last executing test programs: 7m54.998139547s ago: executing program 2 (id=1870): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 7m54.802104516s ago: executing program 2 (id=1874): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) ioctl$auto_IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x3, 0x9}) 7m54.493625943s ago: executing program 2 (id=1881): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x80a82, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={@inferred, 0x6, 0x5d, 0x8, "93b7c005b8f4bfe6366766a732df7209f9fc4eb6fce44c8ddd6e266b7e0ec3f58783bdb6116d56f5da88a719"}) 7m54.282801468s ago: executing program 2 (id=1885): r0 = set_tid_address$auto(0x0) waitid$auto_P_PID(0x1, r0, 0x0, 0x7, 0x0) 7m54.08831979s ago: executing program 2 (id=1889): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) 7m53.536043113s ago: executing program 2 (id=1897): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/gss_krb5_enctypes\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r0, 0x0, 0x0) 7m53.132104979s ago: executing program 32 (id=1897): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/gss_krb5_enctypes\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r0, 0x0, 0x0) 2.712248273s ago: executing program 0 (id=10074): setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) r0 = setfsuid$auto(0xee01) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, r0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) 2.358929168s ago: executing program 0 (id=10079): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = gettid() kcmp$auto_KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x9) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 1.632132941s ago: executing program 3 (id=10086): socket(0xa, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 1.605878317s ago: executing program 0 (id=10087): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0xf) r1 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r1, 0x98}, 0x5) 1.500325723s ago: executing program 3 (id=10089): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) semctl$auto(0x80001ff, 0x804, 0x3, 0x4) getsockopt$auto(r0, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) 1.370614575s ago: executing program 3 (id=10091): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) 1.254664784s ago: executing program 0 (id=10093): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000034, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 1.221748242s ago: executing program 3 (id=10095): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7ffc, 0x0) nanosleep$auto(0x0, &(0x7f0000000240)={0x10001, 0x140000000}) close_range$auto(0x2, 0x8, 0x0) 1.107908269s ago: executing program 4 (id=10096): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) 985.269998ms ago: executing program 0 (id=10097): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7, 0x21, 0x4909b6f5, 0x1, 0x7, 0x3, 0x9, 0x6, 0x3, 0x4, 0x2, 0xb4, 0x9, 0x208, 0x10003, 0x80, 0x3, 0x80, 0xa, 0x22000, 0x200, 0x7, 0x84, 0x0, 0x9, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f, 0x0, 0x2, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}, 0x3, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x4}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 977.149909ms ago: executing program 1 (id=10098): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(r0, &(0x7f0000000040)=@generic={0x10, "26300628afe90504fc2bbe91f2eb"}, 0x6a) r1 = socket(0x2, 0x801, 0x106) listen$auto(r1, 0xf52b) 975.011687ms ago: executing program 4 (id=10099): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000180)="fe3eef5c013a7dcbca7b56a9cf898fe5ce", 0x8) 876.688194ms ago: executing program 4 (id=10100): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x2, 0x0) 720.934784ms ago: executing program 0 (id=10101): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x1000, 0x100000000, 0x18) madvise$auto(0x0, 0x200007, 0x19) 720.58841ms ago: executing program 1 (id=10102): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x300000000000000, 0x200204, 0x15) 468.378316ms ago: executing program 4 (id=10103): sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 397.791711ms ago: executing program 1 (id=10104): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) 278.038144ms ago: executing program 1 (id=10105): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0x3, 0x5411, 0x38) 233.445328ms ago: executing program 3 (id=10106): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2512e233da08000300", @ANYRES32=r2], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) 230.259306ms ago: executing program 4 (id=10107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x28, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x10000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0xc000) 132.641744ms ago: executing program 1 (id=10108): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) bpf$auto(0x2, 0x0, 0x103) 97.531886ms ago: executing program 4 (id=10109): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) dup$auto(r0) 88.725798ms ago: executing program 3 (id=10110): mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@raw_tracepoint={0x5, r0, 0x0, 0x8000000000000001}, 0x9) io_uring_register$auto(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0) 0s ago: executing program 1 (id=10111): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x7, 0x0, 0x8000200008011, r1, 0x10008000) kernel console output (not intermixed with test programs): 539.603068][T24276] ? __kasan_slab_alloc+0x89/0x90 [ 539.603087][T24276] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 539.603104][T24276] ? do_getname+0x35/0x390 [ 539.603122][T24276] ? __x64_sys_openat+0x12d/0x210 [ 539.603148][T24276] ? __pfx_path_openat+0x10/0x10 [ 539.603168][T24276] do_file_open+0x20e/0x430 [ 539.603185][T24276] ? __pfx_do_file_open+0x10/0x10 [ 539.603214][T24276] ? alloc_fd+0x471/0x7a0 [ 539.603242][T24276] ? do_getname+0x191/0x390 [ 539.603268][T24276] do_sys_openat2+0x10f/0x1e0 [ 539.603288][T24276] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.603310][T24276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 539.603338][T24276] __x64_sys_openat+0x12d/0x210 [ 539.603358][T24276] ? __pfx___x64_sys_openat+0x10/0x10 [ 539.603386][T24276] do_syscall_64+0x115/0x840 [ 539.603405][T24276] ? clear_bhb_loop+0x70/0xc0 [ 539.603423][T24276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.603437][T24276] RIP: 0033:0x7fb973f9e0d9 [ 539.603450][T24276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.603465][T24276] RSP: 002b:00007fb974f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.603482][T24276] RAX: ffffffffffffffda RBX: 00007fb974225fa0 RCX: 00007fb973f9e0d9 [ 539.603492][T24276] RDX: 0000000000000081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 539.603501][T24276] RBP: 00007fb974035024 R08: 0000000000000000 R09: 0000000000000000 [ 539.603511][T24276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.603520][T24276] R13: 00007fb974226038 R14: 00007fb974225fa0 R15: 00007ffd1168ce38 [ 539.603539][T24276] [ 540.174086][T24281] netlink: set zone limit has 4 unknown bytes [ 541.024353][T24293] FAULT_INJECTION: forcing a failure. [ 541.024353][T24293] name failslab, interval 1, probability 0, space 0, times 0 [ 541.214414][T24293] CPU: 0 UID: 0 PID: 24293 Comm: syz.0.8669 Tainted: G U L syzkaller #0 PREEMPT(full) [ 541.214442][T24293] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 541.214449][T24293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.214458][T24293] Call Trace: [ 541.214463][T24293] [ 541.214469][T24293] dump_stack_lvl+0x100/0x190 [ 541.214493][T24293] should_fail_ex.cold+0x5/0xa [ 541.214511][T24293] should_failslab+0xc2/0x120 [ 541.214533][T24293] kmem_cache_alloc_noprof+0x91/0x6a0 [ 541.214551][T24293] ? __pud_alloc+0x4f6/0x690 [ 541.214572][T24293] ? __pmd_alloc+0xbf/0x950 [ 541.214596][T24293] __pmd_alloc+0xbf/0x950 [ 541.214616][T24293] ? __pud_alloc+0x4fb/0x690 [ 541.214644][T24293] walk_to_pmd+0x3a3/0x4c0 [ 541.214667][T24293] get_locked_pte+0x25/0xc0 [ 541.214691][T24293] map_ldt_struct+0x3c1/0xa70 [ 541.214717][T24293] ? __pfx_map_ldt_struct+0x10/0x10 [ 541.214738][T24293] ? alloc_pages_noprof+0xf9/0x160 [ 541.214755][T24293] write_ldt+0x6d3/0xd40 [ 541.214778][T24293] ? __pfx_write_ldt+0x10/0x10 [ 541.214800][T24293] ? xfd_validate_state+0x129/0x190 [ 541.214822][T24293] __x64_sys_modify_ldt+0xb1/0x170 [ 541.214843][T24293] do_syscall_64+0x115/0x840 [ 541.214863][T24293] ? clear_bhb_loop+0x70/0xc0 [ 541.214881][T24293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.214896][T24293] RIP: 0033:0x7fa799f9e0d9 [ 541.214908][T24293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.214922][T24293] RSP: 002b:00007fa79aede028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 541.214936][T24293] RAX: ffffffffffffffda RBX: 00007fa79a225fa0 RCX: 00007fa799f9e0d9 [ 541.214946][T24293] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 541.214954][T24293] RBP: 00007fa79a035024 R08: 0000000000000000 R09: 0000000000000000 [ 541.214963][T24293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.214971][T24293] R13: 00007fa79a226038 R14: 00007fa79a225fa0 R15: 00007ffe4bb9b588 [ 541.214991][T24293] [ 541.766990][T24299] syz.1.8678(24299): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 542.224661][T24277] syz.4.8668 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 542.300593][T24307] FAULT_INJECTION: forcing a failure. [ 542.300593][T24307] name failslab, interval 1, probability 0, space 0, times 0 [ 542.344861][T24277] CPU: 0 UID: 0 PID: 24277 Comm: syz.4.8668 Tainted: G U L syzkaller #0 PREEMPT(full) [ 542.344889][T24277] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 542.344894][T24277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.344903][T24277] Call Trace: [ 542.344908][T24277] [ 542.344913][T24277] dump_stack_lvl+0x100/0x190 [ 542.344935][T24277] dump_header+0xfb/0x606 [ 542.344952][T24277] oom_kill_process.cold+0xd/0x330 [ 542.344975][T24277] out_of_memory+0x340/0x14f0 [ 542.344994][T24277] ? __pfx_out_of_memory+0x10/0x10 [ 542.345013][T24277] mem_cgroup_out_of_memory+0xc6/0x130 [ 542.345030][T24277] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 542.345045][T24277] ? find_held_lock+0x2b/0x80 [ 542.345066][T24277] ? do_raw_spin_unlock+0x145/0x1e0 [ 542.345083][T24277] ? _raw_spin_unlock+0x28/0x50 [ 542.345103][T24277] try_charge_memcg+0x6e5/0xdf0 [ 542.345127][T24277] ? __pfx_try_charge_memcg+0x10/0x10 [ 542.345147][T24277] ? find_held_lock+0x2b/0x80 [ 542.345163][T24277] ? rcu_read_unlock+0x17/0x60 [ 542.345183][T24277] ? rcu_read_unlock+0x17/0x60 [ 542.345204][T24277] ? find_held_lock+0x2b/0x80 [ 542.345222][T24277] ? rcu_read_unlock+0x17/0x60 [ 542.345246][T24277] charge_memcg+0x187/0x1e0 [ 542.345268][T24277] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 542.345285][T24277] swap_cache_alloc_folio+0x548/0xc50 [ 542.345306][T24277] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 542.345323][T24277] ? swap_cache_get_folio+0x28d/0x360 [ 542.345339][T24277] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 542.345354][T24277] ? lockdep_hardirqs_on+0x78/0x100 [ 542.345373][T24277] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 542.345393][T24277] swap_cache_read_folio+0x47/0x140 [ 542.345412][T24277] swap_cluster_readahead+0x387/0x5f0 [ 542.345432][T24277] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 542.345458][T24277] ? __lock_acquire+0x49f/0x1a40 [ 542.345471][T24277] ? get_vma_policy+0x23d/0x3b0 [ 542.345493][T24277] swapin_readahead+0x159/0x1200 [ 542.345516][T24277] ? __pfx_swapin_readahead+0x10/0x10 [ 542.345536][T24277] ? swap_table_get+0x10d/0x2c0 [ 542.345551][T24277] ? swap_cache_get_folio+0x28d/0x360 [ 542.345567][T24277] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 542.345583][T24277] ? __pfx_softleaf_type+0x10/0x10 [ 542.345602][T24277] ? do_swap_page+0xf98/0x5780 [ 542.345615][T24277] do_swap_page+0xf98/0x5780 [ 542.345639][T24277] ? __pfx_do_swap_page+0x10/0x10 [ 542.345653][T24277] ? __lock_acquire+0x49f/0x1a40 [ 542.345669][T24277] ? rcu_is_watching+0x12/0xc0 [ 542.345686][T24277] ? __pte_offset_map+0x179/0x310 [ 542.345707][T24277] __handle_mm_fault+0x192f/0x2a00 [ 542.345726][T24277] ? reacquire_held_locks+0xce/0x1e0 [ 542.345739][T24277] ? __pfx___handle_mm_fault+0x10/0x10 [ 542.345757][T24277] ? lock_vma_under_rcu+0x17c/0x590 [ 542.345783][T24277] handle_mm_fault+0x37b/0xa30 [ 542.345801][T24277] do_user_addr_fault+0x5a3/0x12f0 [ 542.345827][T24277] exc_page_fault+0x6f/0xd0 [ 542.345846][T24277] asm_exc_page_fault+0x26/0x30 [ 542.345860][T24277] RIP: 0033:0x7fda5a559214 [ 542.345873][T24277] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ae a4 29 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 [ 542.345886][T24277] RSP: 002b:00007ffc27852670 EFLAGS: 00010246 [ 542.345898][T24277] RAX: 0000000000000000 RBX: 00005555944a4500 RCX: 0000000000000000 [ 542.345907][T24277] RDX: 00007ffc278526b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.345915][T24277] RBP: 00007fda5a827da0 R08: 0000000000000000 R09: 0000000000000000 [ 542.345923][T24277] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000084c37 [ 542.345931][T24277] R13: 00007fda5a825fac R14: 0000000000084b2c R15: 00007ffc278527e0 [ 542.345950][T24277] [ 542.345955][T24277] memory: usage 3072kB, limit 3072kB, failcnt 40187 [ 542.738472][T24307] CPU: 0 UID: 0 PID: 24307 Comm: syz.3.8677 Tainted: G U L syzkaller #0 PREEMPT(full) [ 542.738500][T24307] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 542.738506][T24307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.738516][T24307] Call Trace: [ 542.738521][T24307] [ 542.738527][T24307] dump_stack_lvl+0x100/0x190 [ 542.738550][T24307] should_fail_ex.cold+0x5/0xa [ 542.738568][T24307] should_failslab+0xc2/0x120 [ 542.738589][T24307] __kmalloc_cache_noprof+0x91/0x6c0 [ 542.738607][T24307] ? call_usermodehelper_setup+0xaf/0x360 [ 542.738633][T24307] ? __pfx_free_modprobe_argv+0x10/0x10 [ 542.738650][T24307] call_usermodehelper_setup+0xaf/0x360 [ 542.738676][T24307] __request_module+0x3c7/0x6a0 [ 542.738693][T24307] ? __pfx___request_module+0x10/0x10 [ 542.738717][T24307] ? find_held_lock+0x2b/0x80 [ 542.738735][T24307] ? inet6_create+0xb9f/0x12b0 [ 542.738757][T24307] inet6_create+0xd65/0x12b0 [ 542.738775][T24307] ? inet6_create+0x7f/0x12b0 [ 542.738794][T24307] __sock_create+0x339/0x860 [ 542.738816][T24307] __sys_socket+0x14d/0x260 [ 542.738833][T24307] ? __pfx___sys_socket+0x10/0x10 [ 542.738854][T24307] __x64_sys_socket+0x72/0xb0 [ 542.738870][T24307] ? lockdep_hardirqs_on+0x78/0x100 [ 542.738890][T24307] do_syscall_64+0x115/0x840 [ 542.738909][T24307] ? clear_bhb_loop+0x70/0xc0 [ 542.738927][T24307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.738942][T24307] RIP: 0033:0x7f379e19e0d9 [ 542.738955][T24307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.738970][T24307] RSP: 002b:00007f379ef9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 542.738984][T24307] RAX: ffffffffffffffda RBX: 00007f379e425fa0 RCX: 00007f379e19e0d9 [ 542.738994][T24307] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 542.739002][T24307] RBP: 00007f379e235024 R08: 0000000000000000 R09: 0000000000000000 [ 542.739011][T24307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.739019][T24307] R13: 00007f379e426038 R14: 00007f379e425fa0 R15: 00007ffebd7ebca8 [ 542.739040][T24307] [ 543.971850][T24330] netlink: Invalid conntrack helper [ 544.246188][T24277] memory+swap: usage 6704kB, limit 9007199254740988kB, failcnt 0 [ 544.258209][T12244] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 544.306478][T24277] kmem: usage 2096kB, limit 9007199254740988kB, failcnt 0 [ 544.336484][T24277] Memory cgroup stats for /syz4: [ 544.336588][T24277] cache 0 [ 544.380403][T24277] rss 12288 [ 544.394058][T24277] rss_huge 0 [ 544.408730][T24277] shmem 0 [ 544.423220][T24277] mapped_file 0 [ 544.441291][T24277] dirty 0 [ 544.456850][T24277] writeback 0 [ 544.473018][T24277] workingset_refault_anon 6197 [ 544.497729][T24277] workingset_refault_file 0 [ 544.521076][T24277] swap 4456448 [ 544.539613][T24277] swapcached 179265536 [ 544.548226][T10734] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 544.564008][T10734] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 544.573566][T10734] CPU: 0 UID: 0 PID: 10734 Comm: kworker/u11:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 544.573593][T10734] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 544.573598][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.573608][T10734] Workqueue: hci0 hci_rx_work [ 544.573722][T10734] Call Trace: [ 544.573728][T10734] [ 544.573733][T10734] dump_stack_lvl+0x100/0x190 [ 544.573756][T10734] sysfs_warn_dup.cold+0x1c/0x28 [ 544.573794][T10734] sysfs_create_dir_ns+0x24b/0x2b0 [ 544.573821][T10734] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 544.573842][T10734] ? find_held_lock+0x2b/0x80 [ 544.573861][T10734] ? kobject_add_internal+0x25f/0x930 [ 544.573877][T10734] ? kobject_add_internal+0x25f/0x930 [ 544.573894][T10734] ? do_raw_spin_unlock+0x145/0x1e0 [ 544.573913][T10734] kobject_add_internal+0x2c8/0x930 [ 544.573941][T10734] kobject_add+0x16a/0x1e0 [ 544.573957][T10734] ? __pfx_kobject_add+0x10/0x10 [ 544.573973][T10734] ? class_to_subsys+0x10f/0x150 [ 544.573993][T10734] ? kobject_put+0xb9/0x640 [ 544.574007][T10734] ? _raw_spin_unlock+0x28/0x50 [ 544.574029][T10734] device_add+0x294/0x1970 [ 544.574045][T10734] ? __pfx_dev_set_name+0x10/0x10 [ 544.574087][T10734] ? __pfx_device_add+0x10/0x10 [ 544.574102][T10734] ? mgmt_send_event_skb+0x2fb/0x460 [ 544.574157][T10734] hci_conn_add_sysfs+0x1a3/0x260 [ 544.574224][T10734] le_conn_complete_evt+0x11eb/0x1f60 [ 544.574311][T10734] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 544.574330][T10734] ? __pfx_bt_warn+0x10/0x10 [ 544.574349][T10734] ? hci_event_packet+0x186/0xcd0 [ 544.574373][T10734] hci_le_conn_complete_evt+0x23c/0x3a0 [ 544.574393][T10734] ? skb_pull_data+0x15f/0x1e0 [ 544.574412][T10734] hci_le_meta_evt+0x34a/0x5f0 [ 544.574453][T10734] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 544.574476][T10734] hci_event_packet+0x51c/0xcd0 [ 544.574497][T10734] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 544.574518][T10734] ? __pfx_hci_event_packet+0x10/0x10 [ 544.574541][T10734] ? kcov_remote_start+0x384/0x670 [ 544.574562][T10734] ? lockdep_hardirqs_on+0x78/0x100 [ 544.574587][T10734] hci_rx_work+0x451/0xfc0 [ 544.574609][T10734] process_one_work+0xa23/0x1940 [ 544.574639][T10734] ? __pfx_process_one_work+0x10/0x10 [ 544.574666][T10734] ? __pfx_hci_rx_work+0x10/0x10 [ 544.574686][T10734] worker_thread+0x5ef/0xe50 [ 544.574714][T10734] ? kthread+0x13a/0x450 [ 544.574732][T10734] ? __pfx_worker_thread+0x10/0x10 [ 544.574753][T10734] kthread+0x370/0x450 [ 544.574774][T10734] ? __pfx_kthread+0x10/0x10 [ 544.574794][T10734] ret_from_fork+0x72b/0xd50 [ 544.574814][T10734] ? __pfx_ret_from_fork+0x10/0x10 [ 544.574833][T10734] ? __switch_to+0x800/0x10f0 [ 544.574847][T10734] ? __switch_to_asm+0x39/0x70 [ 544.574866][T10734] ? __pfx_kthread+0x10/0x10 [ 544.574887][T10734] ret_from_fork_asm+0x1a/0x30 [ 544.574916][T10734] [ 544.575606][T10734] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 544.882817][T24277] pgpgin 135604 [ 544.887866][T10734] Bluetooth: hci0: failed to register connection device [ 544.911682][T24277] pgpgout 135610 [ 544.925490][T24277] pgfault 430338 [ 544.935807][T24277] pgmajfault 2586 [ 544.953360][T24277] inactive_anon 40960 [ 544.964849][T24277] active_anon 0 [ 544.976259][T24277] inactive_file 0 [ 544.986035][T24277] active_file 0 [ 544.996761][T24277] unevictable 0 [ 545.012565][T24277] hierarchical_memory_limit 3145728 [ 545.031179][T24277] hierarchical_memsw_limit 9223372036854771712 [ 545.053362][T24277] total_cache 0 [ 545.063554][T24277] total_rss 12288 [ 545.076339][T24277] total_rss_huge 0 [ 545.094752][T24277] total_shmem 0 [ 545.106834][T24277] total_mapped_file 0 [ 545.119918][T24277] total_dirty 0 [ 545.132206][T24277] total_writeback 0 [ 545.145163][T24277] total_workingset_refault_anon 6197 [ 545.164869][T24277] total_workingset_refault_file 0 [ 545.182631][T24277] total_swap 4456448 [ 545.196992][T24277] total_swapcached 179265536 [ 545.215010][T24277] total_pgpgin 135604 [ 545.229016][T24277] total_pgpgout 135610 [ 545.244354][T24277] total_pgfault 430338 [ 545.261306][T24277] total_pgmajfault 2586 [ 545.276766][T24277] total_inactive_anon 40960 [ 545.290096][T24277] total_active_anon 0 [ 545.311729][T24277] total_inactive_file 0 [ 545.328445][T24277] total_active_file 0 [ 545.349887][T24277] total_unevictable 0 [ 545.372427][T24277] anon_cost 0 [ 545.382777][T24277] file_cost 0 [ 545.393699][T24277] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8668,pid=24277,uid=0 [ 545.457255][T24277] Memory cgroup out of memory: Killed process 24277 (syz.4.8668) total-vm:108532kB, anon-rss:1256kB, file-rss:20976kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 545.774497][T24334] syz.0.8693 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 545.822897][T24334] CPU: 0 UID: 0 PID: 24334 Comm: syz.0.8693 Tainted: G U L syzkaller #0 PREEMPT(full) [ 545.822922][T24334] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 545.822928][T24334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.822936][T24334] Call Trace: [ 545.822942][T24334] [ 545.822947][T24334] dump_stack_lvl+0x100/0x190 [ 545.822969][T24334] dump_header+0xfb/0x606 [ 545.822986][T24334] oom_kill_process.cold+0xd/0x330 [ 545.823003][T24334] out_of_memory+0x340/0x14f0 [ 545.823022][T24334] ? __pfx_out_of_memory+0x10/0x10 [ 545.823045][T24334] mem_cgroup_out_of_memory+0xc6/0x130 [ 545.823063][T24334] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 545.823078][T24334] ? find_held_lock+0x2b/0x80 [ 545.823099][T24334] ? do_raw_spin_unlock+0x145/0x1e0 [ 545.823120][T24334] ? _raw_spin_unlock+0x28/0x50 [ 545.823139][T24334] try_charge_memcg+0x6e5/0xdf0 [ 545.823163][T24334] ? __pfx_try_charge_memcg+0x10/0x10 [ 545.823182][T24334] ? find_held_lock+0x2b/0x80 [ 545.823199][T24334] ? rcu_read_unlock+0x17/0x60 [ 545.823219][T24334] ? rcu_read_unlock+0x17/0x60 [ 545.823240][T24334] ? find_held_lock+0x2b/0x80 [ 545.823257][T24334] ? rcu_read_unlock+0x17/0x60 [ 545.823281][T24334] charge_memcg+0x187/0x1e0 [ 545.823303][T24334] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 545.823320][T24334] swap_cache_alloc_folio+0x548/0xc50 [ 545.823341][T24334] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 545.823357][T24334] ? swap_cache_get_folio+0x28d/0x360 [ 545.823374][T24334] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 545.823388][T24334] ? lockdep_hardirqs_on+0x78/0x100 [ 545.823407][T24334] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 545.823427][T24334] swap_cache_read_folio+0x47/0x140 [ 545.823446][T24334] swap_cluster_readahead+0x387/0x5f0 [ 545.823467][T24334] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 545.823492][T24334] ? __lock_acquire+0x49f/0x1a40 [ 545.823505][T24334] ? get_vma_policy+0x23d/0x3b0 [ 545.823528][T24334] swapin_readahead+0x159/0x1200 [ 545.823550][T24334] ? __pfx_swapin_readahead+0x10/0x10 [ 545.823571][T24334] ? swap_table_get+0x10d/0x2c0 [ 545.823586][T24334] ? swap_cache_get_folio+0x28d/0x360 [ 545.823602][T24334] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 545.823618][T24334] ? __pfx_softleaf_type+0x10/0x10 [ 545.823637][T24334] ? do_swap_page+0xf98/0x5780 [ 545.823649][T24334] do_swap_page+0xf98/0x5780 [ 545.823678][T24334] ? __pfx_do_swap_page+0x10/0x10 [ 545.823692][T24334] ? __lock_acquire+0x49f/0x1a40 [ 545.823708][T24334] ? rcu_is_watching+0x12/0xc0 [ 545.823725][T24334] ? __pte_offset_map+0x179/0x310 [ 545.823746][T24334] __handle_mm_fault+0x192f/0x2a00 [ 545.823765][T24334] ? reacquire_held_locks+0xce/0x1e0 [ 545.823778][T24334] ? __pfx___handle_mm_fault+0x10/0x10 [ 545.823796][T24334] ? lock_vma_under_rcu+0x17c/0x590 [ 545.823821][T24334] handle_mm_fault+0x37b/0xa30 [ 545.823840][T24334] do_user_addr_fault+0x5a3/0x12f0 [ 545.823868][T24334] exc_page_fault+0x6f/0xd0 [ 545.823887][T24334] asm_exc_page_fault+0x26/0x30 [ 545.823901][T24334] RIP: 0033:0x7fa799e517cd [ 545.823914][T24334] Code: 44 8d 56 04 4c 8d 0d 52 08 3c 00 89 f0 4c 8d 05 49 e8 3b 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 <45> 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 [ 545.823927][T24334] RSP: 002b:00007ffe4bb9b608 EFLAGS: 00010286 [ 545.823939][T24334] RAX: 000000008aab022e RBX: ffffffff8aab022e RCX: ffffffff89df222e [ 545.823948][T24334] RDX: 000000000000022e RSI: ffffffff8aab022e RDI: 00000000000000ff [ 545.823957][T24334] RBP: 0000000000000003 R08: 00007fa79a210000 R09: 00007fa79a212000 [ 545.823965][T24334] R10: 000000008aab0232 R11: 00000000000000ff R12: 00007fa79a225f40 [ 545.823973][T24334] R13: 0000000000000003 R14: ffffffff8aab02c4 R15: 00007fa79ad55720 [ 545.823983][T24334] ? hci_rx_work+0x64/0xfc0 [ 545.824001][T24334] ? hci_send_frame+0x4ee/0x510 [ 545.824019][T24334] ? nf_log_dump_sk_uid_gid+0xae/0x220 [ 545.824113][T24334] ? hci_send_frame+0x4ee/0x510 [ 545.824133][T24334] [ 545.829783][T24334] memory: usage 3072kB, limit 3072kB, failcnt 94340 [ 546.409138][T10734] Bluetooth: hci0: command 0x0406 tx timeout [ 546.997421][T24334] memory+swap: usage 53228kB, limit 9007199254740988kB, failcnt 0 [ 547.021455][T24334] kmem: usage 2876kB, limit 9007199254740988kB, failcnt 0 [ 547.049966][T24334] Memory cgroup stats for /syz0: [ 547.050084][T24334] cache 192512 [ 547.072838][T24334] rss 4096 [ 547.085839][T24334] rss_huge 0 [ 547.095028][T24334] shmem 0 [ 547.190320][T24334] mapped_file 0 [ 547.223758][T24334] dirty 0 [ 547.258390][T24334] writeback 4096 [ 547.292724][T24334] workingset_refault_anon 7859 [ 547.386649][T24334] workingset_refault_file 31378 [ 547.441063][T24334] swap 51359744 [ 547.473818][T24334] swapcached 331620352 [ 547.520679][T24334] pgpgin 241839 [ 547.536657][T24334] pgpgout 241876 [ 547.550357][T24334] pgfault 437460 [ 547.561853][T24334] pgmajfault 2940 [ 547.575214][T24334] inactive_anon 0 [ 547.588129][T24334] active_anon 0 [ 547.599986][T24334] inactive_file 159744 [ 547.626538][T24334] active_file 32768 [ 547.634588][T24334] unevictable 0 [ 547.646123][T24334] hierarchical_memory_limit 3145728 [ 547.668287][T24334] hierarchical_memsw_limit 9223372036854771712 [ 547.687162][T24334] total_cache 192512 [ 547.704482][T24334] total_rss 4096 [ 547.712875][T24334] total_rss_huge 0 [ 547.723153][T24334] total_shmem 0 [ 547.736843][T24334] total_mapped_file 0 [ 547.753815][T24334] total_dirty 0 [ 547.763552][T24334] total_writeback 4096 [ 547.778558][T24334] total_workingset_refault_anon 7859 [ 547.797187][T24334] total_workingset_refault_file 31378 [ 547.815397][T24334] total_swap 51359744 [ 547.826873][T24334] total_swapcached 331620352 [ 547.846013][T24334] total_pgpgin 241839 [ 547.861837][T24418] netlink: 'syz.1.8730': attribute type 11 has an invalid length. [ 547.869667][T24334] total_pgpgout 241876 [ 547.878246][T24334] total_pgfault 437460 [ 547.902844][T24334] total_pgmajfault 2940 [ 547.908090][T24334] total_inactive_anon 0 [ 547.915774][T24418] netlink: 'syz.1.8730': attribute type 11 has an invalid length. [ 547.925755][T24334] total_active_anon 0 [ 547.933063][T24334] total_inactive_file 159744 [ 547.948437][T24334] total_active_file 32768 [ 547.963290][T24334] total_unevictable 0 [ 547.973745][T24418] netlink: 'syz.1.8730': attribute type 11 has an invalid length. [ 547.985440][T24334] anon_cost 0 [ 547.992649][T24334] file_cost 0 [ 548.001971][T24334] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8521,pid=23965,uid=0 [ 548.049883][T24334] Memory cgroup out of memory: Killed process 23965 (syz.0.8521) total-vm:108532kB, anon-rss:1252kB, file-rss:54752kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 548.429095][T10734] Bluetooth: hci0: command 0x0406 tx timeout [ 549.434624][T24462] openvswitch: netlink: IP tunnel dst address not specified [ 549.719858][T24477] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 549.885568][T24481] input: f¬ as /devices/virtual/input/input21 [ 550.213232][T24491] openvswitch: netlink: Key type 29 is not supported [ 550.498463][T10734] Bluetooth: hci0: command 0x0406 tx timeout [ 552.138890][T24584] openvswitch: netlink: Key type 29 is not supported [ 552.503498][T24593] netlink: 'syz.0.8811': attribute type 1 has an invalid length. [ 552.567321][T12244] Bluetooth: hci0: command 0x0406 tx timeout [ 552.575215][T24593] netlink: 33 bytes leftover after parsing attributes in process `syz.0.8811'. [ 552.640958][T12244] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 552.686084][T12244] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 552.693897][T12244] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 552.703270][T12244] CPU: 0 UID: 0 PID: 12244 Comm: kworker/u11:2 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.703296][T12244] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.703302][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.703312][T12244] Workqueue: hci3 hci_rx_work [ 552.703336][T12244] Call Trace: [ 552.703342][T12244] [ 552.703348][T12244] dump_stack_lvl+0x100/0x190 [ 552.703368][T12244] sysfs_warn_dup.cold+0x1c/0x28 [ 552.703391][T12244] sysfs_create_dir_ns+0x24b/0x2b0 [ 552.703415][T12244] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 552.703437][T12244] ? find_held_lock+0x2b/0x80 [ 552.703455][T12244] ? kobject_add_internal+0x25f/0x930 [ 552.703471][T12244] ? kobject_add_internal+0x25f/0x930 [ 552.703489][T12244] ? do_raw_spin_unlock+0x145/0x1e0 [ 552.703507][T12244] kobject_add_internal+0x2c8/0x930 [ 552.703526][T12244] kobject_add+0x16a/0x1e0 [ 552.703541][T12244] ? __pfx_kobject_add+0x10/0x10 [ 552.703555][T12244] ? class_to_subsys+0x10f/0x150 [ 552.703573][T12244] ? kobject_put+0xb9/0x640 [ 552.703586][T12244] ? _raw_spin_unlock+0x28/0x50 [ 552.703608][T12244] device_add+0x294/0x1970 [ 552.703623][T12244] ? __pfx_dev_set_name+0x10/0x10 [ 552.703640][T12244] ? __pfx_device_add+0x10/0x10 [ 552.703654][T12244] ? mgmt_send_event_skb+0x2fb/0x460 [ 552.703679][T12244] hci_conn_add_sysfs+0x1a3/0x260 [ 552.703702][T12244] le_conn_complete_evt+0x11eb/0x1f60 [ 552.703727][T12244] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 552.703745][T12244] ? __pfx_bt_warn+0x10/0x10 [ 552.703758][T12244] ? hci_event_packet+0x186/0xcd0 [ 552.703781][T12244] hci_le_conn_complete_evt+0x23c/0x3a0 [ 552.703801][T12244] ? skb_pull_data+0x15f/0x1e0 [ 552.703819][T12244] hci_le_meta_evt+0x34a/0x5f0 [ 552.703840][T12244] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 552.703863][T12244] hci_event_packet+0x51c/0xcd0 [ 552.703882][T12244] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 552.703904][T12244] ? __pfx_hci_event_packet+0x10/0x10 [ 552.703925][T12244] ? kcov_remote_start+0x384/0x670 [ 552.703946][T12244] ? lockdep_hardirqs_on+0x78/0x100 [ 552.703971][T12244] hci_rx_work+0x451/0xfc0 [ 552.703993][T12244] process_one_work+0xa23/0x1940 [ 552.704023][T12244] ? __pfx_process_one_work+0x10/0x10 [ 552.704058][T12244] ? __pfx_hci_rx_work+0x10/0x10 [ 552.704084][T12244] worker_thread+0x5ef/0xe50 [ 552.704111][T12244] ? __pfx_worker_thread+0x10/0x10 [ 552.704136][T12244] ? kthread+0x13a/0x450 [ 552.704155][T12244] ? __pfx_worker_thread+0x10/0x10 [ 552.704175][T12244] kthread+0x370/0x450 [ 552.704194][T12244] ? __pfx_kthread+0x10/0x10 [ 552.704215][T12244] ret_from_fork+0x72b/0xd50 [ 552.704235][T12244] ? __pfx_ret_from_fork+0x10/0x10 [ 552.704254][T12244] ? __switch_to+0x800/0x10f0 [ 552.704267][T12244] ? __switch_to_asm+0x39/0x70 [ 552.704286][T12244] ? __pfx_kthread+0x10/0x10 [ 552.704306][T12244] ret_from_fork_asm+0x1a/0x30 [ 552.704335][T12244] [ 552.704355][T12244] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 553.022470][T12244] Bluetooth: hci3: failed to register connection device [ 554.304234][T24635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8831'. [ 554.511529][T24638] netlink: 29 bytes leftover after parsing attributes in process `syz.1.8831'. [ 554.717740][T12244] Bluetooth: hci3: command 0x0406 tx timeout [ 554.819679][T24646] .^: entered promiscuous mode [ 556.661287][T24695] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 556.785546][T12244] Bluetooth: hci3: command 0x0406 tx timeout [ 558.363947][T24757] openvswitch: netlink: Flow key attr not present in new flow. [ 558.854627][T12244] Bluetooth: hci3: command 0x0406 tx timeout [ 560.688975][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.698132][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.924039][T10734] Bluetooth: hci3: command 0x0406 tx timeout [ 563.768617][T24972] kAFS: No cell specified [ 566.879047][T25059] bridge0: port 3(vlan1) entered blocking state [ 566.911503][T25059] bridge0: port 3(vlan1) entered disabled state [ 566.950791][T25059] vlan1: entered allmulticast mode [ 566.980175][T25059] veth0_vlan: entered allmulticast mode [ 567.015944][T25059] vlan1: entered promiscuous mode [ 567.049476][T25059] bridge0: port 3(vlan1) entered blocking state [ 567.056495][T25059] bridge0: port 3(vlan1) entered forwarding state [ 569.761832][T25155] random: crng reseeded on system resumption [ 571.228773][T25196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9090'. [ 572.668998][T25242] futex_wake_op: syz.4.9109 tries to shift op by -2048; fix this program [ 572.708694][T25242] futex_wake_op: syz.4.9109 tries to shift op by -2048; fix this program [ 572.930902][T24567] syz.0.8799 (24567) used greatest stack depth: 18568 bytes left [ 573.917481][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9126'. [ 573.976129][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9126'. [ 574.049170][T25283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9129'. [ 574.485618][T25285] NFSD: Failed to start, no listeners configured. [ 574.666377][T25303] overlayfs: missing 'lowerdir' [ 575.467604][T25322] FAULT_INJECTION: forcing a failure. [ 575.467604][T25322] name failslab, interval 1, probability 0, space 0, times 0 [ 575.582732][T25322] CPU: 0 UID: 0 PID: 25322 Comm: syz.0.9142 Tainted: G U L syzkaller #0 PREEMPT(full) [ 575.582761][T25322] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 575.582767][T25322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.582776][T25322] Call Trace: [ 575.582781][T25322] [ 575.582788][T25322] dump_stack_lvl+0x100/0x190 [ 575.582812][T25322] should_fail_ex.cold+0x5/0xa [ 575.582830][T25322] should_failslab+0xc2/0x120 [ 575.582853][T25322] __kmalloc_noprof+0xfc/0x820 [ 575.582871][T25322] ? security_inode_alloc+0x3b/0x2c0 [ 575.582958][T25322] ? sk_prot_alloc+0x10b/0x2a0 [ 575.582978][T25322] sk_prot_alloc+0x10b/0x2a0 [ 575.582995][T25322] sk_alloc+0x36/0xe80 [ 575.583016][T25322] packet_create+0x127/0x8e0 [ 575.583053][T25322] __sock_create+0x339/0x860 [ 575.583073][T25322] __sys_socket+0x14d/0x260 [ 575.583090][T25322] ? __pfx___sys_socket+0x10/0x10 [ 575.583112][T25322] __x64_sys_socket+0x72/0xb0 [ 575.583127][T25322] ? lockdep_hardirqs_on+0x78/0x100 [ 575.583148][T25322] do_syscall_64+0x115/0x840 [ 575.583167][T25322] ? clear_bhb_loop+0x70/0xc0 [ 575.583185][T25322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.583200][T25322] RIP: 0033:0x7fa799f9e0d9 [ 575.583214][T25322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.583229][T25322] RSP: 002b:00007fa79aede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 575.583243][T25322] RAX: ffffffffffffffda RBX: 00007fa79a225fa0 RCX: 00007fa799f9e0d9 [ 575.583253][T25322] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 575.583262][T25322] RBP: 00007fa79a035024 R08: 0000000000000000 R09: 0000000000000000 [ 575.583271][T25322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.583280][T25322] R13: 00007fa79a226038 R14: 00007fa79a225fa0 R15: 00007ffe4bb9b588 [ 575.583299][T25322] [ 576.508640][T25352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9160'. [ 577.729822][T25359] syz.4.9162 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 577.801295][T25359] CPU: 0 UID: 0 PID: 25359 Comm: syz.4.9162 Tainted: G U L syzkaller #0 PREEMPT(full) [ 577.801322][T25359] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 577.801328][T25359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.801336][T25359] Call Trace: [ 577.801342][T25359] [ 577.801347][T25359] dump_stack_lvl+0x100/0x190 [ 577.801372][T25359] dump_header+0xfb/0x606 [ 577.801389][T25359] oom_kill_process.cold+0xd/0x330 [ 577.801407][T25359] out_of_memory+0x340/0x14f0 [ 577.801426][T25359] ? __pfx_out_of_memory+0x10/0x10 [ 577.801445][T25359] mem_cgroup_out_of_memory+0xc6/0x130 [ 577.801463][T25359] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 577.801479][T25359] ? find_held_lock+0x2b/0x80 [ 577.801501][T25359] ? do_raw_spin_unlock+0x145/0x1e0 [ 577.801518][T25359] ? _raw_spin_unlock+0x28/0x50 [ 577.801538][T25359] try_charge_memcg+0x6e5/0xdf0 [ 577.801563][T25359] ? __pfx_try_charge_memcg+0x10/0x10 [ 577.801584][T25359] ? find_held_lock+0x2b/0x80 [ 577.801601][T25359] ? rcu_read_unlock+0x17/0x60 [ 577.801623][T25359] ? rcu_read_unlock+0x17/0x60 [ 577.801650][T25359] obj_cgroup_charge_pages+0x22/0x1d0 [ 577.801673][T25359] __memcg_kmem_charge_page+0x1c1/0x4d0 [ 577.801699][T25359] __alloc_frozen_pages_noprof+0x365/0x2dc0 [ 577.801724][T25359] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 577.801743][T25359] ? stack_depot_save_flags+0x479/0x9d0 [ 577.801771][T25359] ? kasan_save_stack+0x3f/0x50 [ 577.801789][T25359] ? kasan_save_stack+0x30/0x50 [ 577.801806][T25359] ? kasan_save_track+0x14/0x30 [ 577.801826][T25359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 577.801842][T25359] ? do_syscall_64+0x115/0x840 [ 577.801870][T25359] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 577.801890][T25359] ? __lock_acquire+0x49f/0x1a40 [ 577.801903][T25359] ? __css_rstat_updated+0x1ce/0x5a0 [ 577.801928][T25359] ? __pfx___css_rstat_updated+0x10/0x10 [ 577.801951][T25359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 577.801973][T25359] ? policy_nodemask+0xed/0x4f0 [ 577.801996][T25359] alloc_pages_mpol+0x1fb/0x540 [ 577.802018][T25359] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 577.802039][T25359] ? find_held_lock+0x2b/0x80 [ 577.802056][T25359] ? rcu_read_unlock+0x17/0x60 [ 577.802076][T25359] ? rcu_read_unlock+0x17/0x60 [ 577.802100][T25359] alloc_pages_noprof+0x1a/0x160 [ 577.802115][T25359] __vmalloc_node_range_noprof+0xaec/0x1630 [ 577.802144][T25359] ? bpf_check+0x20f2/0xb7d0 [ 577.802198][T25359] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 577.802219][T25359] ? trace_kmalloc+0xeb/0x110 [ 577.802238][T25359] ? __kasan_kmalloc+0xaa/0xb0 [ 577.802258][T25359] ? rcu_is_watching+0x12/0xc0 [ 577.802281][T25359] __kvmalloc_node_noprof+0x3d3/0x970 [ 577.802300][T25359] ? bpf_check+0x20f2/0xb7d0 [ 577.802319][T25359] ? security_capable+0x80/0x260 [ 577.802334][T25359] ? bpf_check+0x20f2/0xb7d0 [ 577.802357][T25359] bpf_check+0x20f2/0xb7d0 [ 577.802376][T25359] ? find_held_lock+0x2b/0x80 [ 577.802393][T25359] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 577.802413][T25359] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 577.802437][T25359] ? __pfx___up_read+0x10/0x10 [ 577.802452][T25359] ? do_user_addr_fault+0x7de/0x12f0 [ 577.802478][T25359] ? __lock_acquire+0x49f/0x1a40 [ 577.802493][T25359] ? __pfx_bpf_check+0x10/0x10 [ 577.802518][T25359] ? find_held_lock+0x2b/0x80 [ 577.802536][T25359] ? bpf_prog_load+0x1933/0x2fa0 [ 577.802554][T25359] ? __asan_memset+0x23/0x50 [ 577.802569][T25359] ? lsm_blob_alloc+0x2b/0x90 [ 577.802640][T25359] ? bpf_prog_load+0x244d/0x2fa0 [ 577.802654][T25359] bpf_prog_load+0x244d/0x2fa0 [ 577.802674][T25359] ? __pfx_bpf_prog_load+0x10/0x10 [ 577.802710][T25359] __sys_bpf+0x18dc/0x4e80 [ 577.802737][T25359] ? __pfx___sys_bpf+0x10/0x10 [ 577.802752][T25359] ? find_held_lock+0x2b/0x80 [ 577.802769][T25359] ? futex_wake+0x4ea/0x5e0 [ 577.802794][T25359] ? futex_wait+0x11e/0x370 [ 577.802813][T25359] ? __pfx_futex_wait+0x10/0x10 [ 577.802836][T25359] ? io_uring_setup+0xd7/0x160 [ 577.802890][T25359] ? __x64_sys_futex+0x34f/0x4d0 [ 577.802906][T25359] ? __x64_sys_futex+0x358/0x4d0 [ 577.802924][T25359] ? xfd_validate_state+0x129/0x190 [ 577.802945][T25359] ? __x64_sys_bpf+0xce/0x140 [ 577.802960][T25359] __x64_sys_bpf+0xce/0x140 [ 577.802977][T25359] ? do_syscall_64+0x90/0x840 [ 577.802998][T25359] do_syscall_64+0x115/0x840 [ 577.803017][T25359] ? clear_bhb_loop+0x70/0xc0 [ 577.803034][T25359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.803053][T25359] RIP: 0033:0x7fda5a59e0d9 [ 577.803066][T25359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.803081][T25359] RSP: 002b:00007fda5b498028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.803095][T25359] RAX: ffffffffffffffda RBX: 00007fda5a825fa0 RCX: 00007fda5a59e0d9 [ 577.803105][T25359] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 577.803114][T25359] RBP: 00007fda5a635024 R08: 0000000000000000 R09: 0000000000000000 [ 577.803123][T25359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.803131][T25359] R13: 00007fda5a826038 R14: 00007fda5a825fa0 R15: 00007ffc27852578 [ 577.803151][T25359] [ 578.322550][T25359] memory: usage 3072kB, limit 3072kB, failcnt 50259 [ 578.330513][T25359] memory+swap: usage 7472kB, limit 9007199254740988kB, failcnt 0 [ 578.338271][T25359] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 578.345558][T25359] Memory cgroup stats for /syz4: [ 578.345732][T25359] cache 0 [ 578.353993][T25359] rss 0 [ 578.356814][T25359] rss_huge 0 [ 578.360176][T25359] shmem 0 [ 578.363115][T25359] mapped_file 0 [ 578.366561][T25359] dirty 0 [ 578.369476][T25359] writeback 0 [ 578.372734][T25359] workingset_refault_anon 7863 [ 578.377490][T25359] workingset_refault_file 0 [ 578.381966][T25359] swap 4505600 [ 578.385327][T25359] swapcached 229793792 [ 578.389610][T25359] pgpgin 152796 [ 578.393127][T25359] pgpgout 152811 [ 578.396651][T25359] pgfault 467451 [ 578.400174][T25359] pgmajfault 3822 [ 578.405208][T25359] inactive_anon 0 [ 578.408831][T25359] active_anon 4096 [ 578.412546][T25359] inactive_file 0 [ 578.416217][T25359] active_file 0 [ 578.419658][T25359] unevictable 0 [ 578.423136][T25359] hierarchical_memory_limit 3145728 [ 578.428321][T25359] hierarchical_memsw_limit 9223372036854771712 [ 578.434517][T25359] total_cache 0 [ 578.437969][T25359] total_rss 0 [ 578.441230][T25359] total_rss_huge 0 [ 578.444964][T25359] total_shmem 0 [ 578.448400][T25359] total_mapped_file 0 [ 578.452355][T25359] total_dirty 0 [ 578.455826][T25359] total_writeback 0 [ 578.459626][T25359] total_workingset_refault_anon 7863 [ 578.464950][T25359] total_workingset_refault_file 0 [ 578.469954][T25359] total_swap 4505600 [ 578.473852][T25359] total_swapcached 229793792 [ 578.478427][T25359] total_pgpgin 152796 [ 578.482381][T25359] total_pgpgout 152811 [ 578.486462][T25359] total_pgfault 467451 [ 578.490516][T25359] total_pgmajfault 3822 [ 578.494678][T25359] total_inactive_anon 0 [ 578.498810][T25359] total_active_anon 4096 [ 578.504553][T25359] total_inactive_file 0 [ 578.508692][T25359] total_active_file 0 [ 578.512758][T25359] total_unevictable 0 [ 578.516717][T25359] anon_cost 0 [ 578.519980][T25359] file_cost 0 [ 578.523279][T25359] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9162,pid=25358,uid=0 [ 578.541417][T25359] Memory cgroup out of memory: Killed process 25358 (syz.4.9162) total-vm:108532kB, anon-rss:1248kB, file-rss:21400kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 582.038253][T25466] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.045521][T25466] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.486823][T25478] FAULT_INJECTION: forcing a failure. [ 582.486823][T25478] name failslab, interval 1, probability 0, space 0, times 0 [ 582.546609][T25478] CPU: 0 UID: 0 PID: 25478 Comm: syz.3.9214 Tainted: G U L syzkaller #0 PREEMPT(full) [ 582.546636][T25478] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 582.546642][T25478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.546651][T25478] Call Trace: [ 582.546657][T25478] [ 582.546662][T25478] dump_stack_lvl+0x100/0x190 [ 582.546685][T25478] should_fail_ex.cold+0x5/0xa [ 582.546703][T25478] should_failslab+0xc2/0x120 [ 582.546725][T25478] __kmalloc_noprof+0xfc/0x820 [ 582.546743][T25478] ? trace_kmem_cache_alloc+0xdd/0x100 [ 582.546763][T25478] ? lsm_blob_alloc+0x68/0x90 [ 582.546789][T25478] lsm_blob_alloc+0x68/0x90 [ 582.546810][T25478] security_prepare_creds+0x2d/0x290 [ 582.546832][T25478] prepare_creds+0x5d6/0x950 [ 582.546857][T25478] __sys_setregid+0x109/0x910 [ 582.546874][T25478] do_syscall_64+0x115/0x840 [ 582.546894][T25478] ? clear_bhb_loop+0x70/0xc0 [ 582.546912][T25478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.546927][T25478] RIP: 0033:0x7f379e19e0d9 [ 582.546940][T25478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.546955][T25478] RSP: 002b:00007f379ef9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 582.546970][T25478] RAX: ffffffffffffffda RBX: 00007f379e425fa0 RCX: 00007f379e19e0d9 [ 582.546979][T25478] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 582.546988][T25478] RBP: 00007f379e235024 R08: 0000000000000000 R09: 0000000000000000 [ 582.546997][T25478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.547005][T25478] R13: 00007f379e426038 R14: 00007f379e425fa0 R15: 00007ffebd7ebca8 [ 582.547024][T25478] [ 584.416594][T25527] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.9233'. [ 585.319516][T25557] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 585.557752][T25560] NFSD: Failed to start, no listeners configured. [ 585.902401][T25570] netlink: 'syz.1.9252': attribute type 33 has an invalid length. [ 587.928191][T25622] FAULT_INJECTION: forcing a failure. [ 587.928191][T25622] name failslab, interval 1, probability 0, space 0, times 0 [ 587.998522][T25622] CPU: 0 UID: 0 PID: 25622 Comm: syz.0.9272 Tainted: G U L syzkaller #0 PREEMPT(full) [ 587.998549][T25622] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 587.998556][T25622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.998565][T25622] Call Trace: [ 587.998570][T25622] [ 587.998576][T25622] dump_stack_lvl+0x100/0x190 [ 587.998599][T25622] should_fail_ex.cold+0x5/0xa [ 587.998617][T25622] should_failslab+0xc2/0x120 [ 587.998639][T25622] kmem_cache_alloc_noprof+0x91/0x6a0 [ 587.998659][T25622] ? key_alloc+0x3c5/0x1310 [ 587.998769][T25622] key_alloc+0x3c5/0x1310 [ 587.998802][T25622] ? __pfx_key_alloc+0x10/0x10 [ 587.998827][T25622] keyring_alloc+0x44/0xc0 [ 587.998850][T25622] lookup_user_key+0xcfe/0x1300 [ 587.998872][T25622] ? __pfx_lookup_user_key+0x10/0x10 [ 587.998889][T25622] ? futex_wait+0x11e/0x370 [ 587.998914][T25622] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 587.998944][T25622] keyctl_get_persistent+0x197/0x8b0 [ 587.998967][T25622] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 587.998987][T25622] ? __fget_files+0x21f/0x3d0 [ 587.999004][T25622] ? __x64_sys_futex+0x34f/0x4d0 [ 587.999019][T25622] ? __x64_sys_futex+0x358/0x4d0 [ 587.999037][T25622] ? xfd_validate_state+0x129/0x190 [ 587.999059][T25622] __do_sys_keyctl+0x3b2/0x5a0 [ 587.999076][T25622] do_syscall_64+0x115/0x840 [ 587.999096][T25622] ? clear_bhb_loop+0x70/0xc0 [ 587.999114][T25622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.999128][T25622] RIP: 0033:0x7fa799f9e0d9 [ 587.999143][T25622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.999157][T25622] RSP: 002b:00007fa79aede028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 587.999172][T25622] RAX: ffffffffffffffda RBX: 00007fa79a225fa0 RCX: 00007fa799f9e0d9 [ 587.999182][T25622] RDX: 00000000fffffffe RSI: ffffffffffffffff RDI: 2000000000000016 [ 587.999192][T25622] RBP: 00007fa79a035024 R08: 0000000000001000 R09: 0000000000000000 [ 587.999202][T25622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.999210][T25622] R13: 00007fa79a226038 R14: 00007fa79a225fa0 R15: 00007ffe4bb9b588 [ 587.999230][T25622] [ 591.171185][T25686] FAULT_INJECTION: forcing a failure. [ 591.171185][T25686] name failslab, interval 1, probability 0, space 0, times 0 [ 591.290266][T25686] CPU: 0 UID: 0 PID: 25686 Comm: syz.0.9302 Tainted: G U L syzkaller #0 PREEMPT(full) [ 591.290295][T25686] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 591.290301][T25686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 591.290310][T25686] Call Trace: [ 591.290315][T25686] [ 591.290321][T25686] dump_stack_lvl+0x100/0x190 [ 591.290344][T25686] should_fail_ex.cold+0x5/0xa [ 591.290361][T25686] should_failslab+0xc2/0x120 [ 591.290382][T25686] kmem_cache_alloc_noprof+0x91/0x6a0 [ 591.290402][T25686] ? mas_preallocate+0x1105/0x14a0 [ 591.290493][T25686] mas_preallocate+0x1105/0x14a0 [ 591.290513][T25686] ? __pfx_mas_preallocate+0x10/0x10 [ 591.290535][T25686] ? anon_vma_name+0x5a/0x250 [ 591.290562][T25686] __split_vma+0x33d/0xda0 [ 591.290581][T25686] ? __pfx___split_vma+0x10/0x10 [ 591.290595][T25686] ? vma_link+0x5ee/0x8d0 [ 591.290619][T25686] vms_gather_munmap_vmas+0x1d2/0x1720 [ 591.290639][T25686] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 591.290655][T25686] ? alloc_new_pud+0x217/0x320 [ 591.290670][T25686] ? get_old_pud+0xd8/0x360 [ 591.290686][T25686] ? move_page_tables+0x11c/0x4610 [ 591.290703][T25686] ? __pfx_copy_vma+0x10/0x10 [ 591.290726][T25686] do_vmi_align_munmap+0x287/0x5f0 [ 591.290745][T25686] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 591.290788][T25686] do_vmi_munmap+0x1f8/0x3e0 [ 591.290807][T25686] move_vma+0xe5b/0x1920 [ 591.290826][T25686] ? __pfx_move_vma+0x10/0x10 [ 591.290850][T25686] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 591.290882][T25686] ? vrm_set_new_addr+0x204/0x290 [ 591.290900][T25686] mremap_to+0x234/0x4c0 [ 591.290915][T25686] ? mas_walk+0x6ef/0x9b0 [ 591.290935][T25686] ? __pfx_mremap_to+0x10/0x10 [ 591.290950][T25686] ? check_prep_vma+0x912/0xe60 [ 591.290970][T25686] __do_sys_mremap+0x88c/0x1850 [ 591.290994][T25686] ? __pfx___do_sys_mremap+0x10/0x10 [ 591.291009][T25686] ? ksys_write+0x190/0x250 [ 591.291029][T25686] ? __pfx_do_futex+0x10/0x10 [ 591.291051][T25686] ? __x64_sys_futex+0x34f/0x4d0 [ 591.291078][T25686] do_syscall_64+0x115/0x840 [ 591.291097][T25686] ? clear_bhb_loop+0x70/0xc0 [ 591.291114][T25686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.291129][T25686] RIP: 0033:0x7fa799f9e0d9 [ 591.291143][T25686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.291157][T25686] RSP: 002b:00007fa79aede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 591.291172][T25686] RAX: ffffffffffffffda RBX: 00007fa79a225fa0 RCX: 00007fa799f9e0d9 [ 591.291185][T25686] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000 [ 591.291194][T25686] RBP: 00007fa79a035024 R08: 0000000100000000 R09: 0000000000000000 [ 591.291203][T25686] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 591.291212][T25686] R13: 00007fa79a226038 R14: 00007fa79a225fa0 R15: 00007ffe4bb9b588 [ 591.291231][T25686] [ 595.039690][T25746] syz.0.9328 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 595.099927][T25746] CPU: 0 UID: 0 PID: 25746 Comm: syz.0.9328 Tainted: G U L syzkaller #0 PREEMPT(full) [ 595.099954][T25746] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 595.099959][T25746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 595.099968][T25746] Call Trace: [ 595.099973][T25746] [ 595.099978][T25746] dump_stack_lvl+0x100/0x190 [ 595.100004][T25746] dump_header+0xfb/0x606 [ 595.100020][T25746] oom_kill_process.cold+0xd/0x330 [ 595.100037][T25746] out_of_memory+0x340/0x14f0 [ 595.100057][T25746] ? __pfx_out_of_memory+0x10/0x10 [ 595.100075][T25746] mem_cgroup_out_of_memory+0xc6/0x130 [ 595.100092][T25746] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 595.100107][T25746] ? find_held_lock+0x2b/0x80 [ 595.100135][T25746] ? do_raw_spin_unlock+0x145/0x1e0 [ 595.100152][T25746] ? _raw_spin_unlock+0x28/0x50 [ 595.100173][T25746] try_charge_memcg+0x6e5/0xdf0 [ 595.100197][T25746] ? __pfx_try_charge_memcg+0x10/0x10 [ 595.100216][T25746] ? find_held_lock+0x2b/0x80 [ 595.100233][T25746] ? rcu_read_unlock+0x17/0x60 [ 595.100254][T25746] ? rcu_read_unlock+0x17/0x60 [ 595.100274][T25746] ? find_held_lock+0x2b/0x80 [ 595.100292][T25746] ? rcu_read_unlock+0x17/0x60 [ 595.100317][T25746] charge_memcg+0x187/0x1e0 [ 595.100338][T25746] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 595.100355][T25746] swap_cache_alloc_folio+0x548/0xc50 [ 595.100376][T25746] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 595.100392][T25746] ? swap_cache_get_folio+0x28d/0x360 [ 595.100409][T25746] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 595.100430][T25746] swap_cache_read_folio+0x47/0x140 [ 595.100449][T25746] swap_cluster_readahead+0x387/0x5f0 [ 595.100469][T25746] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 595.100486][T25746] ? debug_object_activate+0x343/0x4b0 [ 595.100510][T25746] ? lock_acquire+0x1b9/0x370 [ 595.100527][T25746] ? __lock_acquire+0x49f/0x1a40 [ 595.100539][T25746] ? get_vma_policy+0x23d/0x3b0 [ 595.100562][T25746] swapin_readahead+0x159/0x1200 [ 595.100578][T25746] ? lapic_next_event+0x10/0x20 [ 595.100602][T25746] ? __pfx_swapin_readahead+0x10/0x10 [ 595.100622][T25746] ? swap_table_get+0x10d/0x2c0 [ 595.100638][T25746] ? swap_cache_get_folio+0x28d/0x360 [ 595.100654][T25746] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 595.100669][T25746] ? __pfx_softleaf_type+0x10/0x10 [ 595.100689][T25746] ? do_swap_page+0xf98/0x5780 [ 595.100702][T25746] do_swap_page+0xf98/0x5780 [ 595.100725][T25746] ? __pfx_do_swap_page+0x10/0x10 [ 595.100739][T25746] ? __lock_acquire+0x49f/0x1a40 [ 595.100752][T25746] ? lockdep_hardirqs_on+0x78/0x100 [ 595.100778][T25746] ? rcu_is_watching+0x12/0xc0 [ 595.100795][T25746] ? __pte_offset_map+0x179/0x310 [ 595.100817][T25746] __handle_mm_fault+0x192f/0x2a00 [ 595.100835][T25746] ? reacquire_held_locks+0xce/0x1e0 [ 595.100849][T25746] ? __pfx___handle_mm_fault+0x10/0x10 [ 595.100867][T25746] ? lock_vma_under_rcu+0x17c/0x590 [ 595.100892][T25746] handle_mm_fault+0x37b/0xa30 [ 595.100910][T25746] do_user_addr_fault+0x5a3/0x12f0 [ 595.100935][T25746] exc_page_fault+0x6f/0xd0 [ 595.100954][T25746] asm_exc_page_fault+0x26/0x30 [ 595.100967][T25746] RIP: 0033:0x7fa799e6667e [ 595.100980][T25746] Code: e9 c7 6b 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 7b b9 3b 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 595.100993][T25746] RSP: 002b:00007ffe4bb9b680 EFLAGS: 00010202 [ 595.101005][T25746] RAX: 00007fa79a225fa0 RBX: 00007fa79a225fa0 RCX: 0000000000000026 [ 595.101014][T25746] RDX: 0000000000000001 RSI: 00007fa79a226038 RDI: 0000000000000000 [ 595.101023][T25746] RBP: 00007fa79a227da0 R08: 0000000000000000 R09: 0000000000000001 [ 595.101031][T25746] R10: 0000000000000026 R11: 0000000000000246 R12: 0000000000091c7f [ 595.101039][T25746] R13: 00007fa79a22609c R14: 00000000000919df R15: 00007fa79a226090 [ 595.101058][T25746] [ 595.101066][T25746] memory: usage 3072kB, limit 3072kB, failcnt 144229 [ 595.724960][T25778] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 596.008701][T25746] memory+swap: usage 71040kB, limit 9007199254740988kB, failcnt 0 [ 596.037042][T25746] kmem: usage 3044kB, limit 9007199254740988kB, failcnt 0 [ 596.063872][T25746] Memory cgroup stats for /syz0: [ 596.063971][T25746] cache 0 [ 596.082124][T25746] rss 0 [ 596.087983][T25746] rss_huge 0 [ 596.094580][T25746] shmem 0 [ 596.100692][T25746] mapped_file 0 [ 596.113607][T25746] dirty 0 [ 596.119837][T25746] writeback 8192 [ 596.129148][T25746] workingset_refault_anon 9561 [ 596.139569][T25746] workingset_refault_file 54208 [ 596.149945][T25746] swap 69603328 [ 596.155723][T25746] swapcached 496336896 [ 596.171493][T25746] pgpgin 307908 [ 596.179907][T25746] pgpgout 308507 [ 596.187846][T25746] pgfault 482926 [ 596.195645][T25746] pgmajfault 3979 [ 596.200055][T25746] inactive_anon 4096 [ 596.214834][T25746] active_anon 4096 [ 596.222852][T25746] inactive_file 0 [ 596.232984][T25746] active_file 0 [ 596.240833][T25746] unevictable 0 [ 596.248460][T25746] hierarchical_memory_limit 3145728 [ 596.276742][T25789] openvswitch: netlink: IPv4 tunnel dst address is zero [ 596.285605][T25746] hierarchical_memsw_limit 9223372036854771712 [ 596.302416][T25746] total_cache 0 [ 596.314264][T25746] total_rss 0 [ 596.325361][T25746] total_rss_huge 0 [ 596.338056][T25746] total_shmem 0 [ 596.353889][T25746] total_mapped_file 0 [ 596.368341][T25746] total_dirty 0 [ 596.382470][T25746] total_writeback 8192 [ 596.396669][T25746] total_workingset_refault_anon 9561 [ 596.412326][T25746] total_workingset_refault_file 54208 [ 596.424497][T25746] total_swap 69603328 [ 596.446026][T25746] total_swapcached 496336896 [ 596.458057][T25746] total_pgpgin 307908 [ 596.475336][T25746] total_pgpgout 308507 [ 596.504322][T25746] total_pgfault 482926 [ 596.518510][T25746] total_pgmajfault 3979 [ 596.532662][T25746] total_inactive_anon 4096 [ 596.552038][T25793] nbd: socks must be embedded in a SOCK_ITEM attr [ 596.563292][T25746] total_active_anon 4096 [ 596.583963][T25746] total_inactive_file 0 [ 596.624032][T25746] total_active_file 0 [ 596.649681][T25746] total_unevictable 0 [ 596.660612][T25746] anon_cost 0 [ 596.677303][T25746] file_cost 0 [ 596.692573][T25746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9102,pid=25235,uid=0 [ 596.759337][T25746] Memory cgroup out of memory: Killed process 25235 (syz.0.9102) total-vm:104300kB, anon-rss:1248kB, file-rss:58100kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 598.415757][T25798] kexec: Could not allocate control_code_buffer [ 598.890091][ T32] oom_reaper: reaped process 25235 (syz.0.9102), now anon-rss:0kB, file-rss:55296kB, shmem-rss:0kB [ 599.010002][ T5610] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 599.054868][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 599.054893][ T5610] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 599.054906][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.054914][ T5610] Call Trace: [ 599.054919][ T5610] [ 599.054925][ T5610] dump_stack_lvl+0x100/0x190 [ 599.054950][ T5610] dump_header+0xfb/0x606 [ 599.054966][ T5610] oom_kill_process.cold+0xd/0x330 [ 599.054983][ T5610] out_of_memory+0x340/0x14f0 [ 599.055002][ T5610] ? __pfx_out_of_memory+0x10/0x10 [ 599.055027][ T5610] mem_cgroup_out_of_memory+0xc6/0x130 [ 599.055047][ T5610] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 599.055062][ T5610] ? find_held_lock+0x2b/0x80 [ 599.055083][ T5610] ? do_raw_spin_unlock+0x145/0x1e0 [ 599.055100][ T5610] ? _raw_spin_unlock+0x28/0x50 [ 599.055119][ T5610] try_charge_memcg+0x6e5/0xdf0 [ 599.055147][ T5610] ? __pfx_try_charge_memcg+0x10/0x10 [ 599.055166][ T5610] ? find_held_lock+0x2b/0x80 [ 599.055183][ T5610] ? rcu_read_unlock+0x17/0x60 [ 599.055203][ T5610] ? rcu_read_unlock+0x17/0x60 [ 599.055224][ T5610] ? find_held_lock+0x2b/0x80 [ 599.055246][ T5610] ? rcu_read_unlock+0x17/0x60 [ 599.055275][ T5610] charge_memcg+0x187/0x1e0 [ 599.055296][ T5610] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 599.055313][ T5610] swap_cache_alloc_folio+0x548/0xc50 [ 599.055334][ T5610] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 599.055350][ T5610] ? swap_cache_get_folio+0x28d/0x360 [ 599.055366][ T5610] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 599.055381][ T5610] ? lockdep_hardirqs_on+0x78/0x100 [ 599.055412][ T5610] swap_cache_read_folio+0x47/0x140 [ 599.055431][ T5610] swap_cluster_readahead+0x387/0x5f0 [ 599.055454][ T5610] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 599.055482][ T5610] ? __lock_acquire+0x49f/0x1a40 [ 599.055507][ T5610] ? get_vma_policy+0x23d/0x3b0 [ 599.055530][ T5610] swapin_readahead+0x159/0x1200 [ 599.055545][ T5610] ? debug_object_assert_init+0x1c4/0x310 [ 599.055573][ T5610] ? __pfx_swapin_readahead+0x10/0x10 [ 599.055594][ T5610] ? swap_table_get+0x10d/0x2c0 [ 599.055609][ T5610] ? swap_cache_get_folio+0x28d/0x360 [ 599.055630][ T5610] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 599.055646][ T5610] ? __pfx_softleaf_type+0x10/0x10 [ 599.055666][ T5610] ? do_swap_page+0xf98/0x5780 [ 599.055678][ T5610] do_swap_page+0xf98/0x5780 [ 599.055702][ T5610] ? __pfx_do_swap_page+0x10/0x10 [ 599.055716][ T5610] ? __lock_acquire+0x49f/0x1a40 [ 599.055729][ T5610] ? lockdep_hardirqs_on+0x78/0x100 [ 599.055749][ T5610] ? rcu_is_watching+0x12/0xc0 [ 599.055766][ T5610] ? __pte_offset_map+0x179/0x310 [ 599.055788][ T5610] __handle_mm_fault+0x192f/0x2a00 [ 599.055806][ T5610] ? reacquire_held_locks+0xce/0x1e0 [ 599.055820][ T5610] ? __pfx___handle_mm_fault+0x10/0x10 [ 599.055838][ T5610] ? lock_vma_under_rcu+0x17c/0x590 [ 599.055863][ T5610] handle_mm_fault+0x37b/0xa30 [ 599.055881][ T5610] do_user_addr_fault+0x5a3/0x12f0 [ 599.055913][ T5610] exc_page_fault+0x6f/0xd0 [ 599.055932][ T5610] asm_exc_page_fault+0x26/0x30 [ 599.055945][ T5610] RIP: 0033:0x7fa799f5e90e [ 599.055958][ T5610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 599.055971][ T5610] RSP: 002b:00007ffe4bb9b868 EFLAGS: 00010246 [ 599.055983][ T5610] RAX: 0000000000000000 RBX: 0000555590a2a500 RCX: 00007fa799f5e90e [ 599.055992][ T5610] RDX: 00007ffe4bb9b8c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.056001][ T5610] RBP: 00007ffe4bb9b92c R08: 0000000000000000 R09: 0000000000000000 [ 599.056012][ T5610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 599.056021][ T5610] R13: 00000000000927c0 R14: 00000000000919b8 R15: 00007ffe4bb9b980 [ 599.056039][ T5610] [ 599.430818][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9361'. [ 599.559966][ T5610] memory: usage 3060kB, limit 3072kB, failcnt 145463 [ 599.868602][ T5610] memory+swap: usage 70880kB, limit 9007199254740988kB, failcnt 0 [ 599.917869][ T5610] kmem: usage 3024kB, limit 9007199254740988kB, failcnt 0 [ 599.972876][ T5610] Memory cgroup stats for /syz0: [ 599.972985][ T5610] cache 0 [ 600.021304][ T5610] rss 20480 [ 600.054011][ T5610] rss_huge 0 [ 600.068734][ T5610] shmem 0 [ 600.092922][ T5610] mapped_file 0 [ 600.134725][ T5610] dirty 0 [ 600.150454][ T5610] writeback 0 [ 600.161867][ T5610] workingset_refault_anon 9580 [ 600.190455][ T5610] workingset_refault_file 54208 [ 600.251938][ T5610] swap 60895232 [ 600.260287][ T5610] swapcached 496394240 [ 600.282888][ T5610] pgpgin 307928 [ 600.306426][ T5610] pgpgout 308527 [ 600.330313][ T5610] pgfault 482938 [ 600.349707][ T5610] pgmajfault 3987 [ 600.359737][ T5610] inactive_anon 24576 [ 600.369135][ T5610] active_anon 0 [ 600.373954][ T5610] inactive_file 0 [ 600.384590][T25235] syz.0.9102 (25235) used greatest stack depth: 18440 bytes left [ 600.392483][ T5610] active_file 0 [ 600.395940][ T5610] unevictable 0 [ 600.400333][ T5610] hierarchical_memory_limit 3145728 [ 600.407251][ T5610] hierarchical_memsw_limit 9223372036854771712 [ 600.413899][ T5610] total_cache 0 [ 600.418869][ T5610] total_rss 20480 [ 600.422529][ T5610] total_rss_huge 0 [ 600.426227][ T5610] total_shmem 0 [ 600.429999][ T5610] total_mapped_file 0 [ 600.433980][ T5610] total_dirty 0 [ 600.437419][ T5610] total_writeback 0 [ 600.441624][ T5610] total_workingset_refault_anon 9580 [ 600.446908][ T5610] total_workingset_refault_file 54208 [ 600.452494][ T5610] total_swap 60895232 [ 600.456473][ T5610] total_swapcached 496394240 [ 600.461309][ T5610] total_pgpgin 307928 [ 600.465287][ T5610] total_pgpgout 308527 [ 600.472354][ T5610] total_pgfault 482938 [ 600.477443][ T5610] total_pgmajfault 3987 [ 600.487460][ T5610] total_inactive_anon 24576 [ 600.494756][ T5610] total_active_anon 0 [ 600.498924][ T5610] total_inactive_file 0 [ 600.503075][ T5610] total_active_file 0 [ 600.509195][ T5610] total_unevictable 0 [ 600.513187][ T5610] anon_cost 0 [ 600.516450][ T5610] file_cost 0 [ 600.520065][ T5610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9328,pid=25746,uid=0 [ 600.535082][ T5610] Memory cgroup out of memory: Killed process 25746 (syz.0.9328) total-vm:102384kB, anon-rss:1268kB, file-rss:21036kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 602.064361][T25923] netlink: 346 bytes leftover after parsing attributes in process `syz.4.9401'. [ 602.286028][T25930] hub 1-0:1.0: USB hub found [ 602.306849][T25930] hub 1-0:1.0: 1 port detected [ 603.052456][T25963] sctp: [Deprecated]: syz.4.9417 (pid 25963) Use of int in maxseg socket option. [ 603.052456][T25963] Use struct sctp_assoc_value instead [ 604.925310][T26017] GUP no longer grows the stack in syz.1.9442 (26017): 5000-401000 (4000) [ 604.969414][T26017] CPU: 0 UID: 0 PID: 26017 Comm: syz.1.9442 Tainted: G U L syzkaller #0 PREEMPT(full) [ 604.969444][T26017] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 604.969450][T26017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.969459][T26017] Call Trace: [ 604.969464][T26017] [ 604.969470][T26017] dump_stack_lvl+0x100/0x190 [ 604.969496][T26017] gup_vma_lookup.cold+0x83/0x96 [ 604.969518][T26017] __get_user_pages+0x241/0x32a0 [ 604.969545][T26017] ? down_read_killable+0x35e/0x520 [ 604.969569][T26017] ? __lock_acquire+0x49f/0x1a40 [ 604.969582][T26017] ? __pfx___get_user_pages+0x10/0x10 [ 604.969603][T26017] ? __pfx_validate_mm+0x10/0x10 [ 604.969623][T26017] __gup_longterm_locked+0x87d/0x16f0 [ 604.969650][T26017] ? __pfx___gup_longterm_locked+0x10/0x10 [ 604.969672][T26017] ? lock_acquire+0x1b9/0x370 [ 604.969692][T26017] gup_fast_fallback+0x16dc/0x2790 [ 604.969728][T26017] ? __pfx_gup_fast_fallback+0x10/0x10 [ 604.969751][T26017] ? __lock_acquire+0x49f/0x1a40 [ 604.969765][T26017] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 604.969782][T26017] ? lockdep_hardirqs_on+0x78/0x100 [ 604.969804][T26017] get_user_pages_fast+0xa7/0xf0 [ 604.969825][T26017] ? __pfx_get_user_pages_fast+0x10/0x10 [ 604.969851][T26017] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 604.969944][T26017] ? pipe_lock+0x69/0x80 [ 604.969961][T26017] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 604.969984][T26017] ? __pfx___mutex_lock+0x10/0x10 [ 604.970005][T26017] ? iovec_from_user+0xda/0x140 [ 604.970031][T26017] iov_iter_get_pages2+0xa3/0x100 [ 604.970052][T26017] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 604.970074][T26017] ? wait_for_space+0x2ca/0x3b0 [ 604.970093][T26017] __do_sys_vmsplice+0x7dd/0x13c0 [ 604.970118][T26017] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 604.970139][T26017] ? __pfx_futex_wait+0x10/0x10 [ 604.970163][T26017] ? vm_mmap_pgoff+0x103/0x470 [ 604.970184][T26017] ? __pfx___do_sys_mremap+0x10/0x10 [ 604.970233][T26017] ? do_syscall_64+0x115/0x840 [ 604.970254][T26017] do_syscall_64+0x115/0x840 [ 604.970274][T26017] ? clear_bhb_loop+0x70/0xc0 [ 604.970292][T26017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.970307][T26017] RIP: 0033:0x7fb973f9e0d9 [ 604.970321][T26017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.970336][T26017] RSP: 002b:00007fb974f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 604.970350][T26017] RAX: ffffffffffffffda RBX: 00007fb974225fa0 RCX: 00007fb973f9e0d9 [ 604.970360][T26017] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000000 [ 604.970369][T26017] RBP: 00007fb974035024 R08: 0000000000000000 R09: 0000000000000000 [ 604.970377][T26017] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 604.970386][T26017] R13: 00007fb974226038 R14: 00007fb974225fa0 R15: 00007ffd1168ce38 [ 604.970407][T26017] [ 608.511560][T26152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9499'. [ 608.692445][T26159] FAULT_INJECTION: forcing a failure. [ 608.692445][T26159] name failslab, interval 1, probability 0, space 0, times 0 [ 608.731537][T26159] CPU: 0 UID: 0 PID: 26159 Comm: syz.3.9502 Tainted: G U L syzkaller #0 PREEMPT(full) [ 608.731567][T26159] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 608.731573][T26159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.731582][T26159] Call Trace: [ 608.731588][T26159] [ 608.731594][T26159] dump_stack_lvl+0x100/0x190 [ 608.731617][T26159] should_fail_ex.cold+0x5/0xa [ 608.731635][T26159] should_failslab+0xc2/0x120 [ 608.731656][T26159] kmem_cache_alloc_noprof+0x91/0x6a0 [ 608.731674][T26159] ? stack_trace_save+0x8e/0xc0 [ 608.731695][T26159] ? alloc_empty_file+0x5b/0x1c0 [ 608.731717][T26159] alloc_empty_file+0x5b/0x1c0 [ 608.731736][T26159] path_openat+0xe7/0x4280 [ 608.731752][T26159] ? __kasan_slab_alloc+0x89/0x90 [ 608.731770][T26159] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 608.731787][T26159] ? do_getname+0x35/0x390 [ 608.731803][T26159] ? do_sys_openat2+0xc7/0x1e0 [ 608.731821][T26159] ? __x64_sys_openat+0x12d/0x210 [ 608.731840][T26159] ? do_syscall_64+0x115/0x840 [ 608.731859][T26159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.731880][T26159] ? __pfx_path_openat+0x10/0x10 [ 608.731900][T26159] do_file_open+0x20e/0x430 [ 608.731917][T26159] ? __pfx_do_file_open+0x10/0x10 [ 608.731945][T26159] ? alloc_fd+0x471/0x7a0 [ 608.731962][T26159] ? do_getname+0x191/0x390 [ 608.731981][T26159] do_sys_openat2+0x10f/0x1e0 [ 608.732001][T26159] ? __pfx_do_sys_openat2+0x10/0x10 [ 608.732021][T26159] ? find_held_lock+0x2b/0x80 [ 608.732043][T26159] __x64_sys_openat+0x12d/0x210 [ 608.732063][T26159] ? __pfx___x64_sys_openat+0x10/0x10 [ 608.732090][T26159] do_syscall_64+0x115/0x840 [ 608.732109][T26159] ? clear_bhb_loop+0x70/0xc0 [ 608.732126][T26159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.732141][T26159] RIP: 0033:0x7f379e15e90e [ 608.732154][T26159] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 608.732168][T26159] RSP: 002b:00007f379ef99ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 608.732183][T26159] RAX: ffffffffffffffda RBX: 00007f379ef9a6c0 RCX: 00007f379e15e90e [ 608.732195][T26159] RDX: 0000000000000002 RSI: 00007f379ef99f90 RDI: ffffffffffffff9c [ 608.732205][T26159] RBP: 00007f379e235024 R08: 0000000000000000 R09: 0000000000000000 [ 608.732213][T26159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.732222][T26159] R13: 00007f379e426038 R14: 00007f379e425fa0 R15: 00007ffebd7ebca8 [ 608.732241][T26159] [ 609.165495][T26167] ovs_ÿþÿþ?: entered promiscuous mode [ 609.351021][T26180] block nbd2: Unsupported socket: should be TCP or UNIX. [ 610.365180][T26198] ovs_ÿþÿþ?: entered promiscuous mode [ 610.578090][T26203] FAULT_INJECTION: forcing a failure. [ 610.578090][T26203] name failslab, interval 1, probability 0, space 0, times 0 [ 610.631586][T26203] CPU: 0 UID: 0 PID: 26203 Comm: syz.3.9520 Tainted: G U L syzkaller #0 PREEMPT(full) [ 610.631615][T26203] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 610.631621][T26203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 610.631629][T26203] Call Trace: [ 610.631635][T26203] [ 610.631641][T26203] dump_stack_lvl+0x100/0x190 [ 610.631663][T26203] should_fail_ex.cold+0x5/0xa [ 610.631681][T26203] should_failslab+0xc2/0x120 [ 610.631703][T26203] __kmalloc_noprof+0xfc/0x820 [ 610.631728][T26203] ? trace_kmalloc+0xeb/0x110 [ 610.631750][T26203] ? lsm_blob_alloc+0x68/0x90 [ 610.631777][T26203] lsm_blob_alloc+0x68/0x90 [ 610.631800][T26203] security_sk_alloc+0x2d/0x290 [ 610.631818][T26203] sk_prot_alloc+0x12a/0x2a0 [ 610.631836][T26203] sk_alloc+0x36/0xe80 [ 610.631856][T26203] __netlink_create+0x5e/0x2c0 [ 610.631977][T26203] ? __wake_up+0x3f/0x60 [ 610.632001][T26203] netlink_create+0x29b/0x610 [ 610.632015][T26203] ? __pfx_genl_bind+0x10/0x10 [ 610.632054][T26203] ? __pfx_genl_unbind+0x10/0x10 [ 610.632070][T26203] ? __pfx_genl_release+0x10/0x10 [ 610.632091][T26203] __sock_create+0x339/0x860 [ 610.632111][T26203] __sys_socket+0x14d/0x260 [ 610.632127][T26203] ? exc_page_fault+0x6f/0xd0 [ 610.632145][T26203] ? __pfx___sys_socket+0x10/0x10 [ 610.632167][T26203] __x64_sys_socket+0x72/0xb0 [ 610.632183][T26203] ? lockdep_hardirqs_on+0x78/0x100 [ 610.632202][T26203] do_syscall_64+0x115/0x840 [ 610.632222][T26203] ? clear_bhb_loop+0x70/0xc0 [ 610.632240][T26203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.632255][T26203] RIP: 0033:0x7f379e19f947 [ 610.632268][T26203] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.632282][T26203] RSP: 002b:00007f379ef98f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 610.632297][T26203] RAX: ffffffffffffffda RBX: 00007f379e425fa0 RCX: 00007f379e19f947 [ 610.632308][T26203] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 610.632317][T26203] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 610.632327][T26203] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 610.632336][T26203] R13: 00007f379e426038 R14: 00007f379e425fa0 R15: 00007ffebd7ebca8 [ 610.632355][T26203] [ 611.950727][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9531'. [ 613.486554][T26285] FAULT_INJECTION: forcing a failure. [ 613.486554][T26285] name failslab, interval 1, probability 0, space 0, times 0 [ 613.529592][T26285] CPU: 0 UID: 0 PID: 26285 Comm: syz.3.9555 Tainted: G U L syzkaller #0 PREEMPT(full) [ 613.529621][T26285] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 613.529626][T26285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.529636][T26285] Call Trace: [ 613.529642][T26285] [ 613.529648][T26285] dump_stack_lvl+0x100/0x190 [ 613.529671][T26285] should_fail_ex.cold+0x5/0xa [ 613.529689][T26285] should_failslab+0xc2/0x120 [ 613.529711][T26285] __kmalloc_noprof+0xfc/0x820 [ 613.529730][T26285] ? sk_prot_alloc+0x10b/0x2a0 [ 613.529748][T26285] sk_prot_alloc+0x10b/0x2a0 [ 613.529764][T26285] sk_alloc+0x36/0xe80 [ 613.529783][T26285] alg_create+0x9e/0x150 [ 613.529882][T26285] __sock_create+0x339/0x860 [ 613.529902][T26285] __sys_socket+0x14d/0x260 [ 613.529919][T26285] ? __pfx___sys_socket+0x10/0x10 [ 613.529941][T26285] __x64_sys_socket+0x72/0xb0 [ 613.529956][T26285] ? lockdep_hardirqs_on+0x78/0x100 [ 613.529978][T26285] do_syscall_64+0x115/0x840 [ 613.529997][T26285] ? clear_bhb_loop+0x70/0xc0 [ 613.530016][T26285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.530032][T26285] RIP: 0033:0x7f379e19e0d9 [ 613.530045][T26285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.530059][T26285] RSP: 002b:00007f379ef9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 613.530073][T26285] RAX: ffffffffffffffda RBX: 00007f379e425fa0 RCX: 00007f379e19e0d9 [ 613.530083][T26285] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000026 [ 613.530092][T26285] RBP: 00007f379e235024 R08: 0000000000000000 R09: 0000000000000000 [ 613.530101][T26285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.530110][T26285] R13: 00007f379e426038 R14: 00007f379e425fa0 R15: 00007ffebd7ebca8 [ 613.530130][T26285] [ 614.947938][T26316] netlink: 342 bytes leftover after parsing attributes in process `syz.3.9567'. [ 615.140587][T26324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9570'. [ 615.881019][T26360] netlink: 13 bytes leftover after parsing attributes in process `syz.0.9587'. [ 616.032855][T26367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9591'. [ 616.841677][T26402] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 616.890361][T26402] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 618.129882][T26453] IPVS: length: 537396514 != 24 [ 618.503793][T26468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9637'. [ 618.819414][T26481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9642'. [ 620.763869][T26559] netlink: 338 bytes leftover after parsing attributes in process `syz.3.9679'. [ 621.811397][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.819989][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.120482][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9709'. [ 623.446398][T10734] Bluetooth: hci0: Malformed Event: 0x13 [ 624.507813][T26674] netlink: 21 bytes leftover after parsing attributes in process `syz.4.9726'. [ 625.215506][T26692] FAULT_INJECTION: forcing a failure. [ 625.215506][T26692] name failslab, interval 1, probability 0, space 0, times 0 [ 625.268189][T26692] CPU: 0 UID: 0 PID: 26692 Comm: syz.0.9733 Tainted: G U L syzkaller #0 PREEMPT(full) [ 625.268218][T26692] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 625.268224][T26692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.268234][T26692] Call Trace: [ 625.268240][T26692] [ 625.268246][T26692] dump_stack_lvl+0x100/0x190 [ 625.268269][T26692] should_fail_ex.cold+0x5/0xa [ 625.268287][T26692] should_failslab+0xc2/0x120 [ 625.268309][T26692] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 625.268331][T26692] ? sbitmap_queue_init_node+0x291/0x4a0 [ 625.268419][T26692] sbitmap_queue_init_node+0x291/0x4a0 [ 625.268440][T26692] blk_mq_init_tags+0x184/0x300 [ 625.268495][T26692] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 625.268515][T26692] ? blk_mq_alloc_sched_tags+0x8a/0x350 [ 625.268565][T26692] blk_mq_alloc_sched_tags+0x1de/0x350 [ 625.268591][T26692] blk_mq_alloc_sched_res+0x8e/0x250 [ 625.268617][T26692] elevator_change+0x136/0x530 [ 625.268663][T26692] elv_iosched_store+0x3be/0x460 [ 625.268686][T26692] ? __pfx_elv_iosched_store+0x10/0x10 [ 625.268707][T26692] ? iter_file_splice_write+0x830/0x10b0 [ 625.268729][T26692] ? lock_acquire+0x1b9/0x370 [ 625.268745][T26692] ? __pfx_elv_iosched_store+0x10/0x10 [ 625.268767][T26692] queue_attr_store+0x25f/0x2f0 [ 625.268809][T26692] ? __pfx_queue_attr_store+0x10/0x10 [ 625.268827][T26692] ? __lock_acquire+0x49f/0x1a40 [ 625.268841][T26692] ? __lock_acquire+0x49f/0x1a40 [ 625.268863][T26692] ? find_held_lock+0x2b/0x80 [ 625.268881][T26692] ? sysfs_file_kobj+0xe4/0x290 [ 625.268902][T26692] ? sysfs_file_kobj+0xe4/0x290 [ 625.268925][T26692] ? __pfx_queue_attr_store+0x10/0x10 [ 625.268943][T26692] sysfs_kf_write+0xf2/0x150 [ 625.268965][T26692] kernfs_fop_write_iter+0x3e0/0x5f0 [ 625.268983][T26692] ? __pfx_sysfs_kf_write+0x10/0x10 [ 625.269006][T26692] iter_file_splice_write+0x830/0x10b0 [ 625.269033][T26692] ? __pfx_iter_file_splice_write+0x10/0x10 [ 625.269065][T26692] ? __pfx_iter_file_splice_write+0x10/0x10 [ 625.269083][T26692] direct_splice_actor+0x192/0x690 [ 625.269101][T26692] splice_direct_to_actor+0x345/0xa30 [ 625.269119][T26692] ? __pfx_direct_splice_actor+0x10/0x10 [ 625.269141][T26692] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 625.269163][T26692] do_splice_direct+0x174/0x240 [ 625.269180][T26692] ? __pfx_do_splice_direct+0x10/0x10 [ 625.269196][T26692] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 625.269215][T26692] ? rw_verify_area+0xce/0x6d0 [ 625.269238][T26692] do_sendfile+0xadc/0xe20 [ 625.269264][T26692] ? __pfx_do_sendfile+0x10/0x10 [ 625.269290][T26692] ? __x64_sys_futex+0x34f/0x4d0 [ 625.269306][T26692] ? __x64_sys_futex+0x358/0x4d0 [ 625.269324][T26692] __x64_sys_sendfile64+0x1d8/0x220 [ 625.269342][T26692] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 625.269366][T26692] do_syscall_64+0x115/0x840 [ 625.269387][T26692] ? clear_bhb_loop+0x70/0xc0 [ 625.269412][T26692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.269428][T26692] RIP: 0033:0x7fa799f9e0d9 [ 625.269442][T26692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.269456][T26692] RSP: 002b:00007fa79aede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 625.269471][T26692] RAX: ffffffffffffffda RBX: 00007fa79a225fa0 RCX: 00007fa799f9e0d9 [ 625.269481][T26692] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 625.269490][T26692] RBP: 00007fa79a035024 R08: 0000000000000000 R09: 0000000000000000 [ 625.269499][T26692] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 625.269509][T26692] R13: 00007fa79a226038 R14: 00007fa79a225fa0 R15: 00007ffe4bb9b588 [ 625.269530][T26692] [ 625.814984][T26703] syz.4.9739 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 625.826001][T26703] CPU: 0 UID: 0 PID: 26703 Comm: syz.4.9739 Tainted: G U L syzkaller #0 PREEMPT(full) [ 625.826025][T26703] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 625.826031][T26703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.826039][T26703] Call Trace: [ 625.826045][T26703] [ 625.826050][T26703] dump_stack_lvl+0x100/0x190 [ 625.826071][T26703] dump_header+0xfb/0x606 [ 625.826088][T26703] oom_kill_process.cold+0xd/0x330 [ 625.826105][T26703] out_of_memory+0x340/0x14f0 [ 625.826123][T26703] ? __pfx_out_of_memory+0x10/0x10 [ 625.826142][T26703] mem_cgroup_out_of_memory+0xc6/0x130 [ 625.826159][T26703] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 625.826174][T26703] ? find_held_lock+0x2b/0x80 [ 625.826195][T26703] ? do_raw_spin_unlock+0x145/0x1e0 [ 625.826212][T26703] ? _raw_spin_unlock+0x28/0x50 [ 625.826231][T26703] try_charge_memcg+0x6e5/0xdf0 [ 625.826258][T26703] ? __pfx_try_charge_memcg+0x10/0x10 [ 625.826283][T26703] ? find_held_lock+0x2b/0x80 [ 625.826300][T26703] ? rcu_read_unlock+0x17/0x60 [ 625.826320][T26703] ? rcu_read_unlock+0x17/0x60 [ 625.826341][T26703] ? find_held_lock+0x2b/0x80 [ 625.826358][T26703] ? rcu_read_unlock+0x17/0x60 [ 625.826383][T26703] charge_memcg+0x187/0x1e0 [ 625.826404][T26703] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 625.826422][T26703] swap_cache_alloc_folio+0x548/0xc50 [ 625.826442][T26703] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 625.826459][T26703] ? swap_cache_get_folio+0x28d/0x360 [ 625.826475][T26703] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 625.826496][T26703] swap_cache_read_folio+0x47/0x140 [ 625.826515][T26703] swap_cluster_readahead+0x387/0x5f0 [ 625.826536][T26703] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 625.826555][T26703] ? find_held_lock+0x2b/0x80 [ 625.826577][T26703] ? __lock_acquire+0x49f/0x1a40 [ 625.826590][T26703] ? get_vma_policy+0x23d/0x3b0 [ 625.826613][T26703] swapin_readahead+0x159/0x1200 [ 625.826628][T26703] ? trace_sched_exit_tp+0x120/0x160 [ 625.826651][T26703] ? __pfx_swapin_readahead+0x10/0x10 [ 625.826672][T26703] ? swap_table_get+0x10d/0x2c0 [ 625.826687][T26703] ? swap_cache_get_folio+0x28d/0x360 [ 625.826703][T26703] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 625.826719][T26703] ? __pfx_softleaf_type+0x10/0x10 [ 625.826738][T26703] ? do_swap_page+0xf98/0x5780 [ 625.826751][T26703] do_swap_page+0xf98/0x5780 [ 625.826767][T26703] ? __free_object+0x2a8/0x3f0 [ 625.826787][T26703] ? lockdep_hardirqs_on+0x78/0x100 [ 625.826811][T26703] ? __pfx_do_swap_page+0x10/0x10 [ 625.826825][T26703] ? __lock_acquire+0x49f/0x1a40 [ 625.826841][T26703] ? rcu_is_watching+0x12/0xc0 [ 625.826858][T26703] ? __pte_offset_map+0x179/0x310 [ 625.826879][T26703] __handle_mm_fault+0x192f/0x2a00 [ 625.826897][T26703] ? reacquire_held_locks+0xce/0x1e0 [ 625.826911][T26703] ? __pfx___handle_mm_fault+0x10/0x10 [ 625.826929][T26703] ? lock_vma_under_rcu+0x17c/0x590 [ 625.826948][T26703] ? lockdep_hardirqs_on+0x78/0x100 [ 625.826971][T26703] handle_mm_fault+0x37b/0xa30 [ 625.826989][T26703] do_user_addr_fault+0x5a3/0x12f0 [ 625.827015][T26703] exc_page_fault+0x6f/0xd0 [ 625.827034][T26703] asm_exc_page_fault+0x26/0x30 [ 625.827048][T26703] RIP: 0033:0x7fda5a59e0eb [ 625.827061][T26703] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 625.827074][T26703] RSP: 002b:00007ffc278526d8 EFLAGS: 00010213 [ 625.827085][T26703] RAX: 000000000000006e RBX: 00000000000995d2 RCX: ffffffffffffffe8 [ 625.827094][T26703] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda5a825fac [ 625.827103][T26703] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 625.827111][T26703] R10: 00007ffc278527e0 R11: 0000000000000246 R12: 00007ffc27852800 [ 625.827119][T26703] R13: 00007fda5a825fac R14: 0000000000099604 R15: 00007ffc278527e0 [ 625.827138][T26703] [ 626.493726][T26722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9748'. [ 626.792413][ T30] audit: type=1800 audit(4294967475.372:45): pid=26738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9755" name=04 dev="tmpfs" ino=13239 res=0 errno=0 [ 627.036086][T26703] memory: usage 3072kB, limit 3072kB, failcnt 62390 [ 627.071205][T26703] memory+swap: usage 3368kB, limit 9007199254740988kB, failcnt 0 [ 627.109036][T26703] kmem: usage 3072kB, limit 9007199254740988kB, failcnt 0 [ 627.144986][T26703] Memory cgroup stats for /syz4: [ 627.145086][T26703] cache 0 [ 627.188531][T26703] rss 0 [ 627.205399][T26703] rss_huge 0 [ 627.223906][T26703] shmem 0 [ 627.235544][T26703] mapped_file 0 [ 627.250442][T26703] dirty 0 [ 627.262502][T26703] writeback 0 [ 627.277584][T26703] workingset_refault_anon 10181 [ 627.301954][T26703] workingset_refault_file 0 [ 627.319642][T26703] swap 303104 [ 627.340092][T26703] swapcached 319950848 [ 627.353600][T26703] pgpgin 177505 [ 627.361956][T26703] pgpgout 181471 [ 627.368799][T26703] pgfault 519237 [ 627.378582][T26703] pgmajfault 5416 [ 627.383904][T26703] inactive_anon 0 [ 627.404291][T26703] active_anon 0 [ 627.421906][T26703] inactive_file 0 [ 627.436652][T26703] active_file 0 [ 627.462063][T26703] unevictable 0 [ 627.474110][T26703] hierarchical_memory_limit 3145728 [ 627.495589][T26703] hierarchical_memsw_limit 9223372036854771712 [ 627.529106][T26703] total_cache 0 [ 627.542653][T26703] total_rss 0 [ 627.558015][T26703] total_rss_huge 0 [ 627.573470][T26703] total_shmem 0 [ 627.586754][T26703] total_mapped_file 0 [ 627.603261][T26703] total_dirty 0 [ 627.621685][T26703] total_writeback 0 [ 627.638783][T26703] total_workingset_refault_anon 10181 [ 627.661238][T26703] total_workingset_refault_file 0 [ 627.686952][T26703] total_swap 303104 [ 627.703747][T26703] total_swapcached 319950848 [ 627.730108][T26703] total_pgpgin 177505 [ 627.749625][T26703] total_pgpgout 181471 [ 627.765290][T26703] total_pgfault 519237 [ 627.783244][T26703] total_pgmajfault 5416 [ 627.802439][T26703] total_inactive_anon 0 [ 627.822357][T26703] total_active_anon 0 [ 627.842362][T26703] total_inactive_file 0 [ 627.867190][T26703] total_active_file 0 [ 627.884600][T26703] total_unevictable 0 [ 627.903745][T26703] anon_cost 0 [ 627.916792][T26703] file_cost 0 [ 627.937636][T26703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9739,pid=26703,uid=0 [ 628.009566][T26703] Memory cgroup out of memory: Killed process 26703 (syz.4.9739) total-vm:137200kB, anon-rss:1248kB, file-rss:20992kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 628.326780][T10734] Bluetooth: hci1: unexpected event 0x0f length: 7 > 4 [ 628.326808][T10734] Bluetooth: hci1: unexpected event for opcode 0x647c [ 628.808966][T26809] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.9786'. [ 629.401758][T26831] Device name cannot be null; rc = [-22] [ 632.651296][ T30] audit: type=1804 audit(4294967481.283:46): pid=26969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9857" name="/newroot/1895/file0" dev="tmpfs" ino=9572 res=1 errno=0 [ 633.374385][T27000] bridge0: port 3(dummy0) entered blocking state [ 633.394213][T27000] bridge0: port 3(dummy0) entered disabled state [ 633.410350][T27000] dummy0: entered allmulticast mode [ 633.436403][T27000] dummy0: entered promiscuous mode [ 633.456281][T27000] bridge0: port 3(dummy0) entered blocking state [ 633.462728][T27000] bridge0: port 3(dummy0) entered forwarding state [ 634.462275][T27024] syz.4.9882 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 634.530936][T27024] CPU: 0 UID: 0 PID: 27024 Comm: syz.4.9882 Tainted: G U L syzkaller #0 PREEMPT(full) [ 634.530963][T27024] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 634.530971][T27024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.530980][T27024] Call Trace: [ 634.530984][T27024] [ 634.530990][T27024] dump_stack_lvl+0x100/0x190 [ 634.531011][T27024] dump_header+0xfb/0x606 [ 634.531028][T27024] oom_kill_process.cold+0xd/0x330 [ 634.531045][T27024] out_of_memory+0x340/0x14f0 [ 634.531063][T27024] ? __pfx_out_of_memory+0x10/0x10 [ 634.531082][T27024] mem_cgroup_out_of_memory+0xc6/0x130 [ 634.531099][T27024] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 634.531114][T27024] ? find_held_lock+0x2b/0x80 [ 634.531135][T27024] ? do_raw_spin_unlock+0x145/0x1e0 [ 634.531151][T27024] ? _raw_spin_unlock+0x28/0x50 [ 634.531170][T27024] try_charge_memcg+0x6e5/0xdf0 [ 634.531195][T27024] ? __pfx_try_charge_memcg+0x10/0x10 [ 634.531214][T27024] ? find_held_lock+0x2b/0x80 [ 634.531230][T27024] ? rcu_read_unlock+0x17/0x60 [ 634.531251][T27024] ? rcu_read_unlock+0x17/0x60 [ 634.531272][T27024] ? find_held_lock+0x2b/0x80 [ 634.531289][T27024] ? rcu_read_unlock+0x17/0x60 [ 634.531314][T27024] charge_memcg+0x187/0x1e0 [ 634.531335][T27024] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 634.531352][T27024] swap_cache_alloc_folio+0x548/0xc50 [ 634.531373][T27024] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 634.531393][T27024] ? swap_cache_get_folio+0x28d/0x360 [ 634.531409][T27024] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 634.531431][T27024] swap_cache_read_folio+0x47/0x140 [ 634.531449][T27024] swap_cluster_readahead+0x387/0x5f0 [ 634.531470][T27024] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 634.531489][T27024] ? __css_rstat_updated+0x1ce/0x5a0 [ 634.531525][T27024] ? __lock_acquire+0x49f/0x1a40 [ 634.531538][T27024] ? get_vma_policy+0x23d/0x3b0 [ 634.531568][T27024] swapin_readahead+0x159/0x1200 [ 634.531590][T27024] ? __pfx_swapin_readahead+0x10/0x10 [ 634.531611][T27024] ? swap_table_get+0x10d/0x2c0 [ 634.531628][T27024] ? swap_cache_get_folio+0x28d/0x360 [ 634.531645][T27024] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 634.531661][T27024] ? __pfx_softleaf_type+0x10/0x10 [ 634.531680][T27024] ? do_swap_page+0xf98/0x5780 [ 634.531694][T27024] do_swap_page+0xf98/0x5780 [ 634.531717][T27024] ? __pfx_do_swap_page+0x10/0x10 [ 634.531731][T27024] ? __lock_acquire+0x49f/0x1a40 [ 634.531744][T27024] ? lockdep_hardirqs_on+0x78/0x100 [ 634.531765][T27024] ? rcu_is_watching+0x12/0xc0 [ 634.531782][T27024] ? __pte_offset_map+0x179/0x310 [ 634.531803][T27024] __handle_mm_fault+0x192f/0x2a00 [ 634.531822][T27024] ? reacquire_held_locks+0xce/0x1e0 [ 634.531838][T27024] ? __pfx___handle_mm_fault+0x10/0x10 [ 634.531857][T27024] ? lock_vma_under_rcu+0x17c/0x590 [ 634.531882][T27024] handle_mm_fault+0x37b/0xa30 [ 634.531900][T27024] do_user_addr_fault+0x5a3/0x12f0 [ 634.531925][T27024] exc_page_fault+0x6f/0xd0 [ 634.531944][T27024] asm_exc_page_fault+0x26/0x30 [ 634.531957][T27024] RIP: 0033:0x7fda5a559238 [ 634.531970][T27024] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 634.531987][T27024] RSP: 002b:00007ffc27852660 EFLAGS: 00010246 [ 634.532000][T27024] RAX: 0000000000000000 RBX: 00005555944a4500 RCX: 00007fda5a55e90e [ 634.532009][T27024] RDX: 00007ffc278526b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 634.532017][T27024] RBP: 00007fda5a827da0 R08: 0000000000000000 R09: 0000000000000000 [ 634.532025][T27024] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000009b9cd [ 634.532033][T27024] R13: 00007fda5a825fac R14: 000000000009b6d6 R15: 00007ffc278527e0 [ 634.532052][T27024] [ 635.575700][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9894'. [ 635.636653][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9894'. [ 635.958986][T27024] memory: usage 3072kB, limit 3072kB, failcnt 63386 [ 635.982511][T27024] memory+swap: usage 3368kB, limit 9007199254740988kB, failcnt 0 [ 636.006693][T27069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9903'. [ 636.026918][T27024] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 636.053025][T27024] Memory cgroup stats for /syz4: [ 636.053421][T27024] cache 0 [ 636.090970][T27024] rss 0 [ 636.105147][T27024] rss_huge 0 [ 636.120325][T27024] shmem 0 [ 636.135784][T27024] mapped_file 0 [ 636.150709][T27024] dirty 0 [ 636.165042][T27024] writeback 0 [ 636.179153][T27024] workingset_refault_anon 10368 [ 636.201189][T27024] workingset_refault_file 0 [ 636.227258][T27024] swap 303104 [ 636.244280][T27024] swapcached 324784128 [ 636.264553][T27024] pgpgin 179762 [ 636.279441][T27024] pgpgout 183728 [ 636.298261][T27024] pgfault 525381 [ 636.315318][T27024] pgmajfault 5527 [ 636.330567][T27024] inactive_anon 0 [ 636.347505][T27024] active_anon 4096 [ 636.369301][T27024] inactive_file 0 [ 636.389292][T27024] active_file 0 [ 636.399811][T27024] unevictable 0 [ 636.414875][T27024] hierarchical_memory_limit 3145728 [ 636.438941][T27024] hierarchical_memsw_limit 9223372036854771712 [ 636.470586][T27024] total_cache 0 [ 636.494028][T27024] total_rss 0 [ 636.503825][T27024] total_rss_huge 0 [ 636.529221][T27024] total_shmem 0 [ 636.543370][T27024] total_mapped_file 0 [ 636.558336][T27024] total_dirty 0 [ 636.574830][T27024] total_writeback 0 [ 636.600438][T27024] total_workingset_refault_anon 10368 [ 636.619411][T27024] total_workingset_refault_file 0 [ 636.643028][T27024] total_swap 303104 [ 636.663409][T27024] total_swapcached 324784128 [ 636.686273][T27024] total_pgpgin 179762 [ 636.704634][T27024] total_pgpgout 183728 [ 636.720406][T27024] total_pgfault 525381 [ 636.739236][T27024] total_pgmajfault 5527 [ 636.758715][T27024] total_inactive_anon 0 [ 636.783483][T27024] total_active_anon 4096 [ 636.799930][T27024] total_inactive_file 0 [ 636.816863][T27024] total_active_file 0 [ 636.834530][T27024] total_unevictable 0 [ 636.857414][T27024] anon_cost 0 [ 636.870338][T27024] file_cost 0 [ 636.883483][T27024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9882,pid=27024,uid=0 [ 636.947958][T27024] Memory cgroup out of memory: Killed process 27024 (syz.4.9882) total-vm:104300kB, anon-rss:1248kB, file-rss:21004kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 637.669112][T27124] bridge0: port 3(dummy0) entered blocking state [ 637.699365][T27124] bridge0: port 3(dummy0) entered disabled state [ 637.732884][T27124] dummy0: entered allmulticast mode [ 637.758799][T27124] dummy0: entered promiscuous mode [ 637.789321][T27124] bridge0: port 3(dummy0) entered blocking state [ 637.795782][T27124] bridge0: port 3(dummy0) entered forwarding state [ 638.490715][T27150] FAULT_INJECTION: forcing a failure. [ 638.490715][T27150] name failslab, interval 1, probability 0, space 0, times 0 [ 638.553277][T27150] CPU: 0 UID: 0 PID: 27150 Comm: syz.4.9941 Tainted: G U L syzkaller #0 PREEMPT(full) [ 638.553306][T27150] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 638.553312][T27150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.553321][T27150] Call Trace: [ 638.553334][T27150] [ 638.553340][T27150] dump_stack_lvl+0x100/0x190 [ 638.553363][T27150] should_fail_ex.cold+0x5/0xa [ 638.553381][T27150] should_failslab+0xc2/0x120 [ 638.553403][T27150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 638.553421][T27150] ? security_inode_alloc+0x3b/0x2c0 [ 638.553438][T27150] ? sk_prot_alloc+0x60/0x2a0 [ 638.553456][T27150] sk_prot_alloc+0x60/0x2a0 [ 638.553472][T27150] sk_alloc+0x36/0xe80 [ 638.553492][T27150] smc_create+0x11a/0x290 [ 638.553514][T27150] __sock_create+0x339/0x860 [ 638.553534][T27150] __sys_socket+0x14d/0x260 [ 638.553550][T27150] ? __pfx___sys_socket+0x10/0x10 [ 638.553573][T27150] __x64_sys_socket+0x72/0xb0 [ 638.553588][T27150] ? lockdep_hardirqs_on+0x78/0x100 [ 638.553609][T27150] do_syscall_64+0x115/0x840 [ 638.553628][T27150] ? clear_bhb_loop+0x70/0xc0 [ 638.553646][T27150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.553661][T27150] RIP: 0033:0x7fda5a59e0d9 [ 638.553673][T27150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.553688][T27150] RSP: 002b:00007fda5b498028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 638.553702][T27150] RAX: ffffffffffffffda RBX: 00007fda5a825fa0 RCX: 00007fda5a59e0d9 [ 638.553716][T27150] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 638.553725][T27150] RBP: 00007fda5a635024 R08: 0000000000000000 R09: 0000000000000000 [ 638.553733][T27150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.553742][T27150] R13: 00007fda5a826038 R14: 00007fda5a825fa0 R15: 00007ffc27852578 [ 638.553761][T27150] [ 640.128254][T27173] bridge0: port 4(veth0_to_bridge) entered blocking state [ 640.168679][T27173] bridge0: port 4(veth0_to_bridge) entered disabled state [ 640.199950][T27173] veth0_to_bridge: entered allmulticast mode [ 640.237725][T27173] veth0_to_bridge: entered promiscuous mode [ 640.261448][T27173] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.324055][T27173] bridge0: port 4(veth0_to_bridge) entered blocking state [ 640.331301][T27173] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 641.219494][T27191] bridge0: port 4(ipvlan1) entered blocking state [ 641.251660][T27191] bridge0: port 4(ipvlan1) entered disabled state [ 641.285008][T27191] ipvlan1: entered allmulticast mode [ 641.329614][T27191] ipvlan1: left allmulticast mode [ 642.686490][T27247] netlink: 'syz.0.9983': attribute type 1 has an invalid length. [ 644.438082][T27311] netlink: 'syz.0.10013': attribute type 1 has an invalid length. [ 644.511336][T27311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10013'. [ 644.604445][T27311] netlink: 'syz.0.10013': attribute type 1 has an invalid length. [ 645.508939][ T30] audit: type=1800 audit(4294967494.210:47): pid=27335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10025" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 646.123552][T27355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10033'. [ 648.392268][T27402] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 648.575911][ T30] audit: type=1800 audit(4294967497.286:48): pid=27406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10056" name="lu_gp_id" dev="configfs" ino=82159 res=0 errno=0 [ 648.865044][T27410] ALUA LU Group already has a valid ID, ignoring request [ 649.053599][T27418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10062'. [ 649.815889][T27446] ovs_?: entered promiscuous mode [ 652.003571][T27511] netlink: 342 bytes leftover after parsing attributes in process `syz.4.10103'. [ 652.152073][T27517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10106'. [ 652.369360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.381732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.394122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.406369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.418620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.430845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.443120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.455337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.467592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.479838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.352411][ C0] net_ratelimit: 16647 callbacks suppressed [ 657.352427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.370686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.383102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.395374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.407631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.419887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.432173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.444433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.456678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.468986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.336490][ C0] net_ratelimit: 17243 callbacks suppressed [ 662.336508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.354641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.366944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.379211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.391460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.403661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.415934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.428168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.440400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.452608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.320560][ C0] net_ratelimit: 17564 callbacks suppressed [ 667.320578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.338721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.350960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.363177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.375428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.387710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.399943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.412159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.424410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.436613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.304864][ C0] net_ratelimit: 17587 callbacks suppressed [ 672.304885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.323066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.335299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.347560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.359849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.372127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.384453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.396688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.409004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.421289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.288919][ C0] net_ratelimit: 17536 callbacks suppressed [ 677.288935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.307090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.319324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.331547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.343760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.355974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.368173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.380402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.392663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.404989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.272792][ C0] net_ratelimit: 17522 callbacks suppressed [ 682.272809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.290942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.303155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.315378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.327580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.339838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.352042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.364294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.376506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.388729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.256934][ C0] net_ratelimit: 17542 callbacks suppressed [ 687.256951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.275120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.287391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.299623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.311865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.324088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.336279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.348511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.360725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.372969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.241204][ C0] net_ratelimit: 17508 callbacks suppressed [ 692.241221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.259446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.271737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.284004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.296216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.308932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.321147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.333419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.345643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.357885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.225141][ C0] net_ratelimit: 17560 callbacks suppressed [ 697.225157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.243351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.255570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.267797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.280012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.292257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.304457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.316672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.328881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.341186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.209112][ C0] net_ratelimit: 17555 callbacks suppressed [ 702.209129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.227272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.239510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.251729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.263961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.276184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.288406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.300607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.312857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.325128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.193343][ C0] net_ratelimit: 17579 callbacks suppressed [ 707.193360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.211510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.223753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.235991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.248195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.260456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.272663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.284905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.297115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.309341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.177299][ C0] net_ratelimit: 17580 callbacks suppressed [ 712.177322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.195481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.207782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.220035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.232238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.244482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.256732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.268980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.281621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.293887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.161475][ C0] net_ratelimit: 17838 callbacks suppressed [ 717.161491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.179658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.191883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.204111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.216348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.228641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.240964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.253227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.266037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.278334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.145573][ C0] net_ratelimit: 17834 callbacks suppressed [ 722.145588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.163831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.176053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.188287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.200502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.212742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.224983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.237244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.249458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.261702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.129759][ C0] net_ratelimit: 17669 callbacks suppressed [ 727.129775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.147973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.160191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.172492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.184757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.196951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.209222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.221463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.233634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.245848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.113668][ C0] net_ratelimit: 17583 callbacks suppressed [ 732.113685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.131819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.144057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.156341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.168522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.180743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.192970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.205162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.217410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.229651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.097682][ C0] net_ratelimit: 17768 callbacks suppressed [ 737.097700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.115868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.128092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.140341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.152528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.164728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.176968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.189140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.201347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.213567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.081843][ C0] net_ratelimit: 17802 callbacks suppressed [ 742.081860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.100050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.112309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.124558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.136794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.149058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.161294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.173516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.185768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.197965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.065944][ C0] net_ratelimit: 17705 callbacks suppressed [ 747.065961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.084108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.096360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.108557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.120778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.133014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.145200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.157469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.169720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.182004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.050018][ C0] net_ratelimit: 17563 callbacks suppressed [ 752.050036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.068148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.080365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.092611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.104791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.117025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.129243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.141535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.153759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.165986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.034213][ C0] net_ratelimit: 17763 callbacks suppressed [ 757.034230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.052398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.064631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.076805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.089007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.101299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.113505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.125701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.137933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.150137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.784454][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 760.791425][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5616/1:b..l P5596/3:b..l P27509/1:b..l [ 760.802152][ C0] rcu: (detected by 0, t=10502 jiffies, g=258885, q=667 ncpus=1) [ 760.809945][ C0] task:syz.0.10101 state:R running task stack:22424 pid:27509 tgid:27508 ppid:5610 task_flags:0x400940 flags:0x00080000 [ 760.824297][ C0] Call Trace: [ 760.827562][ C0] [ 760.830476][ C0] __schedule+0x125c/0x6730 [ 760.834979][ C0] ? psi_group_change+0x457/0xa20 [ 760.840005][ C0] ? find_held_lock+0x2b/0x80 [ 760.844665][ C0] ? enqueue_task+0x1dc/0x4f0 [ 760.849325][ C0] ? __pfx___schedule+0x10/0x10 [ 760.854157][ C0] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 760.860821][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 760.866888][ C0] preempt_schedule_notrace+0x5f/0xd0 [ 760.872246][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 760.878128][ C0] rcu_is_watching+0x8e/0xc0 [ 760.882701][ C0] lock_acquire+0x301/0x370 [ 760.887196][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 760.892389][ C0] rcu_lock_acquire.constprop.0+0x23/0x30 [ 760.898089][ C0] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 760.903906][ C0] mem_cgroup_iter+0x3f/0x6d0 [ 760.908589][ C0] shrink_node+0x3cf/0x3e90 [ 760.913080][ C0] ? __queue_work+0x380/0x12b0 [ 760.917863][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 760.923941][ C0] ? __pfx_shrink_node+0x10/0x10 [ 760.928862][ C0] ? queue_work_on+0x11b/0x1e0 [ 760.933622][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 760.938822][ C0] ? queue_work_on+0x141/0x1e0 [ 760.943575][ C0] ? vmpressure+0x1f6/0x370 [ 760.948064][ C0] ? do_try_to_free_pages+0x33e/0x16d0 [ 760.953509][ C0] do_try_to_free_pages+0x33e/0x16d0 [ 760.958784][ C0] ? __lock_acquire+0x49f/0x1a40 [ 760.963702][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 760.969407][ C0] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 760.975283][ C0] ? psi_group_change+0x457/0xa20 [ 760.980292][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 760.986692][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 760.991874][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 760.997062][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 761.002264][ C0] try_charge_memcg+0x47f/0xdf0 [ 761.007104][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 761.012472][ C0] ? find_held_lock+0x2b/0x80 [ 761.017131][ C0] ? rcu_read_unlock+0x17/0x60 [ 761.021888][ C0] ? rcu_read_unlock+0x17/0x60 [ 761.026635][ C0] ? find_held_lock+0x2b/0x80 [ 761.031296][ C0] ? rcu_read_unlock+0x17/0x60 [ 761.036047][ C0] charge_memcg+0x187/0x1e0 [ 761.040537][ C0] __mem_cgroup_charge+0x2b/0x1c0 [ 761.045550][ C0] do_anonymous_page+0xb53/0x2080 [ 761.050556][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 761.055321][ C0] __handle_mm_fault+0x1d2c/0x2a00 [ 761.060414][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 761.065770][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 761.071208][ C0] ? pte_offset_map_lock+0x174/0x320 [ 761.076491][ C0] ? find_held_lock+0x2b/0x80 [ 761.081154][ C0] ? follow_page_pte+0x4d0/0x13f0 [ 761.086166][ C0] handle_mm_fault+0x37b/0xa30 [ 761.090913][ C0] __get_user_pages+0x1178/0x32a0 [ 761.095928][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 761.101292][ C0] populate_vma_page_range+0x267/0x3f0 [ 761.106830][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 761.112796][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 761.118587][ C0] ? do_mmap+0x93f/0x12f0 [ 761.122904][ C0] __mm_populate+0x107/0x3a0 [ 761.127482][ C0] ? __pfx___mm_populate+0x10/0x10 [ 761.132665][ C0] ? up_write+0x2e5/0x5c0 [ 761.136978][ C0] vm_mmap_pgoff+0x37f/0x470 [ 761.141553][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 761.146669][ C0] ? find_held_lock+0x2b/0x80 [ 761.151334][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 761.157736][ C0] ksys_mmap_pgoff+0xe4/0x610 [ 761.162400][ C0] ? find_held_lock+0x2b/0x80 [ 761.167059][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 761.172325][ C0] ? exc_page_fault+0x6f/0xd0 [ 761.176989][ C0] __x64_sys_mmap+0x125/0x190 [ 761.181654][ C0] do_syscall_64+0x115/0x840 [ 761.186229][ C0] ? clear_bhb_loop+0x70/0xc0 [ 761.190891][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.196775][ C0] RIP: 0033:0x7fa799f9e0d9 [ 761.201186][ C0] RSP: 002b:00007fa79aede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 761.209586][ C0] RAX: ffffffffffffffda RBX: 00007fa79a225fa0 RCX: 00007fa799f9e0d9 [ 761.217557][ C0] RDX: 000000000000005f RSI: 0000000000400008 RDI: 0000000000000000 [ 761.225515][ C0] RBP: 00007fa79a035024 R08: ffffffffffffffff R09: 0000000000008000 [ 761.233468][ C0] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 761.241416][ C0] R13: 00007fa79a226038 R14: 00007fa79a225fa0 R15: 00007ffe4bb9b588 [ 761.249382][ C0] [ 761.252384][ C0] task:syz-executor state:R running task stack:22240 pid:5596 tgid:5596 ppid:5595 task_flags:0x400100 flags:0x00080000 [ 761.265857][ C0] Call Trace: [ 761.269114][ C0] [ 761.272029][ C0] __schedule+0x125c/0x6730 [ 761.276523][ C0] ? dev_queue_xmit_nit+0x690/0xa60 [ 761.281799][ C0] ? find_held_lock+0x2b/0x80 [ 761.286465][ C0] ? sch_direct_xmit+0x395/0xc70 [ 761.291406][ C0] ? sch_direct_xmit+0x395/0xc70 [ 761.296330][ C0] ? __pfx___schedule+0x10/0x10 [ 761.301164][ C0] ? sch_direct_xmit+0x23f/0xc70 [ 761.306177][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 761.311535][ C0] preempt_schedule_common+0x42/0xc0 [ 761.316810][ C0] preempt_schedule_thunk+0x16/0x40 [ 761.321998][ C0] ? __dev_queue_xmit+0xa12/0x4970 [ 761.327105][ C0] __local_bh_enable_ip+0xff/0x120 [ 761.332200][ C0] ? __dev_queue_xmit+0xa12/0x4970 [ 761.337292][ C0] __dev_queue_xmit+0xa27/0x4970 [ 761.342219][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 761.347576][ C0] ? __lock_acquire+0x49f/0x1a40 [ 761.352494][ C0] ? find_held_lock+0x2b/0x80 [ 761.357168][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 761.362370][ C0] ? find_held_lock+0x2b/0x80 [ 761.367067][ C0] ip_finish_output2+0xf4a/0x2400 [ 761.372165][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 761.377614][ C0] ? skb_gso_transport_seglen+0x1a5/0x3b0 [ 761.383371][ C0] __ip_finish_output.part.0+0x444/0x6f0 [ 761.388997][ C0] ip_output+0x39b/0xc10 [ 761.393226][ C0] ? __pfx_ip_output+0x10/0x10 [ 761.397981][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 761.403340][ C0] ? __pfx_ip_output+0x10/0x10 [ 761.408090][ C0] ip_local_out+0x193/0x1f0 [ 761.412581][ C0] __ip_queue_xmit+0x885/0x1e90 [ 761.417421][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 761.422520][ C0] __tcp_transmit_skb+0x3506/0x4f20 [ 761.427758][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 761.433298][ C0] ? kmalloc_reserve+0xf9/0x350 [ 761.438144][ C0] tcp_write_xmit+0x1130/0x8470 [ 761.442993][ C0] ? skb_release_data+0x6ca/0x8e0 [ 761.448015][ C0] __tcp_push_pending_frames+0xaf/0x3b0 [ 761.453555][ C0] tcp_rcv_established+0x1221/0x3990 [ 761.458902][ C0] ? find_held_lock+0x2b/0x80 [ 761.463569][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 761.469197][ C0] tcp_v4_do_rcv+0xbb6/0x1260 [ 761.473883][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 761.478981][ C0] __release_sock+0x35a/0x440 [ 761.483648][ C0] release_sock+0x1e5/0x280 [ 761.488156][ C0] tcp_sendmsg+0x38/0x50 [ 761.492392][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 761.497313][ C0] inet_sendmsg+0xb9/0x140 [ 761.501727][ C0] sock_write_iter+0x4ea/0x5b0 [ 761.506480][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 761.511508][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 761.516790][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 761.522152][ C0] ? security_file_permission+0x76/0x210 [ 761.527799][ C0] ? rw_verify_area+0xce/0x6d0 [ 761.532563][ C0] vfs_write+0x6ac/0x1050 [ 761.536877][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 761.542168][ C0] ? __pfx_vfs_write+0x10/0x10 [ 761.546921][ C0] ? find_held_lock+0x2b/0x80 [ 761.551587][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 761.557989][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 761.564393][ C0] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 761.570888][ C0] ksys_write+0x1f8/0x250 [ 761.575207][ C0] ? __pfx_ksys_write+0x10/0x10 [ 761.580045][ C0] do_syscall_64+0x115/0x840 [ 761.584621][ C0] ? clear_bhb_loop+0x70/0xc0 [ 761.589280][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.595155][ C0] RIP: 0033:0x7f3ee4759257 [ 761.599547][ C0] RSP: 002b:00007ffdbfa6c720 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 761.607940][ C0] RAX: ffffffffffffffda RBX: 000055556157f540 RCX: 00007f3ee4759257 [ 761.615894][ C0] RDX: 0000000000006f08 RSI: 00007f3edf5f90f8 RDI: 0000000000000003 [ 761.623845][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.631793][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000006f08 [ 761.639744][ C0] R13: 0000555561597660 R14: 00007ffdbfa6ccc0 R15: 00007f3edf5f90f8 [ 761.647707][ C0] [ 761.650708][ C0] task:syz-executor state:R running task stack:22856 pid:5616 tgid:5616 ppid:5603 task_flags:0x400140 flags:0x00080000 [ 761.664170][ C0] Call Trace: [ 761.667427][ C0] [ 761.670339][ C0] __schedule+0x125c/0x6730 [ 761.674832][ C0] ? find_held_lock+0x2b/0x80 [ 761.679496][ C0] ? page_table_check_set+0x30f/0x580 [ 761.684853][ C0] ? page_table_check_set+0x30f/0x580 [ 761.690212][ C0] ? __pfx___schedule+0x10/0x10 [ 761.695049][ C0] ? find_held_lock+0x2b/0x80 [ 761.699709][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 761.705096][ C0] preempt_schedule_common+0x42/0xc0 [ 761.710378][ C0] preempt_schedule_thunk+0x16/0x40 [ 761.715570][ C0] _raw_spin_unlock+0x3e/0x50 [ 761.720229][ C0] copy_page_range+0x1c1f/0x5b20 [ 761.725172][ C0] ? mas_wr_store_entry+0xa1/0x1e80 [ 761.730352][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 761.735631][ C0] ? __pfx___might_resched+0x10/0x10 [ 761.740910][ C0] ? dup_mmap+0xcfe/0x21b0 [ 761.745319][ C0] ? down_write+0x146/0x1f0 [ 761.749816][ C0] ? up_write+0x2e5/0x5c0 [ 761.754130][ C0] dup_mmap+0xd44/0x21b0 [ 761.758367][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 761.763049][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 761.768855][ C0] ? __lock_acquire+0x49f/0x1a40 [ 761.773781][ C0] ? find_held_lock+0x2b/0x80 [ 761.778440][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 761.784408][ C0] copy_process+0x4588/0x8030 [ 761.789081][ C0] ? __pfx_copy_process+0x10/0x10 [ 761.794089][ C0] ? do_raw_spin_lock+0x128/0x260 [ 761.799103][ C0] kernel_clone+0x176/0x9d0 [ 761.803589][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 761.808603][ C0] ? find_held_lock+0x2b/0x80 [ 761.813263][ C0] ? __might_fault+0xc5/0x140 [ 761.817922][ C0] __do_sys_clone+0xd9/0x120 [ 761.822494][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 761.827689][ C0] do_syscall_64+0x115/0x840 [ 761.832263][ C0] ? clear_bhb_loop+0x70/0xc0 [ 761.836922][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.842793][ C0] RIP: 0033:0x7fb973fc6b52 [ 761.847184][ C0] RSP: 002b:00007ffd1168d050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 761.855574][ C0] RAX: ffffffffffffffda RBX: 00007ffd1168d050 RCX: 00007fb973fc6b52 [ 761.863528][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 761.871478][ C0] RBP: 00007ffd1168d1dc R08: 0000000000000000 R09: 0000000000000001 [ 761.879514][ C0] R10: 00005555874ab7d0 R11: 0000000000000246 R12: 0000000000000001 [ 761.887463][ C0] R13: 00000000000927c0 R14: 000000000009fe38 R15: 00007ffd1168d230 [ 761.895421][ C0] [ 761.898430][ C0] rcu: rcu_preempt kthread starved for 332 jiffies! g258885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 761.909513][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 761.919456][ C0] rcu: RCU grace-period kthread stack dump: [ 761.925317][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 761.938778][ C0] Call Trace: [ 761.942034][ C0] [ 761.944945][ C0] __schedule+0x125c/0x6730 [ 761.949458][ C0] ? __pfx___schedule+0x10/0x10 [ 761.954290][ C0] ? find_held_lock+0x2b/0x80 [ 761.958948][ C0] ? schedule+0x225/0x2c0 [ 761.963263][ C0] schedule+0xdd/0x2c0 [ 761.967312][ C0] schedule_timeout+0x127/0x280 [ 761.972143][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 761.977502][ C0] ? __pfx_process_timeout+0x10/0x10 [ 761.982773][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 761.988560][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 761.994007][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 761.998758][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 762.004027][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 762.008951][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 762.014130][ C0] ? rcu_is_watching+0x12/0xc0 [ 762.018876][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.024664][ C0] rcu_gp_kthread+0x179/0x230 [ 762.029323][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 762.034503][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.040289][ C0] ? __kthread_parkme+0x18c/0x230 [ 762.045295][ C0] ? kthread+0x13a/0x450 [ 762.049523][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 762.054704][ C0] kthread+0x370/0x450 [ 762.058756][ C0] ? __pfx_kthread+0x10/0x10 [ 762.063326][ C0] ret_from_fork+0x72b/0xd50 [ 762.067899][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 762.072991][ C0] ? __switch_to+0x800/0x10f0 [ 762.077645][ C0] ? __switch_to_asm+0x39/0x70 [ 762.082390][ C0] ? __pfx_kthread+0x10/0x10 [ 762.086964][ C0] ret_from_fork_asm+0x1a/0x30 [ 762.091719][ C0] [ 762.094725][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 762.101042][ C0] CPU: 0 UID: 0 PID: 3217 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full) [ 762.112303][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 762.117473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 762.127510][ C0] Workqueue: bat_events batadv_tt_purge [ 762.133125][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 762.138300][ C0] Code: 05 fb 52 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 3d 3c 0f 0f 82 ac 02 00 00 8b 35 2e 71 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 52 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 762.157884][ C0] RSP: 0018:ffffc90000006510 EFLAGS: 00000206 [ 762.163933][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 762.171879][ C0] RDX: 0000000000000000 RSI: ffffffff8e17ce3f RDI: ffffffff8c3fe580 [ 762.179829][ C0] RBP: ffffffff8ebe8000 R08: 000000003e75f6af R09: 0000000000000007 [ 762.187776][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 762.195721][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 762.203686][ C0] FS: 0000000000000000(0000) GS:ffff888123df3000(0000) knlGS:0000000000000000 [ 762.212595][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.219158][ C0] CR2: 00007f3edf000218 CR3: 000000007fbb4000 CR4: 00000000003526f0 [ 762.227123][ C0] Call Trace: [ 762.230380][ C0] [ 762.233206][ C0] ? unwind_next_frame+0x3be/0x2090 [ 762.238392][ C0] ? unwind_next_frame+0x3be/0x2090 [ 762.243575][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 762.249713][ C0] unwind_next_frame+0xd1/0x2090 [ 762.254640][ C0] ? unwind_next_frame+0xbd/0x2090 [ 762.259745][ C0] ? br_flood+0x29b/0x7b0 [ 762.264118][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 762.270255][ C0] arch_stack_walk+0x94/0xf0 [ 762.274833][ C0] ? br_flood+0x29b/0x7b0 [ 762.279148][ C0] ? kfree_skbmem+0x19a/0x210 [ 762.283822][ C0] stack_trace_save+0x8e/0xc0 [ 762.288483][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 762.293834][ C0] ? __lock_acquire+0x49f/0x1a40 [ 762.298753][ C0] ? __lock_acquire+0x49f/0x1a40 [ 762.303701][ C0] kasan_save_stack+0x30/0x50 [ 762.308366][ C0] ? kasan_save_stack+0x30/0x50 [ 762.313198][ C0] ? kasan_save_track+0x14/0x30 [ 762.318032][ C0] ? kasan_save_free_info+0x3b/0x70 [ 762.323211][ C0] ? __kasan_slab_free+0x5f/0x80 [ 762.328136][ C0] ? kmem_cache_free+0x127/0x6b0 [ 762.333056][ C0] ? kfree_skbmem+0x19a/0x210 [ 762.337709][ C0] ? consume_skb+0xd1/0x110 [ 762.342198][ C0] ? dummy_xmit+0x154/0x1c0 [ 762.346761][ C0] ? dev_hard_start_xmit+0x121/0x760 [ 762.352028][ C0] ? __dev_queue_xmit+0x1bbf/0x4970 [ 762.357206][ C0] ? br_dev_queue_push_xmit+0x361/0x530 [ 762.362735][ C0] ? br_nf_dev_queue_xmit+0x73b/0x2730 [ 762.368171][ C0] ? br_nf_post_routing+0xcbb/0x16a0 [ 762.373435][ C0] ? nf_hook_slow+0xbf/0x220 [ 762.378045][ C0] ? br_forward_finish+0x261/0x4d0 [ 762.383154][ C0] ? br_nf_hook_thresh+0x30d/0x420 [ 762.388261][ C0] ? br_nf_forward_finish+0x693/0xb30 [ 762.393621][ C0] ? br_nf_forward_ip.part.0+0x61e/0x820 [ 762.399242][ C0] ? br_nf_forward+0xfe5/0x19f0 [ 762.404077][ C0] ? nf_hook_slow+0xbf/0x220 [ 762.408650][ C0] ? __br_forward+0x2f7/0x970 [ 762.413316][ C0] ? maybe_deliver+0xf0/0x180 [ 762.417978][ C0] ? br_flood+0x29b/0x7b0 [ 762.422311][ C0] kasan_save_track+0x14/0x30 [ 762.426972][ C0] kasan_save_free_info+0x3b/0x70 [ 762.431974][ C0] __kasan_slab_free+0x5f/0x80 [ 762.436718][ C0] kmem_cache_free+0x127/0x6b0 [ 762.441463][ C0] ? skb_release_data+0x6ca/0x8e0 [ 762.446477][ C0] kfree_skbmem+0x19a/0x210 [ 762.451060][ C0] consume_skb+0xd1/0x110 [ 762.455406][ C0] dummy_xmit+0x154/0x1c0 [ 762.459730][ C0] dev_hard_start_xmit+0x121/0x760 [ 762.464831][ C0] __dev_queue_xmit+0x1bbf/0x4970 [ 762.469851][ C0] ? do_softirq+0xac/0xe0 [ 762.474164][ C0] ? __local_bh_enable_ip+0xf8/0x120 [ 762.479431][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 762.484352][ C0] ? process_one_work+0xa23/0x1940 [ 762.489464][ C0] ? rescuer_thread+0x905/0x14a0 [ 762.494387][ C0] ? kthread+0x370/0x450 [ 762.498616][ C0] ? ret_from_fork+0x72b/0xd50 [ 762.503368][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 762.508733][ C0] ? __skb_ext_put+0x102/0x2f0 [ 762.513476][ C0] ? mark_held_locks+0x40/0x70 [ 762.518225][ C0] ? kasan_quarantine_put+0x104/0x240 [ 762.523579][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 762.528765][ C0] ? __skb_ext_put+0x102/0x2f0 [ 762.533506][ C0] ? kmem_cache_free+0x127/0x6b0 [ 762.538446][ C0] ? __skb_ext_put+0x107/0x2f0 [ 762.543193][ C0] br_dev_queue_push_xmit+0x361/0x530 [ 762.548554][ C0] br_nf_dev_queue_xmit+0x73b/0x2730 [ 762.553824][ C0] ? find_held_lock+0x2b/0x80 [ 762.558486][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 762.564199][ C0] ? br_nf_post_routing+0xafb/0x16a0 [ 762.569478][ C0] br_nf_post_routing+0xcbb/0x16a0 [ 762.574570][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 762.580096][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 762.585792][ C0] ? lock_acquire+0x1b9/0x370 [ 762.590451][ C0] nf_hook_slow+0xbf/0x220 [ 762.594856][ C0] br_forward_finish+0x261/0x4d0 [ 762.599779][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 762.605225][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 762.611105][ C0] ? nf_hook_slow+0x167/0x220 [ 762.615780][ C0] br_nf_hook_thresh+0x30d/0x420 [ 762.620702][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 762.626145][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 762.631582][ C0] ? lock_acquire+0x1b9/0x370 [ 762.636238][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 762.641679][ C0] ? net_generic+0xea/0x2a0 [ 762.646170][ C0] br_nf_forward_finish+0x693/0xb30 [ 762.651349][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 762.656812][ C0] br_nf_forward_ip.part.0+0x61e/0x820 [ 762.662258][ C0] br_nf_forward+0xfe5/0x19f0 [ 762.666915][ C0] nf_hook_slow+0xbf/0x220 [ 762.671313][ C0] __br_forward+0x2f7/0x970 [ 762.675803][ C0] ? __pfx___br_forward+0x10/0x10 [ 762.680827][ C0] ? __asan_memcpy+0x3c/0x60 [ 762.685402][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 762.690843][ C0] ? __skb_clone+0x570/0x760 [ 762.695419][ C0] maybe_deliver+0xf0/0x180 [ 762.699912][ C0] br_flood+0x29b/0x7b0 [ 762.704056][ C0] br_handle_frame_finish+0x1014/0x1fa0 [ 762.709647][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 762.715523][ C0] ? __lock_acquire+0x49f/0x1a40 [ 762.720442][ C0] ? nf_hook_slow+0x167/0x220 [ 762.725098][ C0] br_nf_hook_thresh+0x30d/0x420 [ 762.730014][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 762.735889][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 762.741326][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 762.747197][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 762.753073][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 762.758950][ C0] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 762.764910][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 762.770784][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 762.776139][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 762.782011][ C0] ? lock_acquire+0x1b9/0x370 [ 762.786667][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 762.793152][ C0] ? net_generic+0xea/0x2a0 [ 762.797637][ C0] br_nf_pre_routing+0x90f/0x1560 [ 762.802646][ C0] br_handle_frame+0xce9/0x1540 [ 762.807481][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 762.812751][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 762.818626][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 762.823888][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 762.830552][ C0] ? kmem_cache_free+0x127/0x6b0 [ 762.835467][ C0] ? skb_release_data+0x6ca/0x8e0 [ 762.840480][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 762.847570][ C0] ? kfree_skbmem+0x19f/0x210 [ 762.852227][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 762.857413][ C0] ? ip6_mc_input+0x51a/0xf50 [ 762.862069][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 762.867080][ C0] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 762.873046][ C0] ? __lock_acquire+0x49f/0x1a40 [ 762.877964][ C0] ? process_backlog+0x32a/0x1580 [ 762.882967][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 762.888753][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 762.895164][ C0] ? lock_acquire+0x1b9/0x370 [ 762.899834][ C0] ? process_backlog+0x32a/0x1580 [ 762.904857][ C0] ? process_backlog+0x32a/0x1580 [ 762.909873][ C0] __netif_receive_skb+0x1f/0x120 [ 762.914890][ C0] process_backlog+0x37a/0x1580 [ 762.919734][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 762.925090][ C0] net_rx_action+0xa40/0xf20 [ 762.929666][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 762.934757][ C0] ? mark_held_locks+0x40/0x70 [ 762.939513][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 762.944696][ C0] ? tmigr_handle_remote+0x132/0x380 [ 762.949972][ C0] ? run_timer_base+0x121/0x190 [ 762.954810][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 762.959995][ C0] handle_softirqs+0x1ea/0x9b0 [ 762.964739][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 762.970004][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 762.975289][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 762.980210][ C0] do_softirq+0xac/0xe0 [ 762.984363][ C0] [ 762.987274][ C0] [ 762.990189][ C0] __local_bh_enable_ip+0xf8/0x120 [ 762.995291][ C0] batadv_tt_purge+0x25d/0xbd0 [ 763.000040][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 763.005312][ C0] ? rcu_is_watching+0x12/0xc0 [ 763.010064][ C0] process_one_work+0xa23/0x1940 [ 763.014995][ C0] ? __pfx_process_one_work+0x10/0x10 [ 763.020357][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 763.025649][ C0] rescuer_thread+0x905/0x14a0 [ 763.030403][ C0] ? rescuer_thread+0x240/0x14a0 [ 763.035324][ C0] ? rescuer_thread+0x118/0x14a0 [ 763.040245][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 763.045428][ C0] ? __kthread_parkme+0x18c/0x230 [ 763.050435][ C0] ? kthread+0x13a/0x450 [ 763.054658][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 763.059838][ C0] kthread+0x370/0x450 [ 763.063890][ C0] ? __pfx_kthread+0x10/0x10 [ 763.068463][ C0] ret_from_fork+0x72b/0xd50 [ 763.073035][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 763.078129][ C0] ? __switch_to+0x800/0x10f0 [ 763.082784][ C0] ? __switch_to_asm+0x39/0x70 [ 763.087532][ C0] ? __pfx_kthread+0x10/0x10 [ 763.092108][ C0] ret_from_fork_asm+0x1a/0x30 [ 763.096864][ C0] [ 763.100480][ C0] net_ratelimit: 13366 callbacks suppressed [ 763.100493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.118629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.130855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.143123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.155341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.167562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.179841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.192046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.204288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.216518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.324413][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 763.339192][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 763.646909][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 763.662026][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 768.076681][ C0] net_ratelimit: 10195 callbacks suppressed [ 768.076698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.094905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.107630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.119917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.132216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.144455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.156763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.169055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.181278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.193544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)