] vfs_fstat+0x4b/0xe0 [ 502.168705][T15560] __do_sys_newfstat+0x8b/0x110 [ 502.174841][T15560] do_syscall_64+0xc9/0xf80 [ 502.181910][T15560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.187951][T15560] page last free pid 5196 tgid 5196 stack trace: [ 502.195155][T15560] __free_frozen_pages+0x822/0x1130 [ 502.200362][T15560] __put_partials+0x127/0x160 [ 502.205970][T15560] qlist_free_all+0x47/0xe0 [ 502.210504][T15560] kasan_quarantine_reduce+0x1a0/0x1f0 [ 502.216025][T15560] __kasan_slab_alloc+0x69/0x90 [ 502.220907][T15560] kmem_cache_alloc_noprof+0x2ad/0x780 [ 502.226716][T15560] getname_flags.part.0+0x4c/0x540 [ 502.231870][T15560] getname_flags+0x93/0xf0 [ 502.236380][T15560] do_sys_openat2+0xc5/0x220 [ 502.241022][T15560] __x64_sys_openat+0x12d/0x210 [ 502.246166][T15560] do_syscall_64+0xc9/0xf80 [ 502.250702][T15560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.168511][T15599] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3384'. [ 503.672483][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3399'. [ 503.684323][T15619] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3399'. [ 504.206623][T15636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3397'. [ 504.238942][T15636] hsr_slave_0: left promiscuous mode [ 504.251619][T15636] hsr_slave_1: left promiscuous mode [ 504.418208][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3401'. [ 504.434340][T15644] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3401'. [ 504.727071][T15656] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3407'. [ 504.887855][T15665] kvm: kvm [15664]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000012) [ 506.614278][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.620665][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.773024][T15741] zswap: compressor not available [ 510.132130][T15817] netlink: 'syz.4.3464': attribute type 1 has an invalid length. [ 510.150631][T15817] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3464'. [ 510.411098][T15833] FAULT_INJECTION: forcing a failure. [ 510.411098][T15833] name failslab, interval 1, probability 393216, space 0, times 0 [ 510.432893][T15833] CPU: 1 UID: 0 PID: 15833 Comm: syz.4.3469 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.432938][T15833] Tainted: [L]=SOFTLOCKUP [ 510.432948][T15833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 510.432966][T15833] Call Trace: [ 510.432976][T15833] [ 510.432985][T15833] dump_stack_lvl+0x100/0x190 [ 510.433026][T15833] should_fail_ex.cold+0x5/0xa [ 510.433069][T15833] should_failslab+0xc2/0x120 [ 510.433108][T15833] kmem_cache_alloc_noprof+0x83/0x780 [ 510.433145][T15833] ? __pfx_map_id_range_down+0x10/0x10 [ 510.433173][T15833] ? security_inode_alloc+0x3b/0x2c0 [ 510.433219][T15833] ? security_inode_alloc+0x3b/0x2c0 [ 510.433254][T15833] security_inode_alloc+0x3b/0x2c0 [ 510.433292][T15833] inode_init_always_gfp+0xced/0x1040 [ 510.433333][T15833] alloc_inode+0x8e/0x250 [ 510.433374][T15833] path_from_stashed+0x25b/0x750 [ 510.433415][T15833] ns_get_path+0x60/0x80 [ 510.433446][T15833] proc_ns_get_link+0x121/0x230 [ 510.433485][T15833] ? __pfx_proc_ns_get_link+0x10/0x10 [ 510.433529][T15833] ? atime_needs_update+0x8b/0x6b0 [ 510.433578][T15833] pick_link+0xd17/0x13c0 [ 510.433605][T15833] ? __pfx_proc_ns_get_link+0x10/0x10 [ 510.433647][T15833] step_into_slowpath+0x6c2/0xf50 [ 510.433683][T15833] ? __pfx_step_into_slowpath+0x10/0x10 [ 510.433719][T15833] ? find_held_lock+0x2b/0x80 [ 510.433760][T15833] path_openat+0xf95/0x3120 [ 510.433806][T15833] ? __pfx_path_openat+0x10/0x10 [ 510.433854][T15833] do_filp_open+0x1f7/0x420 [ 510.433891][T15833] ? __pfx_do_filp_open+0x10/0x10 [ 510.433951][T15833] ? _raw_spin_unlock+0x28/0x50 [ 510.433981][T15833] ? alloc_fd+0x476/0x790 [ 510.434025][T15833] do_sys_openat2+0x12e/0x220 [ 510.434070][T15833] ? __pfx_do_sys_openat2+0x10/0x10 [ 510.434126][T15833] __x64_sys_openat+0x12d/0x210 [ 510.434170][T15833] ? __pfx___x64_sys_openat+0x10/0x10 [ 510.434213][T15833] ? xfd_validate_state+0x129/0x190 [ 510.434271][T15833] do_syscall_64+0xc9/0xf80 [ 510.434308][T15833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.434338][T15833] RIP: 0033:0x7f62e555b78e [ 510.434362][T15833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.434391][T15833] RSP: 002b:00007f62e63a0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 510.434420][T15833] RAX: ffffffffffffffda RBX: 00007f62e63a16c0 RCX: 00007f62e555b78e [ 510.434440][T15833] RDX: 0000000000000002 RSI: 00007f62e63a0f90 RDI: ffffffffffffff9c [ 510.434458][T15833] RBP: 00007f62e5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 510.434476][T15833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.434493][T15833] R13: 00007f62e5816038 R14: 00007f62e5815fa0 R15: 00007ffff98a5138 [ 510.434531][T15833] [ 511.223303][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3477'. [ 512.265516][T15898] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3494'. [ 512.312337][T15900] netlink: 'syz.2.3495': attribute type 33 has an invalid length. [ 512.320307][T15900] netlink: 322 bytes leftover after parsing attributes in process `syz.2.3495'. [ 513.407621][T15919] usb usb3: usbfs: interface 0 claimed by hub while 'syz.4.3502' sets config #3 [ 513.542929][T13670] Bluetooth: hci3: Malformed LE Event: 0x0b [ 513.827317][T15931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3506'. [ 513.873911][T15931] hsr_slave_0: left promiscuous mode [ 513.890020][T15931] hsr_slave_1: left promiscuous mode [ 514.102855][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3511'. [ 514.566063][T15968] FAULT_INJECTION: forcing a failure. [ 514.566063][T15968] name failslab, interval 1, probability 393216, space 0, times 0 [ 514.618443][T15968] CPU: 1 UID: 0 PID: 15968 Comm: syz.2.3520 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.618494][T15968] Tainted: [L]=SOFTLOCKUP [ 514.618505][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 514.618523][T15968] Call Trace: [ 514.618533][T15968] [ 514.618543][T15968] dump_stack_lvl+0x100/0x190 [ 514.618588][T15968] should_fail_ex.cold+0x5/0xa [ 514.618638][T15968] should_failslab+0xc2/0x120 [ 514.618679][T15968] kmem_cache_alloc_noprof+0x83/0x780 [ 514.618718][T15968] ? do_epoll_ctl+0x2434/0x36a0 [ 514.618760][T15968] ? do_epoll_ctl+0x2434/0x36a0 [ 514.618793][T15968] do_epoll_ctl+0x2434/0x36a0 [ 514.618844][T15968] ? __pfx_do_epoll_ctl+0x10/0x10 [ 514.618878][T15968] ? find_held_lock+0x2b/0x80 [ 514.618907][T15968] ? __might_fault+0xc5/0x140 [ 514.618963][T15968] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 514.618999][T15968] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 514.619037][T15968] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 514.619092][T15968] do_syscall_64+0xc9/0xf80 [ 514.619132][T15968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.619162][T15968] RIP: 0033:0x7f402479aeb9 [ 514.619185][T15968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.619214][T15968] RSP: 002b:00007f40255dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 514.619242][T15968] RAX: ffffffffffffffda RBX: 00007f4024a16090 RCX: 00007f402479aeb9 [ 514.619263][T15968] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 514.619281][T15968] RBP: 00007f4024808c1f R08: 0000000000000000 R09: 0000000000000000 [ 514.619299][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.619316][T15968] R13: 00007f4024a16128 R14: 00007f4024a16090 R15: 00007ffd9471fd28 [ 514.619357][T15968] [ 515.093615][T15973] random: crng reseeded on system resumption [ 515.121985][T15973] FAULT_INJECTION: forcing a failure. [ 515.121985][T15973] name failslab, interval 1, probability 393216, space 0, times 0 [ 515.161452][T15973] CPU: 0 UID: 0 PID: 15973 Comm: syz.0.3522 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.161502][T15973] Tainted: [L]=SOFTLOCKUP [ 515.161514][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 515.161532][T15973] Call Trace: [ 515.161542][T15973] [ 515.161554][T15973] dump_stack_lvl+0x100/0x190 [ 515.161602][T15973] should_fail_ex.cold+0x5/0xa [ 515.161650][T15973] should_failslab+0xc2/0x120 [ 515.161691][T15973] __kmalloc_cache_noprof+0x80/0x810 [ 515.161723][T15973] ? create_basic_memory_bitmaps+0x9d/0x350 [ 515.161757][T15973] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 515.161804][T15973] ? create_basic_memory_bitmaps+0x9d/0x350 [ 515.161836][T15973] create_basic_memory_bitmaps+0x9d/0x350 [ 515.161875][T15973] snapshot_open+0x230/0x2a0 [ 515.161909][T15973] ? __pfx_snapshot_open+0x10/0x10 [ 515.161945][T15973] misc_open+0x26d/0x450 [ 515.161980][T15973] ? __pfx_misc_open+0x10/0x10 [ 515.162012][T15973] chrdev_open+0x234/0x6a0 [ 515.162048][T15973] ? __pfx_apparmor_file_open+0x10/0x10 [ 515.162094][T15973] ? __pfx_chrdev_open+0x10/0x10 [ 515.162134][T15973] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 515.162181][T15973] do_dentry_open+0x73e/0x1570 [ 515.162216][T15973] ? __pfx_chrdev_open+0x10/0x10 [ 515.162252][T15973] ? security_inode_permission+0xbf/0x250 [ 515.162302][T15973] vfs_open+0x82/0x3f0 [ 515.162349][T15973] path_openat+0x21dc/0x3120 [ 515.162397][T15973] ? __pfx_path_openat+0x10/0x10 [ 515.162447][T15973] do_filp_open+0x1f7/0x420 [ 515.162486][T15973] ? __pfx_do_filp_open+0x10/0x10 [ 515.162550][T15973] ? _raw_spin_unlock+0x28/0x50 [ 515.162579][T15973] ? alloc_fd+0x476/0x790 [ 515.162625][T15973] do_sys_openat2+0x12e/0x220 [ 515.162669][T15973] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.162718][T15973] ? __fget_files+0x21f/0x3d0 [ 515.162759][T15973] __x64_sys_openat+0x12d/0x210 [ 515.162806][T15973] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.162853][T15973] ? xfd_validate_state+0x129/0x190 [ 515.162915][T15973] do_syscall_64+0xc9/0xf80 [ 515.162955][T15973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.162985][T15973] RIP: 0033:0x7f203059aeb9 [ 515.163010][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.163039][T15973] RSP: 002b:00007f2031392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.163074][T15973] RAX: ffffffffffffffda RBX: 00007f2030815fa0 RCX: 00007f203059aeb9 [ 515.163094][T15973] RDX: 0000000000101001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 515.163115][T15973] RBP: 00007f2030608c1f R08: 0000000000000000 R09: 0000000000000000 [ 515.163134][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.163153][T15973] R13: 00007f2030816038 R14: 00007f2030815fa0 R15: 00007ffd0265d6b8 [ 515.163194][T15973] [ 515.518438][T15978] FAULT_INJECTION: forcing a failure. [ 515.518438][T15978] name failslab, interval 1, probability 393216, space 0, times 0 [ 515.531629][T15978] CPU: 0 UID: 0 PID: 15978 Comm: syz.4.3523 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.531676][T15978] Tainted: [L]=SOFTLOCKUP [ 515.531686][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 515.531703][T15978] Call Trace: [ 515.531714][T15978] [ 515.531724][T15978] dump_stack_lvl+0x100/0x190 [ 515.531764][T15978] should_fail_ex.cold+0x5/0xa [ 515.531811][T15978] should_failslab+0xc2/0x120 [ 515.531851][T15978] __kmalloc_cache_noprof+0x80/0x810 [ 515.531882][T15978] ? io_uring_setup.cold+0x6c/0x1a89 [ 515.531926][T15978] ? io_uring_setup.cold+0x6c/0x1a89 [ 515.531971][T15978] io_uring_setup.cold+0x6c/0x1a89 [ 515.532015][T15978] ? __pfx_io_uring_setup+0x10/0x10 [ 515.532053][T15978] ? do_futex+0x192/0x350 [ 515.532097][T15978] ? __pfx_do_futex+0x10/0x10 [ 515.532152][T15978] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 515.532200][T15978] ? syscall_user_dispatch+0x76/0x130 [ 515.532249][T15978] __x64_sys_io_uring_setup+0xc2/0x170 [ 515.532286][T15978] do_syscall_64+0xc9/0xf80 [ 515.532324][T15978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.532354][T15978] RIP: 0033:0x7f62e559aeb9 [ 515.532378][T15978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.532406][T15978] RSP: 002b:00007f62e63a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 515.532435][T15978] RAX: ffffffffffffffda RBX: 00007f62e5815fa0 RCX: 00007f62e559aeb9 [ 515.532455][T15978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 515.532473][T15978] RBP: 00007f62e5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 515.532492][T15978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.532510][T15978] R13: 00007f62e5816038 R14: 00007f62e5815fa0 R15: 00007ffff98a5138 [ 515.532549][T15978] [ 516.139750][T15992] FAULT_INJECTION: forcing a failure. [ 516.139750][T15992] name failslab, interval 1, probability 393216, space 0, times 0 [ 516.152920][T15992] CPU: 0 UID: 0 PID: 15992 Comm: syz.0.3531 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.152967][T15992] Tainted: [L]=SOFTLOCKUP [ 516.152978][T15992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 516.152996][T15992] Call Trace: [ 516.153006][T15992] [ 516.153017][T15992] dump_stack_lvl+0x100/0x190 [ 516.153059][T15992] should_fail_ex.cold+0x5/0xa [ 516.153109][T15992] should_failslab+0xc2/0x120 [ 516.153155][T15992] ? alloc_pipe_info+0x1ec/0x590 [ 516.153190][T15992] __kmalloc_noprof+0xf6/0x9c0 [ 516.153231][T15992] ? alloc_pipe_info+0x1ec/0x590 [ 516.153265][T15992] alloc_pipe_info+0x1ec/0x590 [ 516.153302][T15992] create_pipe_files+0x8c/0x970 [ 516.153343][T15992] do_pipe2+0xbd/0x1e0 [ 516.153377][T15992] ? __pfx_do_pipe2+0x10/0x10 [ 516.153412][T15992] ? xfd_validate_state+0x129/0x190 [ 516.153469][T15992] __x64_sys_pipe+0x33/0x50 [ 516.153505][T15992] do_syscall_64+0xc9/0xf80 [ 516.153543][T15992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.153573][T15992] RIP: 0033:0x7f203059aeb9 [ 516.153597][T15992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.153626][T15992] RSP: 002b:00007f2031392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 516.153655][T15992] RAX: ffffffffffffffda RBX: 00007f2030815fa0 RCX: 00007f203059aeb9 [ 516.153677][T15992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.153695][T15992] RBP: 00007f2030608c1f R08: 0000000000000000 R09: 0000000000000000 [ 516.153713][T15992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.153731][T15992] R13: 00007f2030816038 R14: 00007f2030815fa0 R15: 00007ffd0265d6b8 [ 516.153770][T15992] [ 516.821023][T16011] kvm: kvm [16010]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 517.066176][T16018] random: crng reseeded on system resumption [ 517.163306][T16018] RDS: rds_bind could not find a transport for fe80::736d:2f73:7461:626c, load rds_tcp or rds_rdma? [ 517.314786][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3539'. [ 518.642813][T16064] netlink: 146 bytes leftover after parsing attributes in process `syz.1.3560'. [ 519.216597][T16074] zswap: compressor not available [ 520.026712][T16093] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 522.560906][T16174] FAULT_INJECTION: forcing a failure. [ 522.560906][T16174] name failslab, interval 1, probability 393216, space 0, times 0 [ 522.586720][T16174] CPU: 1 UID: 0 PID: 16174 Comm: syz.2.3600 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.586770][T16174] Tainted: [L]=SOFTLOCKUP [ 522.586781][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 522.586798][T16174] Call Trace: [ 522.586808][T16174] [ 522.586820][T16174] dump_stack_lvl+0x100/0x190 [ 522.586862][T16174] should_fail_ex.cold+0x5/0xa [ 522.586911][T16174] should_failslab+0xc2/0x120 [ 522.586952][T16174] ? lsm_blob_alloc+0x68/0x90 [ 522.586982][T16174] __kmalloc_noprof+0xf6/0x9c0 [ 522.587013][T16174] ? sk_prot_alloc+0x10b/0x2a0 [ 522.587052][T16174] ? lsm_blob_alloc+0x68/0x90 [ 522.587082][T16174] lsm_blob_alloc+0x68/0x90 [ 522.587115][T16174] security_sk_alloc+0x2d/0x290 [ 522.587156][T16174] sk_prot_alloc+0x12a/0x2a0 [ 522.587189][T16174] sk_alloc+0x36/0xe80 [ 522.587230][T16174] xsk_create+0x117/0x760 [ 522.587278][T16174] __sock_create+0x339/0x860 [ 522.587319][T16174] __sys_socket+0x14d/0x260 [ 522.587354][T16174] ? __pfx___sys_socket+0x10/0x10 [ 522.587387][T16174] ? xfd_validate_state+0x129/0x190 [ 522.587457][T16174] __x64_sys_socket+0x72/0xb0 [ 522.587496][T16174] ? lockdep_hardirqs_on+0x78/0x100 [ 522.587531][T16174] do_syscall_64+0xc9/0xf80 [ 522.587570][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.587601][T16174] RIP: 0033:0x7f402479aeb9 [ 522.587625][T16174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.587660][T16174] RSP: 002b:00007f40255fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 522.587689][T16174] RAX: ffffffffffffffda RBX: 00007f4024a15fa0 RCX: 00007f402479aeb9 [ 522.587710][T16174] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 522.587728][T16174] RBP: 00007f4024808c1f R08: 0000000000000000 R09: 0000000000000000 [ 522.587747][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.587765][T16174] R13: 00007f4024a16038 R14: 00007f4024a15fa0 R15: 00007ffd9471fd28 [ 522.587805][T16174] [ 523.063555][T16186] netlink: 'syz.4.3605': attribute type 1 has an invalid length. [ 523.071848][T16186] netlink: 306 bytes leftover after parsing attributes in process `syz.4.3605'. [ 523.254581][T16190] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3607'. [ 523.589789][T16199] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input21 [ 523.632411][T16201] netlink: 146 bytes leftover after parsing attributes in process `syz.1.3611'. [ 524.485515][T13670] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 525.018792][T16227] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3621'. [ 526.332534][T16261] sd 0:0:1:0: PR command failed: 1026 [ 526.338529][T16261] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 526.345676][T16261] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 527.080827][T16282] netlink: 146 bytes leftover after parsing attributes in process `syz.2.3641'. [ 527.564268][T16295] FAULT_INJECTION: forcing a failure. [ 527.564268][T16295] name failslab, interval 1, probability 393216, space 0, times 0 [ 527.589815][T16295] CPU: 0 UID: 0 PID: 16295 Comm: syz.2.3646 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.589864][T16295] Tainted: [L]=SOFTLOCKUP [ 527.589884][T16295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 527.589902][T16295] Call Trace: [ 527.589913][T16295] [ 527.589924][T16295] dump_stack_lvl+0x100/0x190 [ 527.589966][T16295] should_fail_ex.cold+0x5/0xa [ 527.590016][T16295] should_failslab+0xc2/0x120 [ 527.590057][T16295] kmem_cache_alloc_noprof+0x83/0x780 [ 527.590097][T16295] ? security_file_alloc+0x34/0x2c0 [ 527.590147][T16295] ? security_file_alloc+0x34/0x2c0 [ 527.590189][T16295] security_file_alloc+0x34/0x2c0 [ 527.590235][T16295] init_file+0x93/0x4c0 [ 527.590274][T16295] alloc_empty_file+0x73/0x1c0 [ 527.590315][T16295] alloc_file_pseudo+0x13a/0x230 [ 527.590359][T16295] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 527.590413][T16295] __shmem_file_setup+0x1a3/0x330 [ 527.590447][T16295] shmem_zero_setup+0x93/0x1b0 [ 527.590488][T16295] __mmap_region+0x2101/0x2820 [ 527.590528][T16295] ? __pfx___mmap_region+0x10/0x10 [ 527.590589][T16295] ? finish_task_switch.isra.0+0x204/0xb70 [ 527.590623][T16295] ? lockdep_hardirqs_on+0x78/0x100 [ 527.590658][T16295] ? finish_task_switch.isra.0+0x204/0xb70 [ 527.590761][T16295] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 527.590807][T16295] ? rcu_is_watching+0x12/0xc0 [ 527.590845][T16295] mmap_region+0x180/0x3e0 [ 527.590896][T16295] do_mmap+0xc63/0x12f0 [ 527.590947][T16295] ? __pfx_do_mmap+0x10/0x10 [ 527.590992][T16295] ? __pfx_down_write_killable+0x10/0x10 [ 527.591039][T16295] vm_mmap_pgoff+0x29e/0x470 [ 527.591090][T16295] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 527.591141][T16295] ? __x64_sys_futex+0x34f/0x4d0 [ 527.591180][T16295] ? __x64_sys_futex+0x358/0x4d0 [ 527.591224][T16295] ksys_mmap_pgoff+0x7d/0x5b0 [ 527.591273][T16295] __x64_sys_mmap+0x125/0x190 [ 527.591306][T16295] do_syscall_64+0xc9/0xf80 [ 527.591343][T16295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.591373][T16295] RIP: 0033:0x7f402479aeb9 [ 527.591396][T16295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.591424][T16295] RSP: 002b:00007f40255fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 527.591452][T16295] RAX: ffffffffffffffda RBX: 00007f4024a15fa0 RCX: 00007f402479aeb9 [ 527.591472][T16295] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 527.591489][T16295] RBP: 00007f4024808c1f R08: fffffffffffffffa R09: 0000000000008000 [ 527.591508][T16295] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 527.591526][T16295] R13: 00007f4024a16038 R14: 00007f4024a15fa0 R15: 00007ffd9471fd28 [ 527.591565][T16295] [ 532.801561][T16431] zswap: compressor not available [ 532.970297][T16443] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3699'. [ 533.617062][T16454] netlink: 'syz.1.3704': attribute type 33 has an invalid length. [ 533.806815][T16462] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3707'. [ 536.034097][T16497] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3718'. [ 536.142800][T16501] netlink: 'syz.4.3719': attribute type 33 has an invalid length. [ 536.158552][T16501] netlink: 322 bytes leftover after parsing attributes in process `syz.4.3719'. [ 536.452369][T16505] sd 0:0:1:0: PR command failed: 1026 [ 536.461252][T16505] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 536.473516][T16505] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 536.983235][T16519] FAULT_INJECTION: forcing a failure. [ 536.983235][T16519] name failslab, interval 1, probability 393216, space 0, times 0 [ 537.013384][T16519] CPU: 1 UID: 0 PID: 16519 Comm: syz.0.3724 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.013434][T16519] Tainted: [L]=SOFTLOCKUP [ 537.013445][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 537.013463][T16519] Call Trace: [ 537.013473][T16519] [ 537.013485][T16519] dump_stack_lvl+0x100/0x190 [ 537.013525][T16519] should_fail_ex.cold+0x5/0xa [ 537.013574][T16519] should_failslab+0xc2/0x120 [ 537.013617][T16519] __kmalloc_cache_noprof+0x80/0x810 [ 537.013647][T16519] ? lock_acquire+0x17c/0x330 [ 537.013685][T16519] ? open_substream+0xec/0x9e0 [ 537.013725][T16519] ? open_substream+0xec/0x9e0 [ 537.013757][T16519] open_substream+0xec/0x9e0 [ 537.013791][T16519] ? lockdep_hardirqs_on+0x78/0x100 [ 537.013829][T16519] rawmidi_open_priv+0x524/0x6f0 [ 537.013875][T16519] snd_rawmidi_open+0x4c9/0xba0 [ 537.013921][T16519] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 537.013965][T16519] ? __pfx_default_wake_function+0x10/0x10 [ 537.013998][T16519] ? soundcore_open+0x231/0x5a0 [ 537.014027][T16519] ? soundcore_open+0x231/0x5a0 [ 537.014064][T16519] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 537.014107][T16519] soundcore_open+0x2e3/0x5a0 [ 537.014143][T16519] ? __pfx_soundcore_open+0x10/0x10 [ 537.014173][T16519] chrdev_open+0x234/0x6a0 [ 537.014208][T16519] ? __pfx_apparmor_file_open+0x10/0x10 [ 537.014246][T16519] ? __pfx_chrdev_open+0x10/0x10 [ 537.014292][T16519] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 537.014337][T16519] do_dentry_open+0x73e/0x1570 [ 537.014371][T16519] ? __pfx_chrdev_open+0x10/0x10 [ 537.014408][T16519] ? security_inode_permission+0xbf/0x250 [ 537.014456][T16519] vfs_open+0x82/0x3f0 [ 537.014502][T16519] path_openat+0x21dc/0x3120 [ 537.014550][T16519] ? __pfx_path_openat+0x10/0x10 [ 537.014599][T16519] do_filp_open+0x1f7/0x420 [ 537.014636][T16519] ? __pfx_do_filp_open+0x10/0x10 [ 537.014696][T16519] ? _raw_spin_unlock+0x28/0x50 [ 537.014726][T16519] ? alloc_fd+0x476/0x790 [ 537.014769][T16519] do_sys_openat2+0x12e/0x220 [ 537.014813][T16519] ? __pfx_do_sys_openat2+0x10/0x10 [ 537.014867][T16519] __x64_sys_openat+0x12d/0x210 [ 537.014908][T16519] ? __pfx___x64_sys_openat+0x10/0x10 [ 537.014944][T16519] ? xfd_validate_state+0x129/0x190 [ 537.014995][T16519] do_syscall_64+0xc9/0xf80 [ 537.015031][T16519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.015067][T16519] RIP: 0033:0x7f203059aeb9 [ 537.015090][T16519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.015117][T16519] RSP: 002b:00007f2031392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.015143][T16519] RAX: ffffffffffffffda RBX: 00007f2030815fa0 RCX: 00007f203059aeb9 [ 537.015161][T16519] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 537.015178][T16519] RBP: 00007f2030608c1f R08: 0000000000000000 R09: 0000000000000000 [ 537.015197][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.015215][T16519] R13: 00007f2030816038 R14: 00007f2030815fa0 R15: 00007ffd0265d6b8 [ 537.015256][T16519] [ 537.760005][T16531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3730'. [ 538.152784][T16544] netlink: 346 bytes leftover after parsing attributes in process `syz.2.3735'. [ 539.562491][T16575] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 539.646666][T16578] netlink: 354 bytes leftover after parsing attributes in process `syz.0.3746'. [ 539.856364][T16587] netlink: 'syz.2.3747': attribute type 1 has an invalid length. [ 539.864274][T16587] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3747'. [ 539.894138][T16587] netlink: 'syz.2.3747': attribute type 1 has an invalid length. [ 539.919355][T16587] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3747'. [ 542.665389][T16647] FAULT_INJECTION: forcing a failure. [ 542.665389][T16647] name failslab, interval 1, probability 393216, space 0, times 0 [ 542.732577][T16647] CPU: 0 UID: 0 PID: 16647 Comm: syz.0.3765 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.732623][T16647] Tainted: [L]=SOFTLOCKUP [ 542.732632][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 542.732649][T16647] Call Trace: [ 542.732659][T16647] [ 542.732670][T16647] dump_stack_lvl+0x100/0x190 [ 542.732708][T16647] should_fail_ex.cold+0x5/0xa [ 542.732755][T16647] should_failslab+0xc2/0x120 [ 542.732794][T16647] kmem_cache_alloc_noprof+0x83/0x780 [ 542.732831][T16647] ? do_epoll_ctl+0x2434/0x36a0 [ 542.732869][T16647] ? do_epoll_ctl+0x2434/0x36a0 [ 542.732897][T16647] do_epoll_ctl+0x2434/0x36a0 [ 542.732936][T16647] ? __pfx_do_epoll_ctl+0x10/0x10 [ 542.732960][T16647] ? find_held_lock+0x2b/0x80 [ 542.732984][T16647] ? __might_fault+0xc5/0x140 [ 542.733027][T16647] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 542.733060][T16647] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 542.733093][T16647] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 542.733137][T16647] do_syscall_64+0xc9/0xf80 [ 542.733175][T16647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.733205][T16647] RIP: 0033:0x7f203059aeb9 [ 542.733228][T16647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.733256][T16647] RSP: 002b:00007f2031371028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 542.733284][T16647] RAX: ffffffffffffffda RBX: 00007f2030816090 RCX: 00007f203059aeb9 [ 542.733304][T16647] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 542.733321][T16647] RBP: 00007f2030608c1f R08: 0000000000000000 R09: 0000000000000000 [ 542.733340][T16647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.733357][T16647] R13: 00007f2030816128 R14: 00007f2030816090 R15: 00007ffd0265d6b8 [ 542.733397][T16647] [ 543.546881][T16663] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3771'. [ 543.751007][T16667] sd 0:0:1:0: PR command failed: 1026 [ 543.763096][T16667] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 543.817394][T16667] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 547.752060][T16728] sg_write: data in/out 100663260/90 bytes for SCSI command 0x0-- guessing data in; [ 547.752060][T16728] program syz.4.3789 not setting count and/or reply_len properly [ 548.478972][T16753] FAULT_INJECTION: forcing a failure. [ 548.478972][T16753] name failslab, interval 1, probability 393216, space 0, times 0 [ 548.527619][T16753] CPU: 0 UID: 0 PID: 16753 Comm: syz.4.3795 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.527669][T16753] Tainted: [L]=SOFTLOCKUP [ 548.527680][T16753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 548.527696][T16753] Call Trace: [ 548.527705][T16753] [ 548.527716][T16753] dump_stack_lvl+0x100/0x190 [ 548.527756][T16753] should_fail_ex.cold+0x5/0xa [ 548.527802][T16753] should_failslab+0xc2/0x120 [ 548.527842][T16753] kmem_cache_alloc_noprof+0x83/0x780 [ 548.527884][T16753] ? do_epoll_ctl+0x2434/0x36a0 [ 548.527928][T16753] ? do_epoll_ctl+0x2434/0x36a0 [ 548.527960][T16753] do_epoll_ctl+0x2434/0x36a0 [ 548.528011][T16753] ? __pfx_do_epoll_ctl+0x10/0x10 [ 548.528045][T16753] ? find_held_lock+0x2b/0x80 [ 548.528074][T16753] ? __might_fault+0xc5/0x140 [ 548.528123][T16753] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 548.528158][T16753] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 548.528195][T16753] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 548.528252][T16753] do_syscall_64+0xc9/0xf80 [ 548.528292][T16753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.528323][T16753] RIP: 0033:0x7f62e559aeb9 [ 548.528347][T16753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.528376][T16753] RSP: 002b:00007f62e6380028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 548.528404][T16753] RAX: ffffffffffffffda RBX: 00007f62e5816090 RCX: 00007f62e559aeb9 [ 548.528424][T16753] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 548.528442][T16753] RBP: 00007f62e5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 548.528460][T16753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.528478][T16753] R13: 00007f62e5816128 R14: 00007f62e5816090 R15: 00007ffff98a5138 [ 548.528517][T16753] [ 548.928038][T14750] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 551.779214][T16821] zswap: compressor not available [ 551.993054][ T30] audit: type=1800 audit(4294979625.108:12): pid=16834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3824" name="features" dev="configfs" ino=64619 res=0 errno=0 [ 552.187990][T16839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3826'. [ 552.976642][T13670] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 553.424146][T16862] netlink: 146 bytes leftover after parsing attributes in process `syz.4.3833'. [ 553.746172][T16868] zswap: compressor not available [ 555.915682][T16909] binder: 16908:16909 ioctl 40046210 0 returned -14 [ 556.094595][T16916] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3850'. [ 556.637895][T16924] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3853'. [ 556.679797][T16924] netlink: 'syz.2.3853': attribute type 3 has an invalid length. [ 556.687583][T16924] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3853'. [ 557.288568][T16954] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3860'. [ 557.300413][T16952] netlink: 290 bytes leftover after parsing attributes in process `syz.0.3868'. [ 558.300471][T16966] futex_wake_op: syz.1.3865 tries to shift op by -2048; fix this program [ 558.341640][T16966] futex_wake_op: syz.1.3865 tries to shift op by -2048; fix this program [ 558.812847][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3871'. [ 558.831724][T16976] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3871'. [ 559.024796][T13670] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 559.226471][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'. [ 559.257867][T16995] netlink: 354 bytes leftover after parsing attributes in process `syz.2.3878'. [ 561.453919][T17028] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3889'. [ 562.089309][T17047] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3899'. [ 562.929643][T17078] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3911'. [ 563.067582][T17081] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3912'. [ 563.112478][T17081] –õ\­: renamed from lo (while UP) [ 563.238633][T17086] FAULT_INJECTION: forcing a failure. [ 563.238633][T17086] name failslab, interval 1, probability 393216, space 0, times 0 [ 563.253382][T17086] CPU: 0 UID: 0 PID: 17086 Comm: syz.0.3913 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.253428][T17086] Tainted: [L]=SOFTLOCKUP [ 563.253438][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 563.253454][T17086] Call Trace: [ 563.253462][T17086] [ 563.253473][T17086] dump_stack_lvl+0x100/0x190 [ 563.253513][T17086] should_fail_ex.cold+0x5/0xa [ 563.253559][T17086] should_failslab+0xc2/0x120 [ 563.253599][T17086] ? tomoyo_encode2+0xfb/0x3c0 [ 563.253626][T17086] __kmalloc_noprof+0xf6/0x9c0 [ 563.253665][T17086] ? tomoyo_encode2+0xfb/0x3c0 [ 563.253690][T17086] tomoyo_encode2+0xfb/0x3c0 [ 563.253723][T17086] tomoyo_encode+0x29/0x50 [ 563.253749][T17086] tomoyo_realpath_from_path+0x18c/0x690 [ 563.253788][T17086] tomoyo_path_number_perm+0x23c/0x580 [ 563.253829][T17086] ? tomoyo_path_number_perm+0x22e/0x580 [ 563.253874][T17086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 563.253923][T17086] ? futex_wait+0x125/0x380 [ 563.253987][T17086] ? find_held_lock+0x2b/0x80 [ 563.254015][T17086] ? hook_file_ioctl_common+0x146/0x410 [ 563.254059][T17086] ? __fget_files+0x215/0x3d0 [ 563.254098][T17086] ? __fget_files+0x21f/0x3d0 [ 563.254136][T17086] security_file_ioctl+0xd3/0x230 [ 563.254180][T17086] __x64_sys_ioctl+0xb7/0x210 [ 563.254228][T17086] do_syscall_64+0xc9/0xf80 [ 563.254268][T17086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.254300][T17086] RIP: 0033:0x7f203059aeb9 [ 563.254323][T17086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.254352][T17086] RSP: 002b:00007f2031392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.254382][T17086] RAX: ffffffffffffffda RBX: 00007f2030815fa0 RCX: 00007f203059aeb9 [ 563.254402][T17086] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 563.254420][T17086] RBP: 00007f2030608c1f R08: 0000000000000000 R09: 0000000000000000 [ 563.254438][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.254455][T17086] R13: 00007f2030816038 R14: 00007f2030815fa0 R15: 00007ffd0265d6b8 [ 563.254494][T17086] [ 563.256645][T17086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 563.785160][T17094] sp0: Synchronizing with TNC [ 564.484822][T17118] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3924'. [ 564.596166][T17119] FAULT_INJECTION: forcing a failure. [ 564.596166][T17119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.676155][T17119] CPU: 1 UID: 0 PID: 17119 Comm: syz.2.3923 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.676202][T17119] Tainted: [L]=SOFTLOCKUP [ 564.676213][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 564.676231][T17119] Call Trace: [ 564.676240][T17119] [ 564.676252][T17119] dump_stack_lvl+0x100/0x190 [ 564.676293][T17119] should_fail_ex.cold+0x5/0xa [ 564.676343][T17119] _copy_to_iter+0x5a4/0x1720 [ 564.676404][T17119] ? __pfx__copy_to_iter+0x10/0x10 [ 564.676447][T17119] ? folio_mark_accessed+0xf3/0x1040 [ 564.676493][T17119] ? __pfx_filemap_get_pages+0x10/0x10 [ 564.676531][T17119] ? __pfx_folio_mark_accessed+0x10/0x10 [ 564.676577][T17119] copy_page_to_iter+0x12a/0x1e0 [ 564.676622][T17119] filemap_read+0x7a9/0x10a0 [ 564.676676][T17119] ? __pfx_filemap_read+0x10/0x10 [ 564.676740][T17119] ? __pfx_down_read+0x10/0x10 [ 564.676780][T17119] ? __pfx_aa_file_perm+0x10/0x10 [ 564.676810][T17119] ? futex_unqueue+0x133/0x2c0 [ 564.676856][T17119] blkdev_read_iter+0x2c4/0x4f0 [ 564.676892][T17119] ? copy_iovec_from_user+0x102/0x140 [ 564.676937][T17119] do_iter_readv_writev+0x60d/0x920 [ 564.676971][T17119] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 564.676999][T17119] ? common_file_perm+0x1ab/0x4f0 [ 564.677044][T17119] ? bpf_lsm_file_permission+0x9/0x10 [ 564.677083][T17119] ? security_file_permission+0x76/0x210 [ 564.677129][T17119] ? rw_verify_area+0xce/0x6d0 [ 564.677165][T17119] vfs_readv+0x4d3/0x8d0 [ 564.677203][T17119] ? __pfx_vfs_readv+0x10/0x10 [ 564.677230][T17119] ? __pfx_futex_wait+0x10/0x10 [ 564.677284][T17119] ? __fget_files+0x21f/0x3d0 [ 564.677324][T17119] ? do_readv+0x13e/0x340 [ 564.677351][T17119] do_readv+0x13e/0x340 [ 564.677381][T17119] ? __pfx_do_readv+0x10/0x10 [ 564.677410][T17119] ? xfd_validate_state+0x129/0x190 [ 564.677459][T17119] __x64_sys_preadv2+0x11f/0x160 [ 564.677506][T17119] do_syscall_64+0xc9/0xf80 [ 564.677545][T17119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.677574][T17119] RIP: 0033:0x7f402479aeb9 [ 564.677596][T17119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.677624][T17119] RSP: 002b:00007f40255bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 564.677650][T17119] RAX: ffffffffffffffda RBX: 00007f4024a16180 RCX: 00007f402479aeb9 [ 564.677668][T17119] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000006 [ 564.677686][T17119] RBP: 00007f4024808c1f R08: 0000000000000004 R09: 000000000000002e [ 564.677703][T17119] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 564.677721][T17119] R13: 00007f4024a16218 R14: 00007f4024a16180 R15: 00007ffd9471fd28 [ 564.677762][T17119] [ 565.365734][T17130] kvm: user requested TSC rate below hardware speed [ 565.386611][T17132] FAULT_INJECTION: forcing a failure. [ 565.386611][T17132] name failslab, interval 1, probability 393216, space 0, times 0 [ 565.400040][T17132] CPU: 1 UID: 0 PID: 17132 Comm: syz.4.3927 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.400085][T17132] Tainted: [L]=SOFTLOCKUP [ 565.400096][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 565.400114][T17132] Call Trace: [ 565.400124][T17132] [ 565.400135][T17132] dump_stack_lvl+0x100/0x190 [ 565.400177][T17132] should_fail_ex.cold+0x5/0xa [ 565.400224][T17132] should_failslab+0xc2/0x120 [ 565.400265][T17132] kmem_cache_alloc_noprof+0x83/0x780 [ 565.400301][T17132] ? kasan_save_stack+0x30/0x50 [ 565.400335][T17132] ? kvm_vm_ioctl+0x390/0x4020 [ 565.400380][T17132] ? kvm_vm_ioctl+0x390/0x4020 [ 565.400415][T17132] kvm_vm_ioctl+0x390/0x4020 [ 565.400466][T17132] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 565.400525][T17132] ? kasan_quarantine_put+0x104/0x240 [ 565.400560][T17132] ? lockdep_hardirqs_on+0x78/0x100 [ 565.400601][T17132] ? find_held_lock+0x2b/0x80 [ 565.400629][T17132] ? tomoyo_path_number_perm+0x28f/0x580 [ 565.400682][T17132] ? tomoyo_path_number_perm+0x28f/0x580 [ 565.400732][T17132] ? tomoyo_path_number_perm+0x188/0x580 [ 565.400777][T17132] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 565.400819][T17132] ? futex_wait+0x125/0x380 [ 565.400857][T17132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 565.400891][T17132] ? do_vfs_ioctl+0x226/0x13e0 [ 565.400937][T17132] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 565.400992][T17132] ? find_held_lock+0x2b/0x80 [ 565.401020][T17132] ? hook_file_ioctl_common+0x146/0x410 [ 565.401072][T17132] ? __fget_files+0x21f/0x3d0 [ 565.401109][T17132] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 565.401150][T17132] __x64_sys_ioctl+0x18e/0x210 [ 565.401198][T17132] do_syscall_64+0xc9/0xf80 [ 565.401234][T17132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.401263][T17132] RIP: 0033:0x7f62e559aeb9 [ 565.401287][T17132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.401314][T17132] RSP: 002b:00007f62e63a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.401339][T17132] RAX: ffffffffffffffda RBX: 00007f62e5815fa0 RCX: 00007f62e559aeb9 [ 565.401357][T17132] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 565.401373][T17132] RBP: 00007f62e5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 565.401390][T17132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.401406][T17132] R13: 00007f62e5816038 R14: 00007f62e5815fa0 R15: 00007ffff98a5138 [ 565.401438][T17132] [ 566.227709][T17149] bridge0: port 4(veth0_to_bridge) entered blocking state [ 566.235068][T17149] bridge0: port 4(veth0_to_bridge) entered disabled state [ 566.242303][T17149] veth0_to_bridge: entered allmulticast mode [ 566.246739][T17150] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3936'. [ 566.259048][T17149] veth0_to_bridge: entered promiscuous mode [ 566.270731][T17149] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.290255][T17149] bridge0: port 4(veth0_to_bridge) entered blocking state [ 566.297594][T17149] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 566.314286][T17150] netlink: 158 bytes leftover after parsing attributes in process `syz.0.3936'. [ 566.544894][T17159] FAULT_INJECTION: forcing a failure. [ 566.544894][T17159] name failslab, interval 1, probability 393216, space 0, times 0 [ 566.587615][T17159] CPU: 1 UID: 0 PID: 17159 Comm: syz.0.3938 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.587662][T17159] Tainted: [L]=SOFTLOCKUP [ 566.587673][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 566.587692][T17159] Call Trace: [ 566.587702][T17159] [ 566.587714][T17159] dump_stack_lvl+0x100/0x190 [ 566.587755][T17159] should_fail_ex.cold+0x5/0xa [ 566.587806][T17159] should_failslab+0xc2/0x120 [ 566.587847][T17159] __kmalloc_cache_noprof+0x80/0x810 [ 566.587880][T17159] ? bdi_split_work_to_wbs+0x2d7/0xfe0 [ 566.587921][T17159] ? __pfx___might_resched+0x10/0x10 [ 566.587971][T17159] ? bdi_split_work_to_wbs+0x2d7/0xfe0 [ 566.588013][T17159] bdi_split_work_to_wbs+0x2d7/0xfe0 [ 566.588060][T17159] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 566.588116][T17159] ? __lock_acquire+0x4a5/0x2630 [ 566.588157][T17159] __writeback_inodes_sb_nr+0x200/0x2b0 [ 566.588203][T17159] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 566.588262][T17159] ? __pfx_fs_bdev_sync+0x10/0x10 [ 566.588290][T17159] ? get_nr_dirty_inodes+0x115/0x190 [ 566.588334][T17159] ? __pfx_fs_bdev_sync+0x10/0x10 [ 566.588363][T17159] sync_filesystem+0xbb/0x290 [ 566.588397][T17159] ? __pfx_fs_bdev_sync+0x10/0x10 [ 566.588423][T17159] fs_bdev_sync+0x2c/0x40 [ 566.588450][T17159] blkdev_common_ioctl+0xf76/0x2ba0 [ 566.588487][T17159] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 566.588533][T17159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.588576][T17159] ? do_vfs_ioctl+0x226/0x13e0 [ 566.588622][T17159] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 566.588677][T17159] ? find_held_lock+0x2b/0x80 [ 566.588704][T17159] ? hook_file_ioctl_common+0x146/0x410 [ 566.588752][T17159] blkdev_ioctl+0x43b/0x6f0 [ 566.588786][T17159] ? __pfx_blkdev_ioctl+0x10/0x10 [ 566.588826][T17159] ? __pfx_blkdev_ioctl+0x10/0x10 [ 566.588862][T17159] __x64_sys_ioctl+0x18e/0x210 [ 566.588910][T17159] do_syscall_64+0xc9/0xf80 [ 566.588950][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.588981][T17159] RIP: 0033:0x7f203059aeb9 [ 566.589006][T17159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.589036][T17159] RSP: 002b:00007f2031371028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.589065][T17159] RAX: ffffffffffffffda RBX: 00007f2030816090 RCX: 00007f203059aeb9 [ 566.589086][T17159] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000003 [ 566.589104][T17159] RBP: 00007f2030608c1f R08: 0000000000000000 R09: 0000000000000000 [ 566.589121][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.589137][T17159] R13: 00007f2030816128 R14: 00007f2030816090 R15: 00007ffd0265d6b8 [ 566.589177][T17159] [ 566.602914][T17162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3941'. [ 566.711934][T17166] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3941'. [ 567.474459][T17176] FAULT_INJECTION: forcing a failure. [ 567.474459][T17176] name failslab, interval 1, probability 393216, space 0, times 0 [ 567.489852][T17176] CPU: 1 UID: 0 PID: 17176 Comm: syz.2.3943 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.489900][T17176] Tainted: [L]=SOFTLOCKUP [ 567.489911][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 567.489927][T17176] Call Trace: [ 567.489937][T17176] [ 567.489948][T17176] dump_stack_lvl+0x100/0x190 [ 567.489990][T17176] should_fail_ex.cold+0x5/0xa [ 567.490040][T17176] should_failslab+0xc2/0x120 [ 567.490077][T17176] kmem_cache_alloc_noprof+0x83/0x780 [ 567.490114][T17176] ? kasan_save_stack+0x30/0x50 [ 567.490149][T17176] ? kvm_vm_ioctl+0x390/0x4020 [ 567.490208][T17176] ? kvm_vm_ioctl+0x390/0x4020 [ 567.490246][T17176] kvm_vm_ioctl+0x390/0x4020 [ 567.490296][T17176] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 567.490355][T17176] ? kasan_quarantine_put+0x104/0x240 [ 567.490387][T17176] ? lockdep_hardirqs_on+0x78/0x100 [ 567.490424][T17176] ? find_held_lock+0x2b/0x80 [ 567.490452][T17176] ? tomoyo_path_number_perm+0x28f/0x580 [ 567.490499][T17176] ? tomoyo_path_number_perm+0x28f/0x580 [ 567.490547][T17176] ? tomoyo_path_number_perm+0x188/0x580 [ 567.490591][T17176] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 567.490631][T17176] ? futex_wait+0x125/0x380 [ 567.490669][T17176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 567.490702][T17176] ? do_vfs_ioctl+0x226/0x13e0 [ 567.490743][T17176] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 567.490800][T17176] ? find_held_lock+0x2b/0x80 [ 567.490823][T17176] ? hook_file_ioctl_common+0x146/0x410 [ 567.490871][T17176] ? __fget_files+0x21f/0x3d0 [ 567.490907][T17176] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 567.490944][T17176] __x64_sys_ioctl+0x18e/0x210 [ 567.490993][T17176] do_syscall_64+0xc9/0xf80 [ 567.491032][T17176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.491062][T17176] RIP: 0033:0x7f402479aeb9 [ 567.491086][T17176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.491113][T17176] RSP: 002b:00007f40255fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.491143][T17176] RAX: ffffffffffffffda RBX: 00007f4024a15fa0 RCX: 00007f402479aeb9 [ 567.491164][T17176] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 567.491183][T17176] RBP: 00007f4024808c1f R08: 0000000000000000 R09: 0000000000000000 [ 567.491200][T17176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.491217][T17176] R13: 00007f4024a16038 R14: 00007f4024a15fa0 R15: 00007ffd9471fd28 [ 567.491255][T17176] [ 567.539312][T17177] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3951'. [ 568.062848][T17195] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3952'. [ 568.091996][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.099403][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.196811][T17190] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3950'. [ 568.214057][T17202] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3956'. [ 568.495029][T17213] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3959'. [ 568.504565][T17213] unsupported nla_type 65535 [ 568.674496][T17218] netlink: 'syz.4.3961': attribute type 4 has an invalid length. [ 568.695618][T17218] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3961'. [ 568.735572][T17218] IPv6: Can't replace route, no match found [ 568.823764][T17226] bridge0: port 3(veth0_to_bridge) entered blocking state [ 568.834134][T17226] bridge0: port 3(veth0_to_bridge) entered disabled state [ 568.841508][T17226] veth0_to_bridge: entered allmulticast mode [ 568.867308][T17226] veth0_to_bridge: entered promiscuous mode [ 568.873414][T17226] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.902093][T17226] bridge0: port 3(veth0_to_bridge) entered blocking state [ 568.909371][T17226] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 569.373583][T17234] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3967'. [ 570.302380][T17252] : renamed from  (while UP) [ 570.334555][T17254] zswap: compressor not available [ 571.341080][T17277] FAULT_INJECTION: forcing a failure. [ 571.341080][T17277] name failslab, interval 1, probability 393216, space 0, times 0 [ 571.358985][T17277] CPU: 0 UID: 0 PID: 17277 Comm: syz.0.3980 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.359035][T17277] Tainted: [L]=SOFTLOCKUP [ 571.359047][T17277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 571.359067][T17277] Call Trace: [ 571.359077][T17277] [ 571.359090][T17277] dump_stack_lvl+0x100/0x190 [ 571.359133][T17277] should_fail_ex.cold+0x5/0xa [ 571.359181][T17277] should_failslab+0xc2/0x120 [ 571.359222][T17277] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 571.359260][T17277] ? __d_lookup+0x25c/0x4a0 [ 571.359288][T17277] ? __d_alloc+0x34/0xa80 [ 571.359328][T17277] ? __d_alloc+0x34/0xa80 [ 571.359362][T17277] __d_alloc+0x34/0xa80 [ 571.359402][T17277] d_alloc+0x4a/0x1e0 [ 571.359440][T17277] lookup_one_qstr_excl+0x175/0x250 [ 571.359487][T17277] start_dirop+0x59/0xb0 [ 571.359519][T17277] simple_start_creating+0xf9/0x110 [ 571.359551][T17277] ? __pfx_simple_start_creating+0x10/0x10 [ 571.359584][T17277] ? mntput+0x70/0xa0 [ 571.359613][T17277] ? simple_pin_fs+0xa3/0x190 [ 571.359641][T17277] debugfs_start_creating.part.0+0x82/0x170 [ 571.359680][T17277] __debugfs_create_file+0xb3/0x4f0 [ 571.359721][T17277] debugfs_create_file_full+0x41/0x60 [ 571.359762][T17277] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 571.359809][T17277] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 571.359888][T17277] ? lockdep_init_map_type+0x5c/0x250 [ 571.359947][T17277] preinit_net.part.0+0x24e/0x8f0 [ 571.359996][T17277] copy_net_ns+0x339/0x7c0 [ 571.360030][T17277] create_new_namespaces+0x3ea/0xab0 [ 571.360072][T17277] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 571.360109][T17277] ksys_unshare+0x455/0xab0 [ 571.360153][T17277] ? __pfx_ksys_unshare+0x10/0x10 [ 571.360193][T17277] ? xfd_validate_state+0x129/0x190 [ 571.360250][T17277] __x64_sys_unshare+0x31/0x40 [ 571.360290][T17277] do_syscall_64+0xc9/0xf80 [ 571.360329][T17277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.360359][T17277] RIP: 0033:0x7f203059aeb9 [ 571.360384][T17277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.360412][T17277] RSP: 002b:00007f2031371028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 571.360442][T17277] RAX: ffffffffffffffda RBX: 00007f2030816090 RCX: 00007f203059aeb9 [ 571.360462][T17277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 571.360480][T17277] RBP: 00007f2030608c1f R08: 0000000000000000 R09: 0000000000000000 [ 571.360498][T17277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.360516][T17277] R13: 00007f2030816128 R14: 00007f2030816090 R15: 00007ffd0265d6b8 [ 571.360556][T17277] [ 571.989995][T17267] kexec: Could not allocate control_code_buffer [ 572.599322][T17301] zswap: compressor not available [ 572.936305][T17312] netlink: 'syz.2.3990': attribute type 33 has an invalid length. [ 573.189063][T17324] FAULT_INJECTION: forcing a failure. [ 573.189063][T17324] name failslab, interval 1, probability 393216, space 0, times 0 [ 573.238389][T17324] CPU: 1 UID: 0 PID: 17324 Comm: syz.2.3993 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.238435][T17324] Tainted: [L]=SOFTLOCKUP [ 573.238447][T17324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 573.238466][T17324] Call Trace: [ 573.238476][T17324] [ 573.238487][T17324] dump_stack_lvl+0x100/0x190 [ 573.238529][T17324] should_fail_ex.cold+0x5/0xa [ 573.238578][T17324] should_failslab+0xc2/0x120 [ 573.238617][T17324] kmem_cache_alloc_noprof+0x83/0x780 [ 573.238655][T17324] ? mt_find+0x687/0x8e0 [ 573.238690][T17324] ? vm_area_dup+0x27/0x8e0 [ 573.238725][T17324] ? vm_area_dup+0x27/0x8e0 [ 573.238753][T17324] vm_area_dup+0x27/0x8e0 [ 573.238787][T17324] __split_vma+0x18c/0xe30 [ 573.238824][T17324] ? __pfx___split_vma+0x10/0x10 [ 573.238865][T17324] ? find_vma+0xbf/0x140 [ 573.238912][T17324] vma_modify+0x1127/0x2330 [ 573.238965][T17324] ? __pfx_vma_modify+0x10/0x10 [ 573.239008][T17324] vma_modify_policy+0x238/0x300 [ 573.239045][T17324] ? __pfx_vma_modify_policy+0x10/0x10 [ 573.239103][T17324] ? mas_walk+0x6ef/0x9b0 [ 573.239140][T17324] mbind_range+0x175/0x550 [ 573.239172][T17324] do_mbind+0x7de/0xfd0 [ 573.239206][T17324] ? __might_fault+0xc5/0x140 [ 573.239239][T17324] ? __pfx_do_mbind+0x10/0x10 [ 573.239274][T17324] ? _copy_from_user+0x59/0xd0 [ 573.239328][T17324] ? __pfx_get_nodes+0x10/0x10 [ 573.239374][T17324] kernel_mbind+0x1b7/0x200 [ 573.239405][T17324] ? __pfx_kernel_mbind+0x10/0x10 [ 573.239448][T17324] do_syscall_64+0xc9/0xf80 [ 573.239488][T17324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.239518][T17324] RIP: 0033:0x7f402479aeb9 [ 573.239541][T17324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.239570][T17324] RSP: 002b:00007f40255fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 573.239598][T17324] RAX: ffffffffffffffda RBX: 00007f4024a15fa0 RCX: 00007f402479aeb9 [ 573.239619][T17324] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 573.239637][T17324] RBP: 00007f4024808c1f R08: 0000000000000003 R09: 0000000000000003 [ 573.239655][T17324] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 573.239673][T17324] R13: 00007f4024a16038 R14: 00007f4024a15fa0 R15: 00007ffd9471fd28 [ 573.239711][T17324] [ 574.908988][T17361] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4008'. [ 576.528593][T17382] syz.2.4014 (17382): /proc/17382/oom_adj is deprecated, please use /proc/17382/oom_score_adj instead. [ 579.690900][ C0] sched: DL replenish lagged too much [ 588.021524][T17406] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4022'. [ 588.202841][T17411] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4023'. [ 588.236890][T17413] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4024'. [ 588.380772][T17407] netlink: set zone limit has 8 unknown bytes [ 588.497473][T13670] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 588.566462][T14753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 588.723513][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 588.746048][T17423] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4029'. [ 588.849803][T17421] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4028'. [ 589.062714][T13670] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 592.423128][T14750] Bluetooth: hci4: Opcode 0x1005 failed: -110 [ 592.440170][T13670] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 592.515463][T13687] Bluetooth: hci3: command 0x0406 tx timeout [ 592.531016][T17400] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 594.977313][T13670] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 595.322740][T13670] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 595.497943][T13670] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 595.578414][T13670] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 595.650325][T13670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 603.948399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.961006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 603.974654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.987272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 604.000933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.013537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 604.027097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.039690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 604.053295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.065864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 605.452534][T14750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 605.581574][T14750] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 608.955789][ C0] net_ratelimit: 8784 callbacks suppressed [ 608.955805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.974105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 608.988080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.000614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 609.014063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.026319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 609.039179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.051397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 609.064317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.076550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 609.380259][T13670] Bluetooth: hci6: Opcode 0x1001 failed: -110 [ 609.444016][T14750] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 609.489845][T14750] Bluetooth: hci4: command tx timeout [ 609.601144][T13687] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 611.394898][T13687] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 611.941298][T17440] Bluetooth: hci4: command tx timeout [ 611.946754][T17440] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 611.980649][T14750] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 612.316807][T17467] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 612.364911][T17467] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 613.457929][T17457] Bluetooth: hci6: Opcode 0x1001 failed: -110 [ 613.968776][ C0] net_ratelimit: 8414 callbacks suppressed [ 613.968794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.987075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 614.000522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.012774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 614.025653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.037873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 614.050800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.063366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 614.076371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.088588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 615.430120][T13687] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 615.436734][T13670] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 615.512875][T14750] Bluetooth: hci4: command tx timeout [ 617.407287][T13670] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 617.717834][T17467] Bluetooth: hci4: command tx timeout [ 617.940106][T17462] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 618.980869][ C0] net_ratelimit: 8972 callbacks suppressed [ 618.980886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.999153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 619.012614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.024863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 619.037754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.049973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 619.062906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.075156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 619.088140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.100374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 619.407037][T13687] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 620.002675][T13687] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 622.022130][T17465] Bluetooth: hci8: Opcode 0x1001 failed: -110 [ 623.993389][ C0] net_ratelimit: 11738 callbacks suppressed [ 623.993407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.011803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.024303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.036829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 624.050323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.062865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.075347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.087848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 624.101314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.113570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.005775][ C0] net_ratelimit: 11943 callbacks suppressed [ 629.005791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.024148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.036676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 629.049766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.062004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.074402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.086622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 629.099565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.111779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.124180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.552464][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.559196][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.018574][ C0] net_ratelimit: 12929 callbacks suppressed [ 634.018590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.037036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.049546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.062010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.074223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 634.087254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.099488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.111893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.124075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.136537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 639.030780][ C0] net_ratelimit: 13519 callbacks suppressed [ 639.030797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 639.050105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.062636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.075140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.087603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.100122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 639.113575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.126102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.138576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.151077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.043240][ C0] net_ratelimit: 15082 callbacks suppressed [ 644.043257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.061540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 644.075014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.087554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.100045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.112508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.124841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.137262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.149699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 644.163361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.055772][ C0] net_ratelimit: 15179 callbacks suppressed [ 649.055789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.074201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.086734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 649.100310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.112886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.125482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.137995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.150393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.162870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.175394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 654.068364][ C0] net_ratelimit: 15141 callbacks suppressed [ 654.068382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.086767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.099279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.111821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.124208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.136657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.149177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 654.162736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.175353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.187902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.080598][ C0] net_ratelimit: 15701 callbacks suppressed [ 659.080622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 659.099986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.112556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.125092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.137669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 659.150086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.162481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.174932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.187428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 659.200980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.093303][ C0] net_ratelimit: 15802 callbacks suppressed [ 664.093320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 664.111527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.123907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.136104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.148473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 664.161285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.173813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.186069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.198488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 664.210691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.471090][T17467] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 665.488446][T17468] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 665.541797][T17468] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 665.568418][T17467] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 665.743707][T17468] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 665.803499][T17468] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 665.905900][T17468] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 666.350996][T17467] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 666.431607][T17468] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 669.105979][ C0] net_ratelimit: 14315 callbacks suppressed [ 669.105996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.124398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.136895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.149440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 669.161657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.173928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.186086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.198478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 669.211276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.223676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.173266][T13687] Bluetooth: hci9: Opcode 0x0c38 failed: -110 [ 671.230741][T14750] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 671.327815][T17467] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 671.402915][T17476] Bluetooth: hci9: Opcode 0x0c03 failed: -4 [ 673.487898][T17480] Bluetooth: hci10: Opcode 0x0c1a failed: -110 [ 674.118291][ C0] net_ratelimit: 14211 callbacks suppressed [ 674.118308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.136639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.148924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 674.161848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.174116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.186550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.198843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 674.211209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.223369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.235713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.253030][T17440] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 674.303793][T17467] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 674.356190][T17467] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 674.488912][T17467] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 674.576376][T17467] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 674.602757][T17467] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 676.609432][T17483] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 676.814295][T14753] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 679.130717][ C0] net_ratelimit: 14111 callbacks suppressed [ 679.130734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.149048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 679.161914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.174291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.186536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.198967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 679.211267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.223572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.235742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.248155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 680.211239][T17488] Bluetooth: hci12: Opcode 0x0c1a failed: -110 [ 684.143223][ C0] net_ratelimit: 15669 callbacks suppressed [ 684.143241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.161495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.173979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 684.187441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.200025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.212535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.225117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 684.237389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.249662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.261823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.155915][ C0] net_ratelimit: 15257 callbacks suppressed [ 689.155932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.174358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.186923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.199573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 689.211835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.224544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.238398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.250818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 689.263660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.276116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.418663][T17468] Bluetooth: hci12: command tx timeout [ 691.021313][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.027696][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.168263][ C0] net_ratelimit: 14459 callbacks suppressed [ 694.168281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.186688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.199029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 694.211992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.224266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.236732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.249038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 694.261386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.273582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.285913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.180691][ C0] net_ratelimit: 14168 callbacks suppressed [ 699.180716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 699.200109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.212682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.224963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.237330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 699.249528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.261827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.274000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.286422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 699.299221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.193376][ C0] net_ratelimit: 14473 callbacks suppressed [ 704.193395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.211819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 704.224230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.236413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.248702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.260949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 704.273970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.286210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.298625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.310906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 709.205748][ C0] net_ratelimit: 14167 callbacks suppressed [ 709.205766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 709.224055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.236331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.248659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.260938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 709.274064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.286361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.298825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.311190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 709.323632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 714.218288][ C0] net_ratelimit: 15691 callbacks suppressed [ 714.218306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.236788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.249388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 714.261985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 714.274381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 714.286751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.299263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.311738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 714.325260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.337823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.230960][ C0] net_ratelimit: 14711 callbacks suppressed [ 719.230978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.249394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 719.262031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 719.274536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 719.286975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.299480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.311976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 719.325502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.338071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.350584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 724.243341][ C0] net_ratelimit: 15642 callbacks suppressed [ 724.243359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.261613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.274079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 724.287570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.300124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.312621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 724.325181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 724.337592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 724.349970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.362428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.255947][ C0] net_ratelimit: 15524 callbacks suppressed [ 729.255964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 729.274236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 729.286618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.299046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.311529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 729.324393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.336772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.349061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 729.361484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 729.373682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.456404][T17467] Bluetooth: hci4: command 0x0406 tx timeout [ 734.268704][ C0] net_ratelimit: 15467 callbacks suppressed [ 734.268722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.287123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.299637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 734.312193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:6f:04:04:45:1f, vlan:0) [ 734.324439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 734.336775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.348956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.361372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:70:2d:66:8e:c3, vlan:0) [ 734.374208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.386623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.198857][ T31] INFO: task syz.4.3987:17304 blocked for more than 143 seconds. [ 735.206633][ T31] Tainted: G L syzkaller #0 [ 735.218668][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.227367][ T31] task:syz.4.3987 state:D stack:24184 pid:17304 tgid:17300 ppid:14747 task_flags:0x400140 flags:0x00080002 [ 735.258732][ T31] Call Trace: [ 735.262058][ T31] [ 735.265003][ T31] ? __schedule+0xf65/0x5e10 [ 735.274790][ T31] __schedule+0xfe4/0x5e10 [ 735.279578][ T31] ? __lock_acquire+0x4a5/0x2630 [ 735.284574][ T31] ? __pfx___schedule+0x10/0x10 [ 735.289833][ T31] ? find_held_lock+0x2b/0x80 [ 735.294550][ T31] ? schedule+0x2bf/0x390 [ 735.299324][ T31] schedule+0xdd/0x390 [ 735.303424][ T31] schedule_preempt_disabled+0x13/0x30 [ 735.309283][ T31] __mutex_lock+0xc9a/0x1b90 [ 735.313908][ T31] ? netdev_run_todo+0xcd5/0x12c0 [ 735.319376][ T31] ? netdev_run_todo+0x8f8/0x12c0 [ 735.324447][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 735.329882][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 735.335551][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 735.342024][ T31] ? rcu_barrier+0x330/0x6d0 [ 735.346655][ T31] ? netdev_run_todo+0xcd5/0x12c0 [ 735.352138][ T31] ? rtnl_lock+0x9/0x20 [ 735.356325][ T31] netdev_run_todo+0xcd5/0x12c0 [ 735.361647][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 735.366980][ T31] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 735.374172][ T31] ? bond_net_exit_rtnl+0xff/0x3a0 [ 735.379622][ T31] ? mutex_is_locked+0x17/0x60 [ 735.384429][ T31] ops_undo_list+0x904/0xab0 [ 735.389449][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 735.394606][ T31] ? ops_init+0x2f0/0x5f0 [ 735.399408][ T31] ? ops_init+0x2fa/0x5f0 [ 735.403781][ T31] setup_net+0x1fa/0x3a0 [ 735.408050][ T31] ? __pfx_setup_net+0x10/0x10 [ 735.413376][ T31] ? lockdep_init_map_type+0x5c/0x250 [ 735.419067][ T31] ? mutex_init_lockep+0x110/0x150 [ 735.424218][ T31] copy_net_ns+0x46f/0x7c0 [ 735.428657][ T31] create_new_namespaces+0x3ea/0xab0 [ 735.434423][ T31] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 735.440404][ T31] ksys_unshare+0x455/0xab0 [ 735.444946][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 735.450418][ T31] ? xfd_validate_state+0x129/0x190 [ 735.455669][ T31] __x64_sys_unshare+0x31/0x40 [ 735.460910][ T31] do_syscall_64+0xc9/0xf80 [ 735.465455][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.476550][ T31] RIP: 0033:0x7f62e559aeb9 [ 735.481312][ T31] RSP: 002b:00007f62e6380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 735.490023][ T31] RAX: ffffffffffffffda RBX: 00007f62e5816090 RCX: 00007f62e559aeb9 [ 735.498015][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 735.506464][ T31] RBP: 00007f62e5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 735.514730][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.523055][ T31] R13: 00007f62e5816128 R14: 00007f62e5816090 R15: 00007ffff98a5138 [ 735.531380][ T31] [ 735.534459][ T31] [ 735.534459][ T31] Showing all locks held in the system: [ 735.542771][ T31] 1 lock held by pool_workqueue_/3: [ 735.547986][ T31] #0: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 735.558567][ T31] 4 locks held by kworker/0:1/10: [ 735.563913][ T31] #0: ffff88813fe16948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 735.576129][ T31] #1: ffffc900000f7c98 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 735.586969][ T31] #2: ffffffff903f5828 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x10e0 [ 735.597000][ T31] #3: ffff888079c40788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x12c/0x10e0 [ 735.607681][ T31] 1 lock held by khungtaskd/31: [ 735.612863][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 735.623108][ T31] 4 locks held by kworker/R-bat_e/3411: [ 735.628675][ T31] 4 locks held by syz-executor/5812: [ 735.634362][ T31] #0: ffff88802acfba88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x5a0 [ 735.643952][ T31] #1: ffff888031268518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 735.653783][ T31] #2: ffff88807e17c8e0 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x36c/0x1980 [ 735.664963][ T31] #3: ffff88807e17c5d0 (&ei->i_data_sem){++++}-{4:4}, at: ext4_da_get_block_prep+0x738/0x1240 [ 735.675652][ T31] 2 locks held by kworker/u10:0/13669: [ 735.681421][ T31] #0: ffff88813fe29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 735.692897][ T31] #1: ffffc9000b9a7c98 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 735.708918][ T31] 3 locks held by kworker/u10:1/13674: [ 735.714405][ T31] 3 locks held by kworker/u10:2/13676: [ 735.720833][ T31] 3 locks held by kworker/u10:3/13685: [ 735.726308][ T31] 3 locks held by kworker/u10:4/13705: [ 735.732193][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 735.742973][ T31] #1: ffffc9000b1e7c98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 735.753295][ T31] #2: ffffffff903dcef0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 735.762969][ T31] 2 locks held by kworker/u10:5/14252: [ 735.768447][ T31] #0: ffff88813fe29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 735.780127][ T31] #1: ffffc9000489fc98 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 735.791967][ T31] 3 locks held by kworker/0:4/14749: [ 735.797269][ T31] 3 locks held by kworker/u10:6/14812: [ 735.803177][ T31] 2 locks held by syz.4.3987/17304: [ 735.808395][ T31] #0: ffffffff903dcef0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 735.818261][ T31] #1: ffffffff903f5828 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xcd5/0x12c0 [ 735.827965][ T31] 4 locks held by kworker/u10:7/17395: [ 735.833689][ T31] #0: ffff8880340f9148 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 735.845633][ T31] #1: ffffc90002fa7c98 ((work_completion)(&ei->i_rsv_conversion_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 735.858448][ T31] #2: ffff88803126c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 735.868383][ T31] #3: ffff88807e17c5d0 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x469/0x13c0 [ 735.878446][ T31] 3 locks held by kworker/u10:8/17396: [ 735.884219][ T31] 3 locks held by kworker/u10:9/17398: [ 735.889943][ T31] 8 locks held by kworker/u10:10/17431: [ 735.895503][ T31] 3 locks held by kworker/u10:11/17441: [ 735.901460][ T31] #0: ffff88814d907148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 735.912865][ T31] #1: ffffc90003dafc98 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 735.926275][ T31] #2: ffffffff903f5828 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 735.936065][ T31] 4 locks held by kworker/u10:12/17442: [ 735.941901][ T31] 2 locks held by syz.1.4034/17444: [ 735.947109][ T31] #0: ffff88802c1926f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 735.959069][ T31] #1: ffffffff903f5828 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 735.968008][ T31] 1 lock held by syz.1.4034/17446: [ 735.978687][ T31] #0: ffffffff903f5828 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x6fd/0x1070 [ 735.987871][ T31] 1 lock held by syz.1.4034/17447: [ 735.993251][ T31] #0: ffffffff903f5828 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x6fd/0x1070 [ 736.002451][ T31] 4 locks held by kworker/u10:13/17451: [ 736.008009][ T31] 1 lock held by syz-executor/17453: [ 736.013677][ T31] #0: ffffffff903f5828 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 736.023432][ T31] 6 locks held by kworker/u11:6/17468: [ 736.028905][ T31] #0: ffff888079a01948 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 736.039889][ T31] #1: ffffc90019aa7c98 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 736.052162][ T31] #2: ffff888077434ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 736.062368][ T31] #3: ffff8880774340c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 736.072327][ T31] #4: ffffffff9068e8e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x119/0x360 [ 736.082403][ T31] #5: ffff8880782b3b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 736.092028][ T31] 2 locks held by kworker/u10:14/17491: [ 736.097584][ T31] #0: ffff88813fe29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 736.109241][ T31] #1: ffffc900043ffc98 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 736.121120][ T31] 2 locks held by kworker/u10:15/17492: [ 736.126679][ T31] #0: ffff88813fe29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 736.138117][ T31] #1: ffffc9000417fc98 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 736.150075][ T31] 4 locks held by kworker/u10:16/17497: [ 736.155634][ T31] 1 lock held by modprobe/17498: [ 736.160984][ T31] 2 locks held by modprobe/17499: [ 736.166022][ T31] 4 locks held by kworker/u10:17/17500: [ 736.171983][ T31] 2 locks held by dhcpcd/17501: [ 736.176844][ T31] #0: ffff888025fde260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 736.191674][ T31] #1: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 736.202005][ T31] 1 lock held by dhcpcd/17502: [ 736.206777][ T31] #0: ffff888025fdc260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 736.216901][ T31] 1 lock held by dhcpcd/17503: [ 736.221913][ T31] #0: ffff888025c08260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 736.231904][ T31] 1 lock held by dhcpcd/17504: [ 736.236676][ T31] #0: ffff888025bfc260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 736.246767][ T31] 2 locks held by kworker/u10:18/17506: [ 736.252627][ T31] 1 lock held by kworker/u10:19/17507: [ 736.258098][ T31] [ 736.260739][ T31] ============================================= [ 736.260739][ T31] [ 736.269552][ T31] NMI backtrace for cpu 1 [ 736.269574][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 736.269613][ T31] Tainted: [L]=SOFTLOCKUP [ 736.269623][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 736.269640][ T31] Call Trace: [ 736.269649][ T31] [ 736.269660][ T31] dump_stack_lvl+0x100/0x190 [ 736.269697][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 736.269744][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 736.269788][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 736.269834][ T31] sys_info+0x141/0x190 [ 736.269869][ T31] watchdog+0xcc3/0xfe0 [ 736.269908][ T31] ? __pfx_watchdog+0x10/0x10 [ 736.269939][ T31] ? __kthread_parkme+0x18c/0x230 [ 736.269972][ T31] ? __pfx_watchdog+0x10/0x10 [ 736.270002][ T31] ? __pfx_watchdog+0x10/0x10 [ 736.270029][ T31] kthread+0x3b3/0x730 [ 736.270069][ T31] ? __pfx_kthread+0x10/0x10 [ 736.270104][ T31] ? ret_from_fork+0x79/0xaf0 [ 736.270130][ T31] ? ret_from_fork+0x79/0xaf0 [ 736.270157][ T31] ? rcu_is_watching+0x12/0xc0 [ 736.270185][ T31] ? __pfx_kthread+0x10/0x10 [ 736.270224][ T31] ret_from_fork+0x754/0xaf0 [ 736.270252][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 736.270282][ T31] ? __switch_to+0x7b9/0x10c0 [ 736.270315][ T31] ? __pfx_kthread+0x10/0x10 [ 736.270355][ T31] ret_from_fork_asm+0x1a/0x30 [ 736.270410][ T31] [ 736.270420][ T31] Sending NMI from CPU 1 to CPUs 0: [ 736.414714][ C0] NMI backtrace for cpu 0 [ 736.414737][ C0] CPU: 0 UID: 0 PID: 3411 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 736.414772][ C0] Tainted: [L]=SOFTLOCKUP [ 736.414781][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 736.414802][ C0] Workqueue: bat_events batadv_tt_purge [ 736.414844][ C0] RIP: 0010:lock_is_held_type+0x51/0x140 [ 736.414876][ C0] Code: 57 41 56 41 55 41 54 55 53 48 83 ec 08 65 48 8b 2d 7c c9 6f 08 8b 95 2c 0b 00 00 85 d2 0f 85 a7 00 00 00 48 89 fb 41 89 f4 9c <41> 5d fa 48 c7 c7 c9 21 d3 8d e8 90 16 00 00 65 ff 05 81 10 70 08 [ 736.414900][ C0] RSP: 0000:ffffc90000006880 EFLAGS: 00000246 [ 736.414918][ C0] RAX: 00000000ffffffff RBX: ffffffff8e5e3120 RCX: 0000000000000001 [ 736.414934][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e5e3120 [ 736.414954][ C0] RBP: ffff8880315a9e80 R08: 0000000000000001 R09: 0000000000000000 [ 736.414970][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 736.414985][ C0] R13: ffff88805cc160df R14: ffff888078020000 R15: dffffc0000000000 [ 736.415002][ C0] FS: 0000000000000000(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000 [ 736.415032][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.415048][ C0] CR2: 00007f37ed4f5e9c CR3: 0000000065ffa000 CR4: 00000000003526f0 [ 736.415065][ C0] Call Trace: [ 736.415072][ C0] [ 736.415085][ C0] __find_rr_leaf+0x66f/0x1070 [ 736.415114][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 736.415138][ C0] ? fib6_node_lookup+0x13b/0x190 [ 736.415174][ C0] ? veth_xmit+0x69e/0xe30 [ 736.415205][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 736.415249][ C0] fib6_table_lookup+0x50f/0xa10 [ 736.415283][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 736.415310][ C0] ? __netif_receive_skb+0x1f/0x120 [ 736.415341][ C0] ? process_backlog+0x37a/0x1580 [ 736.415375][ C0] ip6_pol_route+0x1cc/0x1230 [ 736.415402][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 736.415428][ C0] ? __pfx_ip6_multipath_l3_keys.constprop.0+0x10/0x10 [ 736.415471][ C0] ? lock_acquire+0x17c/0x330 [ 736.415506][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 736.415532][ C0] fib6_rule_action+0x762/0x910 [ 736.415571][ C0] ? __pfx_fib6_rule_action+0x10/0x10 [ 736.415609][ C0] fib_rules_lookup+0x418/0x1080 [ 736.415650][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 736.415692][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 736.415718][ C0] fib6_rule_lookup+0x18b/0x720 [ 736.415742][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 736.415764][ C0] ? find_held_lock+0x2b/0x80 [ 736.415791][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 736.415821][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.415849][ C0] ip6_route_input+0x662/0xc50 [ 736.415878][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 736.415905][ C0] ? find_held_lock+0x2b/0x80 [ 736.415933][ C0] ? br_forward_finish+0x10a/0x4d0 [ 736.415968][ C0] ? __lock_acquire+0x4a5/0x2630 [ 736.415999][ C0] ? __netif_receive_skb_core.constprop.0+0xd65/0x3460 [ 736.416040][ C0] ip6_rcv_finish_core.isra.0+0x1a9/0x5a0 [ 736.416071][ C0] ip6_rcv_finish+0x130/0x550 [ 736.416098][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 736.416127][ C0] ip_sabotage_in+0x21e/0x290 [ 736.416160][ C0] nf_hook_slow+0xbf/0x220 [ 736.416196][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 736.416223][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 736.416252][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 736.416282][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 736.416310][ C0] ? ip6_rcv_core+0xbaf/0x1c50 [ 736.416339][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 736.416365][ C0] ipv6_rcv+0xa4/0x610 [ 736.416391][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 736.416417][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 736.416449][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 736.416482][ C0] ? lock_acquire+0x17c/0x330 [ 736.416517][ C0] __netif_receive_skb+0x1f/0x120 [ 736.416548][ C0] netif_receive_skb+0x139/0x760 [ 736.416577][ C0] ? br_multicast_count+0x8d/0xbc0 [ 736.416610][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 736.416644][ C0] ? br_netif_receive_skb+0xff/0x1f0 [ 736.416677][ C0] br_pass_frame_up+0x346/0x490 [ 736.416711][ C0] br_handle_frame_finish+0x84f/0x1f00 [ 736.416748][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 736.416784][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 736.416817][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 736.416843][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 736.416867][ C0] ? nf_hook_slow+0x167/0x220 [ 736.416902][ C0] br_nf_hook_thresh+0x30d/0x420 [ 736.416935][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 736.416971][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 736.417007][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 736.417045][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 736.417074][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.417098][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.417126][ C0] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 736.417161][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 736.417199][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 736.417235][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 736.417275][ C0] ? lock_acquire+0x17c/0x330 [ 736.417307][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 736.417343][ C0] ? net_generic+0xea/0x2a0 [ 736.417377][ C0] br_nf_pre_routing+0x93b/0x1510 [ 736.417414][ C0] br_handle_frame+0xcdd/0x1520 [ 736.417449][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 736.417484][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 736.417521][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 736.417554][ C0] __netif_receive_skb_core.constprop.0+0x6d7/0x3460 [ 736.417593][ C0] ? kmem_cache_free+0x143/0x720 [ 736.417619][ C0] ? find_held_lock+0x2b/0x80 [ 736.417641][ C0] ? ipv6_chk_mcast_addr+0x2b0/0x9a0 [ 736.417677][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 736.417711][ C0] ? kfree_skbmem+0x19a/0x210 [ 736.417737][ C0] ? kfree_skbmem+0x19f/0x210 [ 736.417764][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 736.417803][ C0] ? ip6_mc_input+0x51a/0xf50 [ 736.417831][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 736.417863][ C0] ? __lock_acquire+0x4a5/0x2630 [ 736.417897][ C0] ? process_backlog+0x32a/0x1580 [ 736.417930][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 736.417963][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 736.417997][ C0] ? lock_acquire+0x17c/0x330 [ 736.418033][ C0] ? process_backlog+0x32a/0x1580 [ 736.418064][ C0] ? process_backlog+0x32a/0x1580 [ 736.418093][ C0] __netif_receive_skb+0x1f/0x120 [ 736.418125][ C0] process_backlog+0x37a/0x1580 [ 736.418160][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 736.418193][ C0] net_rx_action+0xa40/0xf20 [ 736.418229][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 736.418261][ C0] ? mark_held_locks+0x40/0x70 [ 736.418292][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 736.418321][ C0] ? tmigr_handle_remote+0x132/0x380 [ 736.418351][ C0] ? run_timer_base+0x121/0x190 [ 736.418381][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 736.418413][ C0] handle_softirqs+0x1ea/0x910 [ 736.418444][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 736.418475][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 736.418513][ C0] do_softirq+0xac/0xe0 [ 736.418540][ C0] [ 736.418548][ C0] [ 736.418556][ C0] __local_bh_enable_ip+0xf8/0x120 [ 736.418585][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 736.418626][ C0] ? do_raw_spin_lock+0x128/0x260 [ 736.418663][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 736.418704][ C0] batadv_tt_purge+0x8b/0xbd0 [ 736.418740][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 736.418780][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 736.418822][ C0] ? process_one_work+0x80b/0x1840 [ 736.418858][ C0] ? rcu_is_watching+0x12/0xc0 [ 736.418885][ C0] process_one_work+0x9c2/0x1840 [ 736.418928][ C0] ? __pfx_process_one_work+0x10/0x10 [ 736.418969][ C0] ? assign_work+0x19c/0x250 [ 736.419004][ C0] rescuer_thread+0x8f1/0xf40 [ 736.419049][ C0] ? rescuer_thread+0x118/0xf40 [ 736.419085][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 736.419123][ C0] ? __kthread_parkme+0x18c/0x230 [ 736.419153][ C0] ? kthread+0x17d/0x730 [ 736.419185][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 736.419223][ C0] kthread+0x3b3/0x730 [ 736.419257][ C0] ? __pfx_kthread+0x10/0x10 [ 736.419289][ C0] ? ret_from_fork+0x79/0xaf0 [ 736.419311][ C0] ? ret_from_fork+0x79/0xaf0 [ 736.419333][ C0] ? rcu_is_watching+0x12/0xc0 [ 736.419356][ C0] ? __pfx_kthread+0x10/0x10 [ 736.419390][ C0] ret_from_fork+0x754/0xaf0 [ 736.419413][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 736.419437][ C0] ? __switch_to+0x7b9/0x10c0 [ 736.419467][ C0] ? __pfx_kthread+0x10/0x10 [ 736.419501][ C0] ret_from_fork_asm+0x1a/0x30 [ 736.419546][ C0] [ 736.440850][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 736.440876][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 736.440915][ T31] Tainted: [L]=SOFTLOCKUP [ 736.440926][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 736.440943][ T31] Call Trace: [ 736.440953][ T31] [ 736.440965][ T31] dump_stack_lvl+0x100/0x190 [ 736.441003][ T31] vpanic+0x20d/0x630 [ 736.441031][ T31] panic+0xd1/0xd1 [ 736.441056][ T31] ? __pfx_panic+0x10/0x10 [ 736.441086][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 736.441129][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 736.441170][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 736.441211][ T31] ? watchdog.cold+0x198/0x1ca [ 736.441240][ T31] ? watchdog+0xcd3/0xfe0 [ 736.441271][ T31] watchdog.cold+0x1a9/0x1ca [ 736.441311][ T31] ? __pfx_watchdog+0x10/0x10 [ 736.441340][ T31] ? __kthread_parkme+0x18c/0x230 [ 736.441374][ T31] ? __pfx_watchdog+0x10/0x10 [ 736.441405][ T31] ? __pfx_watchdog+0x10/0x10 [ 736.441432][ T31] kthread+0x3b3/0x730 [ 736.441471][ T31] ? __pfx_kthread+0x10/0x10 [ 736.441507][ T31] ? ret_from_fork+0x79/0xaf0 [ 736.441532][ T31] ? ret_from_fork+0x79/0xaf0 [ 736.441559][ T31] ? rcu_is_watching+0x12/0xc0 [ 736.441586][ T31] ? __pfx_kthread+0x10/0x10 [ 736.441625][ T31] ret_from_fork+0x754/0xaf0 [ 736.441654][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 736.441684][ T31] ? __switch_to+0x7b9/0x10c0 [ 736.441725][ T31] ? __pfx_kthread+0x10/0x10 [ 736.441764][ T31] ret_from_fork_asm+0x1a/0x30 [ 736.441820][ T31] [ 737.423577][ T31] Kernel Offset: disabled [ 737.427888][ T31] Rebooting in 86400 seconds..