last executing test programs: 14.443516005s ago: executing program 1 (id=2429): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) r2 = prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r2, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4dc8e2f56ac8a0bc5866") r3 = socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x0) landlock_restrict_self$auto(r0, 0xfffffffe) mmap$auto(0xc8, 0xe2, 0x40000000000, 0xeb1, r0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0x5, &(0x7f0000000400)="848dc0b5870da79b972b59e85497782c70c28dc29547caaac82c19437eaaf7b5c3b7741442f4d7e906302a9c07db8e49f47c0a66446646ebc25030a7556c26467ed13bfecc127996a7c5a59ebad6d614e40cda6c952a1e004c451257aa0eca6b9ad87c4401216b078c4d86bc97dd2d8990609bcd0720b6762ce0", 0x8) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x119280, 0x0) r4 = getpid() ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.9/usb27/27-0:1.0/usb27-port2/uevent\x00', 0x2400, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d0008000700"/18, @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/max_active\x00', 0x1ab102, 0x0) write$auto(r5, &(0x7f00000000c0)='\x00', 0x7) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x15, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRESDEC=r3], 0x1ac}}, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0xffffeffc, &(0x7f0000000100)={&(0x7f0000000140), 0x184}, 0x2, &(0x7f00000004c0)="0f24b7682c86e17ee792dfd267d4853f8fe1ae0c0b93ec10017f000652534b0029f6ba66acd726362fe84cd3ac292aeb8805d2374e0bd6b87f155211c026dfe807a44bff26a573127ea8ed2ef818ed0ec5fdbb84989dc21148107b20a54e53a8e5a77d38b94c90dc77dca7353493fb6376b5f73fab7a297783bb09a6b2fb27b324b453401f4dcd90deb9d644c96796933abff35b726775560fa92682", 0x7, 0xa505}, 0x800}, 0x7, 0x6) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r4, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop6\x00', 0x101202, 0x0) 13.375059898s ago: executing program 1 (id=2440): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) write$auto(r0, &(0x7f0000000000)='/dev/loop6\x00', 0x6) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x2, 0xfffffffffffffff7, 0x3, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/config.gz\x00', 0x20000, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="21032cbd700075dbdf2539000000ae827bd1273ca7b9a600"/37], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8800) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x1, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x4, 0xffffffffffff7fff, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x1, 0x9, 0xf, 0xa657, 0x203, 0x5, 0x3]}, 0x0, 0x0, 0x0) 12.328581812s ago: executing program 1 (id=2434): recvmsg$auto(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x20801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80402, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x200008, 0x6, 0x3) keyctl$auto(0x3, 0xffffffffffffffff, 0x2, 0x3b, 0x9) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) poll$auto(0x0, 0x5, 0x108) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) epoll_create$auto(0x3e) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto_SO_PASSSEC(r2, 0x6, 0x22, &(0x7f0000000140)=']\x00', 0xb) ioctl$auto(r1, 0x89f0, r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r3, 0x0, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) read$auto(r4, &(0x7f00000003c0)=']%\'\x00', 0x5) 10.662705245s ago: executing program 1 (id=2438): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/msr/msr0/uevent\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/123, 0x7b) mknod$auto(&(0x7f0000000100)='.\x00', 0x1001, 0x4000004) access$auto(&(0x7f0000000140)='./file0\x00', 0x6) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r1 = socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x565) r2 = semctl$auto_GETPID(0x7, 0x1000, 0xb, 0x2) r3 = prctl$auto(0x1000000003b, 0x2, r2, 0xfffffffffffffff8, 0x7) r4 = getpgid$auto(0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={"80cf4eec18f15454e843889284925ec9ad3e8fc8ebaab7b03087d820a743b39e", 0xf, 0x1, 0x95, 0x0, 0xfffffffffffffffa, r4}) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r7 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r5, r8, 0x10, 0x1ff, r7, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0x91) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) 10.366929283s ago: executing program 1 (id=2441): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x2000, 0x0) pread64$auto(r0, 0x0, 0xe, 0x400010000005) (fail_nth: 2) 8.867575997s ago: executing program 1 (id=2445): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0xc, 0xffff) r2 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r0, 0x1, r2, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, r0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/dev_snmp6/macvtap0\x00', 0x2000, 0x0) socket(0x22, 0x3, 0x0) ioctl$auto(0x3, 0x80044944, 0x10000000000402) pread64$auto(r4, 0x0, 0x200000005, 0x3) 6.908596616s ago: executing program 0 (id=2452): recvmsg$auto(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x20801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80402, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x200008, 0x6, 0x3) keyctl$auto(0x3, 0xffffffffffffffff, 0x2, 0x3b, 0x9) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) poll$auto(0x0, 0x5, 0x108) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) epoll_create$auto(0x3e) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto_SO_PASSSEC(r2, 0x6, 0x22, &(0x7f0000000140)=']\x00', 0xb) ioctl$auto(r1, 0x89f0, r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r3, 0x0, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) read$auto(r4, &(0x7f00000003c0)=']%\'\x00', 0x5) 5.481461228s ago: executing program 0 (id=2454): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex=r0, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1474a7f57e3ccbf8ffffffffffffffbf4e6e0c322546db9807d80a1804d86c832a44f2ad20baea31dbd064b0fde8f554e05e02d4a40100366661415017bc84df18abccfc8b67617ee23e0669b23d89378d046e1bf28df9a5d1837e28237eb740a0168aa693de3ec4ff53cb24106cd69f4e91e6806d5a39ee175dd6a35801f54b71a8267fc9b321f3c5adaef25a3bae2a2305d0272d363bb926f82696c7fa658d5d656d637e29f7ea8f2d5b106f218ffe96eb1c75c1c4fa225f37", @ANYRES16, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x2, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) r5 = socket(0xa, 0x5, 0x0) getsockopt$auto(r5, 0x84, 0x24, 0x0, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff88, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r4, 0x77bed28568c43d3b, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) r6 = socket(0x2, 0x801, 0x84) getsockopt$auto(r6, 0x84, 0x6d, 0x0, &(0x7f00000002c0)=0x8) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000002c0), r2) mprotect$auto(0x1, 0x8, 0x100000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.44402104s ago: executing program 3 (id=2456): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime$auto(0x200, 0xb746, &(0x7f0000000000)={{0x4d4, 0x5}, {0xfc, 0x5}}, 0x0) r0 = socket(0xa, 0x5, 0x84) socket(0x26, 0x80000, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) ioctl$auto_SNAPSHOT_POWER_OFF(0xffffffffffffffff, 0xc0045878, 0x0) mmap$auto(0x40000000000000, 0x2020006, 0x3, 0xeb1, r0, 0x8002) close_range$auto(0x2, 0x8, 0x0) r1 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) pwritev2$auto(r1, &(0x7f00000000c0)={0x0, 0x8}, 0x100, 0x2, 0x9, 0x43) r2 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x7, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfd6f) shutdown$auto(r2, 0x2) write$auto(0x3, 0x0, 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x4008) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) r4 = fanotify_init$auto(0x605, 0x1) ioctl$auto_NS_GET_NSTYPE(r4, 0xb703, 0x0) 5.033954868s ago: executing program 2 (id=2457): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x9) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xc}, 0x800008}, 0x5, 0x20000000) r1 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24004881}, 0x2000c840) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x3}, 0xfffffffa}, 0x3, 0xaa) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f0000000140)="bb3aa900d37d", 0x6) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) timer_create$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x101085) 5.033670868s ago: executing program 3 (id=2458): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x9) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xc}, 0x800008}, 0x5, 0x20000000) r1 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24004881}, 0x2000c840) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x3}, 0xfffffffa}, 0x3, 0xaa) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f0000000140)="bb3aa900d37d", 0x6) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) timer_create$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x101085) 3.173278982s ago: executing program 0 (id=2459): recvmsg$auto(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x20801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80402, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x200008, 0x6, 0x3) keyctl$auto(0x3, 0xffffffffffffffff, 0x2, 0x3b, 0x9) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) poll$auto(0x0, 0x5, 0x108) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto_SO_PASSSEC(r2, 0x6, 0x22, &(0x7f0000000140)=']\x00', 0xb) ioctl$auto(r1, 0x89f0, r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r3, 0x0, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) read$auto(r4, &(0x7f00000003c0)=']%\'\x00', 0x5) 2.959798121s ago: executing program 2 (id=2460): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xc9}) 2.907563729s ago: executing program 3 (id=2461): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x2000, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1\x00', 0xc2000, 0x0) mq_notify$auto(r0, &(0x7f0000001100)={@sival_int=0x3ff, @inferred=r0, 0x7, @_sigev_thread={&(0x7f0000001080)=&(0x7f0000001040), &(0x7f00000010c0)="a663765974d812e9365546357849bdbb2d2f7f6f6cbc9e1e5d81011ec627c254d65af02c49ab1b0165e28dd85d1b9b95e77562d8d3c914550f4c2375b9ae"}}) ioctl$auto(r2, 0x4611, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/usb/drivers/peak_usb/new_id\x00', 0x101000, 0x0) statmount$auto(0x0, &(0x7f00000013c0)={0x7, 0x2, 0x6, 0x7, 0x84, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xfffffffeffffffff, 0xffff, 0x2008000001, 0x10000, 0x80, 0x8, 0x6d7d01bf, 0x7, 0x0, 0x9, 0x4, 0x3, 0x3, 0xff, 0x0, 0x4, 0xffffffe0, [0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0xffffffffffffffff, 0x0, 0x80000001, 0x0, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x5, 0x7, 0x0, 0x4, 0x8000000000, 0x400000003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200a) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) writev$auto(r3, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x100000000000038, 0x0) r4 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3) bind$auto(0x3, 0x0, 0x9) pread64$auto(r0, 0x0, 0xe, 0x400010000005) readv$auto(r0, &(0x7f0000000180)={&(0x7f0000000040)="a147a67199ae478d0f6f25353fc5b18dd7d02aeec5b99514261596a6d63e427b0679c9f2ace5841e4e69a6df4fcea480fdd5f1f6ecbf7045af4464257f546f97f36f4c1624f8470f88a853408a5b001f62b7d660ea8317d752c91d9f64f0dd1771abe7d141940b009b11bcb0feff20e00cbde9be9ccb53fe244f563a3db562262ffbbc5072b5c41cb655bb8af2ea77d36b77c7f8018941210575a8b02eec40714cb66635deaaf351a5012050ab325cc86910f788e8ee4d254e961c26697b37fa02", 0x80000001}, 0x4) 2.633088767s ago: executing program 2 (id=2462): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/netfs/cookies\x00', 0x2000, 0x0) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/available_events\x00', 0x22283, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x2cb8, 0x401, 0x300000000000) open(&(0x7f0000000140)='./file0\x00', 0x840, 0x140) r2 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r2, 0x0, 0x7, 0xb) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, &(0x7f0000000000)=""/153, 0x99) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) bind$auto(r0, &(0x7f00000000c0)=@nfc={0x27, r3, 0x1, 0x2}, 0x2) pread64$auto(r1, 0x0, 0x200000005, 0x3) 2.38569439s ago: executing program 2 (id=2463): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa84}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) 1.835471634s ago: executing program 0 (id=2464): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c?\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0xa0840, 0x0) ioctl$auto(r1, 0x540a, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000001740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f0000000580)={0x1144, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_MAC={0x1004, 0x6, "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"}, @NL80211_ATTR_PMKR0_NAME={0x6f, 0x102, "aaac59fbfd95bbb5a037a785b9a4e0e0e1a659dfa3c7b1b6cf17e2ab98764d6522d0105dc3c6a8b6fac46ccab70e24aa3d13e303a339a498ab3221891cc13a8850e90ffe04ee07684348b891aef5c8410a94b2a752e4939c558c1aad606d98b9f936afd16613f0e3fc3fff"}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, "8f8e49dcb7f559f78f3d"}, @NL80211_ATTR_FILS_DISCOVERY={0x68, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x1}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x7fff}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x101}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x1d, 0x3, "93630f2c3093822fc76bc6c66252ad1fa1d1dbe5f46aca9d88"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x21, 0x3, "ef14243132fe5ce29cab446587bbc0ee4a00f873e2e26c6c2b09492579"}]}, @NL80211_ATTR_MLD_ADDR={0x2f, 0x13a, "7eb3a54efbe5394eb871488866940749c6d9a20f4b9db5bbc62ad65a712131f95f323b935c82c94646f287"}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x1144}, 0x1, 0x0, 0x0, 0x81}, 0x8040) mlockall$auto(0x7) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r4, 0x65, 0x1, 0x0, 0x0) ioctl$auto_TUNGETIFF(r0, 0x800454d2, 0x0) 1.64665915s ago: executing program 3 (id=2465): mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0xffffffffffffffff, 0xfffff004, 0x2) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000000), 0xa8200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r1, 0x8, 0xff, 0xffffffffffffffff, @relative_fd=0xffffffffffffffff, 0xe600}, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x1}, 0xb) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x0, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r4, 0x3, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) settimeofday$auto(&(0x7f00000000c0)={0x110000001f, 0x1}, 0x0) socket(0x2a, 0x80000, 0x0) bind$auto(r3, 0x0, 0x6) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000040), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x163ac1, 0x81) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) 1.541051846s ago: executing program 0 (id=2466): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x565) 1.375653057s ago: executing program 2 (id=2467): socket(0x1, 0x2, 0x0) socketpair$auto(0x1e, 0x1, 0xfffffffd, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x3, 0x0, 0x8, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x1b) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/disk\x00', 0x140, 0x0) fanotify_init$auto(0x65, 0x2) r2 = socket(0x10, 0x2, 0xc) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/f2fs/features/project_quota\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000008c0)=""/61, 0x3d) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\xe1', 0x2000000000009) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x80, 0x400050, 0x9) write$auto(0x1, 0x0, 0x80000000) 1.336515505s ago: executing program 0 (id=2468): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x2000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0x401) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r5, 0x540a, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf2503000000040001800d000180080003800400c08075fbff000400080035d3c929c4103ad1569f79046ba6161f91cd744c1f503eed0900000000000000a908f178c1c94c0e91113a86be7bd2d2aa6b1bb3d3f924c9d10b11834731810932c4159ed491ba2763afbe051c7e875c5f2cc539b77ad8118eb951b2621fd35adfb3f943467a31f286a16e6f69c636b3e4031014043ed2f2256157b562cd5c7f099e967d6100d661749f681cf58a72b163565c83fe813c3ca0752c5aa369573895a11390571d01d1a7b0983cd02d8163f853142222bb6aa825bd12c506ec35360400587500"/249], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) unshare$auto(0x40000080) open(&(0x7f00000000c0)='./file0\x00', 0x4020c0, 0x140) keyctl$auto(0xf, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) semctl$auto(0xa01, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) init_module$auto(0x0, 0xffff9, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty6\x00', 0x0, 0x0) read$auto_tracing_fops_trace(r4, &(0x7f0000000280)=""/249, 0xf9) r8 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r8, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setgroups$auto(0xe32, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0x800000ff, 0xffffff71, 0x10000}) pread64$auto(r0, 0x0, 0xe, 0x400010000005) 739.80104ms ago: executing program 2 (id=2469): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x9) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xc}, 0x800008}, 0x5, 0x20000000) r1 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24004881}, 0x2000c840) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x3}, 0xfffffffa}, 0x3, 0xaa) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f0000000140)="bb3aa900d37d", 0x6) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) timer_create$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x101085) 210.376929ms ago: executing program 3 (id=2470): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x2000, 0x0) pread64$auto(r0, 0x0, 0xe, 0x400010000005) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, &(0x7f0000000180)={"1833f038af9087b5079e39c11d5491f358572f4275a42fd70f836aba0202916ef66d0ec7cf36807b094bb1241a5cd74bcc03048084fd47fdd452f40366fb4b83feee3121cdc1f648a55cdf0071b983b127fc1da83da9ea7e30e4f92f7e65def8fef3263b56d78106327f09024fa0803e96e0631b10cfacaabd1700bb8bc2746a", "08be0fb501aa28ab4e5d8871ea4c41c53393b9b69b688b09b37388e4ca2471c8e858ab4c74569a8815ea86857a59eb884c1b06142be619f386fc3fb14b541b5e74fde5b43cff6bf99097c727f29d97e3402fbd3ac9240e6d551f0d0f24d4dc39e3f311ed4ad98524db5d7c24ba612942babbdfcc62ac21392678dd0dfeea06b1", 0x7}) 0s ago: executing program 3 (id=2471): recvmsg$auto(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x20801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80402, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x200008, 0x6, 0x3) keyctl$auto(0x3, 0xffffffffffffffff, 0x2, 0x3b, 0x9) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) poll$auto(0x0, 0x5, 0x108) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto_SO_PASSSEC(r2, 0x6, 0x22, &(0x7f0000000140)=']\x00', 0xb) ioctl$auto(r1, 0x89f0, r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r0, r3, 0x0, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) read$auto(r4, &(0x7f00000003c0)=']%\'\x00', 0x5) kernel console output (not intermixed with test programs): netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'. [ 518.735990][T13311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'. [ 518.796411][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 519.076377][T13315] FAULT_INJECTION: forcing a failure. [ 519.076377][T13315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 519.131550][T13315] CPU: 0 UID: 0 PID: 13315 Comm: syz.0.1639 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.131581][T13315] Tainted: [L]=SOFTLOCKUP [ 519.131588][T13315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.131598][T13315] Call Trace: [ 519.131604][T13315] [ 519.131612][T13315] dump_stack_lvl+0x100/0x190 [ 519.131646][T13315] should_fail_ex.cold+0x5/0xa [ 519.131665][T13315] ? prepare_alloc_pages+0x16d/0x5f0 [ 519.131690][T13315] should_fail_alloc_page+0xeb/0x140 [ 519.131713][T13315] prepare_alloc_pages+0x1f0/0x5f0 [ 519.131735][T13315] ? is_bpf_text_address+0x94/0x1a0 [ 519.131768][T13315] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 519.131803][T13315] ? __lock_acquire+0x4a5/0x2630 [ 519.131831][T13315] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 519.131856][T13315] ? stack_trace_save+0x8e/0xc0 [ 519.131876][T13315] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 519.131906][T13315] ? look_up_lock_class+0x64/0x120 [ 519.131927][T13315] ? find_held_lock+0x2b/0x80 [ 519.131944][T13315] ? ima_match_policy+0x8c4/0x2350 [ 519.131968][T13315] ? ima_match_policy+0x8c4/0x2350 [ 519.131994][T13315] ? __lock_acquire+0x4a5/0x2630 [ 519.132023][T13315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 519.132044][T13315] ? policy_nodemask+0xed/0x4f0 [ 519.132067][T13315] alloc_pages_mpol+0x1fb/0x550 [ 519.132089][T13315] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 519.132116][T13315] alloc_pages_noprof+0x136/0x390 [ 519.132138][T13315] __pmd_alloc+0x3b/0x950 [ 519.132164][T13315] __handle_mm_fault+0xa9e/0x2b60 [ 519.132194][T13315] ? mt_find+0x45e/0x8e0 [ 519.132216][T13315] ? __pfx___handle_mm_fault+0x10/0x10 [ 519.132241][T13315] ? __pfx_mt_find+0x10/0x10 [ 519.132273][T13315] ? find_vma+0xbf/0x140 [ 519.132298][T13315] ? __pfx_find_vma+0x10/0x10 [ 519.132320][T13315] handle_mm_fault+0x36d/0xa20 [ 519.132351][T13315] do_user_addr_fault+0x74c/0x12f0 [ 519.132376][T13315] exc_page_fault+0x6f/0xd0 [ 519.132395][T13315] asm_exc_page_fault+0x26/0x30 [ 519.132413][T13315] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 519.132439][T13315] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 519.132457][T13315] RSP: 0018:ffffc9000391fa60 EFLAGS: 00050212 [ 519.132472][T13315] RAX: 756e65470000000d RBX: 0000000000000010 RCX: 0000000000000010 [ 519.132484][T13315] RDX: 0000000000000001 RSI: ffffc9000391fb50 RDI: 0000000000000000 [ 519.132495][T13315] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000723f6b [ 519.132505][T13315] R10: ffffc9000391fb5f R11: 0000000000000000 R12: ffffc9000391fb50 [ 519.132516][T13315] R13: 0000000000000010 R14: 00007ffffffff000 R15: 0000000000000000 [ 519.132538][T13315] _copy_to_user+0xa4/0xd0 [ 519.132569][T13315] cpuid_read+0x1d9/0x360 [ 519.132596][T13315] ? __pfx_cpuid_read+0x10/0x10 [ 519.132619][T13315] ? __pfx_cpuid_smp_cpuid+0x10/0x10 [ 519.132644][T13315] ? __pfx___might_resched+0x10/0x10 [ 519.132680][T13315] ? apparmor_file_permission+0x13f/0x1c0 [ 519.132705][T13315] ? bpf_lsm_file_permission+0x9/0x10 [ 519.132722][T13315] ? security_file_permission+0x76/0x210 [ 519.132749][T13315] ? rw_verify_area+0xce/0x6d0 [ 519.132778][T13315] ? __pfx_cpuid_read+0x10/0x10 [ 519.132800][T13315] vfs_readv+0x5d8/0x8d0 [ 519.132836][T13315] ? __pfx_vfs_readv+0x10/0x10 [ 519.132866][T13315] ? find_held_lock+0x2b/0x80 [ 519.132897][T13315] ? __fget_files+0x21f/0x3d0 [ 519.132921][T13315] ? do_readv+0x13e/0x340 [ 519.132949][T13315] do_readv+0x13e/0x340 [ 519.132978][T13315] ? __pfx_do_readv+0x10/0x10 [ 519.133014][T13315] do_syscall_64+0x106/0xf80 [ 519.133032][T13315] ? clear_bhb_loop+0x40/0x90 [ 519.133055][T13315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.133074][T13315] RIP: 0033:0x7f5e12d9c819 [ 519.133089][T13315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.133106][T13315] RSP: 002b:00007f5e13c18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 519.133122][T13315] RAX: ffffffffffffffda RBX: 00007f5e13016090 RCX: 00007f5e12d9c819 [ 519.133133][T13315] RDX: 0000000000000003 RSI: 0000200000000680 RDI: 0000000000000006 [ 519.133144][T13315] RBP: 00007f5e13c18090 R08: 0000000000000000 R09: 0000000000000000 [ 519.133154][T13315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.133165][T13315] R13: 00007f5e13016128 R14: 00007f5e13016090 R15: 00007ffc8f832108 [ 519.133188][T13315] [ 521.259239][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1647'. [ 523.958911][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 525.647665][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1669'. [ 525.670774][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1670'. [ 526.198501][T13433] ERROR: Out of memory at tomoyo_memory_ok. [ 527.091796][T13481] FAULT_INJECTION: forcing a failure. [ 527.091796][T13481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.151462][T13481] CPU: 0 UID: 0 PID: 13481 Comm: syz.1.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.151493][T13481] Tainted: [L]=SOFTLOCKUP [ 527.151499][T13481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 527.151510][T13481] Call Trace: [ 527.151516][T13481] [ 527.151523][T13481] dump_stack_lvl+0x100/0x190 [ 527.151557][T13481] should_fail_ex.cold+0x5/0xa [ 527.151579][T13481] _copy_from_user+0x2e/0xd0 [ 527.151604][T13481] sctp_setsockopt+0x8cc/0xb370 [ 527.151630][T13481] ? __pfx_aa_sk_perm+0x10/0x10 [ 527.151656][T13481] ? __pfx_sctp_setsockopt+0x10/0x10 [ 527.151682][T13481] ? aa_sock_opt_perm+0xfe/0x1b0 [ 527.151712][T13481] ? sock_common_setsockopt+0x2e/0xf0 [ 527.151734][T13481] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 527.151757][T13481] do_sock_setsockopt+0xf3/0x1d0 [ 527.151781][T13481] __sys_setsockopt+0x119/0x190 [ 527.151814][T13481] __x64_sys_setsockopt+0xbd/0x160 [ 527.151842][T13481] ? do_syscall_64+0x95/0xf80 [ 527.151861][T13481] ? lockdep_hardirqs_on+0x78/0x100 [ 527.151879][T13481] do_syscall_64+0x106/0xf80 [ 527.151896][T13481] ? clear_bhb_loop+0x40/0x90 [ 527.151919][T13481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.151938][T13481] RIP: 0033:0x7f971959c819 [ 527.151963][T13481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.151981][T13481] RSP: 002b:00007f971a3df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 527.151999][T13481] RAX: ffffffffffffffda RBX: 00007f9719815fa0 RCX: 00007f971959c819 [ 527.152011][T13481] RDX: 0000000000000009 RSI: 0000010000000084 RDI: 0000000000000003 [ 527.152022][T13481] RBP: 00007f971a3df090 R08: 000000000000009c R09: 0000000000000000 [ 527.152033][T13481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.152043][T13481] R13: 00007f9719816038 R14: 00007f9719815fa0 R15: 00007ffefd9597e8 [ 527.152066][T13481] [ 527.848127][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1685'. [ 530.418797][T13532] FAULT_INJECTION: forcing a failure. [ 530.418797][T13532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.481733][T13532] CPU: 0 UID: 0 PID: 13532 Comm: syz.1.1695 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.481764][T13532] Tainted: [L]=SOFTLOCKUP [ 530.481771][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 530.481781][T13532] Call Trace: [ 530.481787][T13532] [ 530.481794][T13532] dump_stack_lvl+0x100/0x190 [ 530.481828][T13532] should_fail_ex.cold+0x5/0xa [ 530.481850][T13532] _copy_to_user+0x32/0xd0 [ 530.481876][T13532] simple_read_from_buffer+0xcb/0x170 [ 530.481908][T13532] proc_fail_nth_read+0x1af/0x230 [ 530.481934][T13532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.481960][T13532] ? rw_verify_area+0xce/0x6d0 [ 530.481988][T13532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.482012][T13532] vfs_read+0x1e4/0xb30 [ 530.482033][T13532] ? __pfx_vfs_read+0x10/0x10 [ 530.482050][T13532] ? __fget_files+0x215/0x3d0 [ 530.482073][T13532] ? __fget_files+0x21f/0x3d0 [ 530.482097][T13532] ksys_read+0x12a/0x250 [ 530.482115][T13532] ? __pfx_ksys_read+0x10/0x10 [ 530.482139][T13532] do_syscall_64+0x106/0xf80 [ 530.482157][T13532] ? clear_bhb_loop+0x40/0x90 [ 530.482180][T13532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.482199][T13532] RIP: 0033:0x7f971955d04e [ 530.482214][T13532] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.482232][T13532] RSP: 002b:00007f971a3defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.482250][T13532] RAX: ffffffffffffffda RBX: 00007f971a3df6c0 RCX: 00007f971955d04e [ 530.482269][T13532] RDX: 000000000000000f RSI: 00007f971a3df0a0 RDI: 0000000000000004 [ 530.482280][T13532] RBP: 00007f971a3df090 R08: 0000000000000000 R09: 0000000000000000 [ 530.482290][T13532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.482301][T13532] R13: 00007f9719816038 R14: 00007f9719815fa0 R15: 00007ffefd9597e8 [ 530.482324][T13532] [ 531.165405][T13550] netlink: 'syz.2.1701': attribute type 2 has an invalid length. [ 531.197838][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 531.605297][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 533.412404][ T5836] Bluetooth: hci2: unexpected event 0x08 length: 435 > 4 [ 534.111726][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 534.190983][T13617] netlink: 'syz.2.1717': attribute type 3 has an invalid length. [ 535.075174][T13651] futex_wake_op: syz.2.1723 tries to shift op by -2048; fix this program [ 535.767911][T13676] net_ratelimit: 22 callbacks suppressed [ 535.767929][T13676] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 537.198062][T13693] binder: 13692:13693 ioctl 40046210 0 returned -14 [ 538.527583][T13730] FAULT_INJECTION: forcing a failure. [ 538.527583][T13730] name failslab, interval 1, probability 0, space 0, times 0 [ 538.583401][T13730] CPU: 0 UID: 0 PID: 13730 Comm: syz.0.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.583433][T13730] Tainted: [L]=SOFTLOCKUP [ 538.583439][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 538.583449][T13730] Call Trace: [ 538.583456][T13730] [ 538.583463][T13730] dump_stack_lvl+0x100/0x190 [ 538.583496][T13730] should_fail_ex.cold+0x5/0xa [ 538.583518][T13730] ? lsm_blob_alloc+0x68/0x90 [ 538.583545][T13730] should_failslab+0xc2/0x120 [ 538.583566][T13730] __kmalloc_noprof+0xe0/0x850 [ 538.583594][T13730] ? trace_kmem_cache_alloc+0xf3/0x120 [ 538.583619][T13730] lsm_blob_alloc+0x68/0x90 [ 538.583647][T13730] security_prepare_creds+0x2d/0x290 [ 538.583676][T13730] prepare_creds+0x5d6/0x950 [ 538.583707][T13730] __do_sys_capset+0x270/0x460 [ 538.583725][T13730] ? __pfx___do_sys_capset+0x10/0x10 [ 538.583746][T13730] ? __x64_sys_futex+0x358/0x4d0 [ 538.583771][T13730] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 538.583792][T13730] ? xfd_validate_state+0x129/0x190 [ 538.583827][T13730] do_syscall_64+0x106/0xf80 [ 538.583846][T13730] ? clear_bhb_loop+0x40/0x90 [ 538.583867][T13730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.583886][T13730] RIP: 0033:0x7f5e12d9c819 [ 538.583902][T13730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.583919][T13730] RSP: 002b:00007f5e13c39028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 538.583937][T13730] RAX: ffffffffffffffda RBX: 00007f5e13015fa0 RCX: 00007f5e12d9c819 [ 538.583949][T13730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 538.583960][T13730] RBP: 00007f5e12e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 538.583971][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.583982][T13730] R13: 00007f5e13016038 R14: 00007f5e13015fa0 R15: 00007ffc8f832108 [ 538.584004][T13730] [ 539.449440][T13740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1742'. [ 540.579270][ T5836] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 540.579300][ T5836] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 540.594536][ T5836] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 540.594580][ T5836] Bluetooth: hci0: Malformed LE Event: 0x0d [ 542.683338][ T30] audit: type=1800 audit(4294967486.419:19): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1752" name="dbroot" dev="configfs" ino=49719 res=0 errno=0 [ 543.027618][T13787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 543.108916][T13787] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 543.168002][T13787] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 543.354145][T13787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 543.390842][T13787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 544.746791][T13831] Invalid ELF header magic: != ELF [ 545.078365][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 545.157427][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 545.398741][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 545.404817][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 546.037644][T13846] FAULT_INJECTION: forcing a failure. [ 546.037644][T13846] name failslab, interval 1, probability 0, space 0, times 0 [ 546.113007][T13846] CPU: 0 UID: 0 PID: 13846 Comm: syz.1.1763 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.113039][T13846] Tainted: [L]=SOFTLOCKUP [ 546.113045][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 546.113056][T13846] Call Trace: [ 546.113062][T13846] [ 546.113069][T13846] dump_stack_lvl+0x100/0x190 [ 546.113102][T13846] should_fail_ex.cold+0x5/0xa [ 546.113125][T13846] ? lsm_blob_alloc+0x68/0x90 [ 546.113152][T13846] should_failslab+0xc2/0x120 [ 546.113173][T13846] __kmalloc_noprof+0xe0/0x850 [ 546.113202][T13846] ? trace_kmem_cache_alloc+0xf3/0x120 [ 546.113226][T13846] lsm_blob_alloc+0x68/0x90 [ 546.113263][T13846] security_prepare_creds+0x2d/0x290 [ 546.113290][T13846] prepare_creds+0x5d6/0x950 [ 546.113321][T13846] __do_sys_capset+0x270/0x460 [ 546.113340][T13846] ? __pfx___do_sys_capset+0x10/0x10 [ 546.113361][T13846] ? __x64_sys_futex+0x358/0x4d0 [ 546.113387][T13846] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 546.113408][T13846] ? xfd_validate_state+0x129/0x190 [ 546.113442][T13846] do_syscall_64+0x106/0xf80 [ 546.113460][T13846] ? clear_bhb_loop+0x40/0x90 [ 546.113483][T13846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.113501][T13846] RIP: 0033:0x7f971959c819 [ 546.113517][T13846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.113534][T13846] RSP: 002b:00007f971a3df028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 546.113552][T13846] RAX: ffffffffffffffda RBX: 00007f9719815fa0 RCX: 00007f971959c819 [ 546.113564][T13846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 546.113574][T13846] RBP: 00007f9719632c91 R08: 0000000000000000 R09: 0000000000000000 [ 546.113586][T13846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.113596][T13846] R13: 00007f9719816038 R14: 00007f9719815fa0 R15: 00007ffefd9597e8 [ 546.113619][T13846] [ 546.654439][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 547.243041][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 548.001372][T13882] FAULT_INJECTION: forcing a failure. [ 548.001372][T13882] name failslab, interval 1, probability 0, space 0, times 0 [ 548.147925][T13882] CPU: 0 UID: 0 PID: 13882 Comm: syz.1.1772 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.147957][T13882] Tainted: [L]=SOFTLOCKUP [ 548.147964][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 548.147974][T13882] Call Trace: [ 548.147980][T13882] [ 548.147989][T13882] dump_stack_lvl+0x100/0x190 [ 548.148022][T13882] should_fail_ex.cold+0x5/0xa [ 548.148044][T13882] should_failslab+0xc2/0x120 [ 548.148066][T13882] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 548.148095][T13882] ? sk_prot_alloc+0x60/0x2a0 [ 548.148115][T13882] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 548.148142][T13882] ? security_inode_alloc+0x3b/0x2c0 [ 548.148166][T13882] sk_prot_alloc+0x60/0x2a0 [ 548.148188][T13882] sk_alloc+0x36/0xe80 [ 548.148217][T13882] unix_create1+0xa6/0x700 [ 548.148239][T13882] unix_create+0x145/0x270 [ 548.148347][T13882] __sock_create+0x339/0x860 [ 548.148375][T13882] __sys_socketpair+0x261/0x5b0 [ 548.148402][T13882] ? __pfx___sys_socketpair+0x10/0x10 [ 548.148435][T13882] ? xfd_validate_state+0x129/0x190 [ 548.148467][T13882] __x64_sys_socketpair+0x96/0x100 [ 548.148492][T13882] ? lockdep_hardirqs_on+0x78/0x100 [ 548.148511][T13882] do_syscall_64+0x106/0xf80 [ 548.148538][T13882] ? clear_bhb_loop+0x40/0x90 [ 548.148560][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.148586][T13882] RIP: 0033:0x7f971959c819 [ 548.148604][T13882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.148622][T13882] RSP: 002b:00007f971a3be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 548.148640][T13882] RAX: ffffffffffffffda RBX: 00007f9719816090 RCX: 00007f971959c819 [ 548.148652][T13882] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 548.148663][T13882] RBP: 00007f9719632c91 R08: 0000000000000000 R09: 0000000000000000 [ 548.148674][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.148685][T13882] R13: 00007f9719816128 R14: 00007f9719816090 R15: 00007ffefd9597e8 [ 548.148708][T13882] [ 550.035893][T13914] Invalid ELF header magic: != ELF [ 551.609628][T13924] FAULT_INJECTION: forcing a failure. [ 551.609628][T13924] name failslab, interval 1, probability 0, space 0, times 0 [ 551.660871][T13924] CPU: 0 UID: 0 PID: 13924 Comm: syz.3.1779 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.660903][T13924] Tainted: [L]=SOFTLOCKUP [ 551.660909][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 551.660919][T13924] Call Trace: [ 551.660926][T13924] [ 551.660934][T13924] dump_stack_lvl+0x100/0x190 [ 551.660966][T13924] should_fail_ex.cold+0x5/0xa [ 551.660988][T13924] ? lsm_blob_alloc+0x68/0x90 [ 551.661022][T13924] should_failslab+0xc2/0x120 [ 551.661042][T13924] __kmalloc_noprof+0xe0/0x850 [ 551.661071][T13924] ? trace_kmem_cache_alloc+0xf3/0x120 [ 551.661095][T13924] lsm_blob_alloc+0x68/0x90 [ 551.661124][T13924] security_prepare_creds+0x2d/0x290 [ 551.661151][T13924] prepare_creds+0x5d6/0x950 [ 551.661182][T13924] __do_sys_capset+0x270/0x460 [ 551.661200][T13924] ? __pfx___do_sys_capset+0x10/0x10 [ 551.661221][T13924] ? __x64_sys_futex+0x358/0x4d0 [ 551.661246][T13924] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 551.661267][T13924] ? xfd_validate_state+0x129/0x190 [ 551.661303][T13924] do_syscall_64+0x106/0xf80 [ 551.661321][T13924] ? clear_bhb_loop+0x40/0x90 [ 551.661343][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.661363][T13924] RIP: 0033:0x7f805399c819 [ 551.661378][T13924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.661396][T13924] RSP: 002b:00007f80548cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 551.661414][T13924] RAX: ffffffffffffffda RBX: 00007f8053c15fa0 RCX: 00007f805399c819 [ 551.661425][T13924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 551.661435][T13924] RBP: 00007f8053a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 551.661446][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.661463][T13924] R13: 00007f8053c16038 R14: 00007f8053c15fa0 R15: 00007ffe008ace28 [ 551.661486][T13924] [ 552.016417][ T5836] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 552.849863][ T5836] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 554.195319][T13967] Invalid ELF header magic: != ELF [ 554.599379][T13841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 555.242822][T13977] FAULT_INJECTION: forcing a failure. [ 555.242822][T13977] name failslab, interval 1, probability 0, space 0, times 0 [ 555.337463][T13977] CPU: 0 UID: 0 PID: 13977 Comm: syz.0.1791 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.337495][T13977] Tainted: [L]=SOFTLOCKUP [ 555.337502][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 555.337512][T13977] Call Trace: [ 555.337519][T13977] [ 555.337527][T13977] dump_stack_lvl+0x100/0x190 [ 555.337560][T13977] should_fail_ex.cold+0x5/0xa [ 555.337583][T13977] ? __register_sysctl_table+0xbe4/0x1650 [ 555.337601][T13977] should_failslab+0xc2/0x120 [ 555.337622][T13977] __kmalloc_noprof+0xe0/0x850 [ 555.337656][T13977] __register_sysctl_table+0xbe4/0x1650 [ 555.337679][T13977] ? __pfx___register_sysctl_table+0x10/0x10 [ 555.337698][T13977] ? is_module_address+0x69/0xf0 [ 555.337722][T13977] ? register_net_sysctl_sz+0x222/0x430 [ 555.337743][T13977] ? __asan_memcpy+0x20/0x60 [ 555.337769][T13977] ? kmemdup_noprof+0x49/0x60 [ 555.337789][T13977] ipv6_sysctl_net_init+0x180/0x2b0 [ 555.337812][T13977] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 555.337834][T13977] ops_init+0x1e2/0x5f0 [ 555.337855][T13977] setup_net+0x118/0x3a0 [ 555.337874][T13977] ? __pfx_setup_net+0x10/0x10 [ 555.337891][T13977] ? lockdep_init_map_type+0x5c/0x250 [ 555.337917][T13977] ? mutex_init_lockep+0x110/0x150 [ 555.337945][T13977] copy_net_ns+0x46f/0x7c0 [ 555.337968][T13977] create_new_namespaces+0x3ea/0xac0 [ 555.337993][T13977] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 555.338016][T13977] ksys_unshare+0x473/0xad0 [ 555.338042][T13977] ? __pfx_ksys_unshare+0x10/0x10 [ 555.338074][T13977] __x64_sys_unshare+0x31/0x40 [ 555.338097][T13977] do_syscall_64+0x106/0xf80 [ 555.338116][T13977] ? clear_bhb_loop+0x40/0x90 [ 555.338138][T13977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.338160][T13977] RIP: 0033:0x7f5e12d9c819 [ 555.338177][T13977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.338195][T13977] RSP: 002b:00007f5e13c39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 555.338213][T13977] RAX: ffffffffffffffda RBX: 00007f5e13015fa0 RCX: 00007f5e12d9c819 [ 555.338225][T13977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 555.338244][T13977] RBP: 00007f5e12e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 555.338255][T13977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.338265][T13977] R13: 00007f5e13016038 R14: 00007f5e13015fa0 R15: 00007ffc8f832108 [ 555.338288][T13977] [ 555.338297][T13977] sysctl could not get directory: /net/ipv6/icmp -12 [ 556.483330][T13841] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 560.899695][T14048] FAULT_INJECTION: forcing a failure. [ 560.899695][T14048] name failslab, interval 1, probability 0, space 0, times 0 [ 560.977538][T14048] CPU: 0 UID: 0 PID: 14048 Comm: syz.1.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.977571][T14048] Tainted: [L]=SOFTLOCKUP [ 560.977577][T14048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 560.977588][T14048] Call Trace: [ 560.977594][T14048] [ 560.977601][T14048] dump_stack_lvl+0x100/0x190 [ 560.977636][T14048] should_fail_ex.cold+0x5/0xa [ 560.977659][T14048] should_failslab+0xc2/0x120 [ 560.977680][T14048] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 560.977700][T14048] ? ipv6_sysctl_net_init+0x30/0x2b0 [ 560.977725][T14048] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 560.977747][T14048] kmemdup_noprof+0x29/0x60 [ 560.977766][T14048] ipv6_sysctl_net_init+0x30/0x2b0 [ 560.977788][T14048] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 560.977810][T14048] ops_init+0x1e2/0x5f0 [ 560.977831][T14048] setup_net+0x118/0x3a0 [ 560.977849][T14048] ? __pfx_setup_net+0x10/0x10 [ 560.977866][T14048] ? lockdep_init_map_type+0x5c/0x250 [ 560.977893][T14048] ? mutex_init_lockep+0x110/0x150 [ 560.977922][T14048] copy_net_ns+0x46f/0x7c0 [ 560.977944][T14048] create_new_namespaces+0x3ea/0xac0 [ 560.977971][T14048] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 560.977995][T14048] ksys_unshare+0x473/0xad0 [ 560.978021][T14048] ? __pfx_ksys_unshare+0x10/0x10 [ 560.978053][T14048] __x64_sys_unshare+0x31/0x40 [ 560.978076][T14048] do_syscall_64+0x106/0xf80 [ 560.978094][T14048] ? clear_bhb_loop+0x40/0x90 [ 560.978116][T14048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.978142][T14048] RIP: 0033:0x7f971959c819 [ 560.978158][T14048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.978176][T14048] RSP: 002b:00007f971a3df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 560.978194][T14048] RAX: ffffffffffffffda RBX: 00007f9719815fa0 RCX: 00007f971959c819 [ 560.978205][T14048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 560.978216][T14048] RBP: 00007f9719632c91 R08: 0000000000000000 R09: 0000000000000000 [ 560.978226][T14048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.978237][T14048] R13: 00007f9719816038 R14: 00007f9719815fa0 R15: 00007ffefd9597e8 [ 560.978259][T14048] [ 562.551320][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'. [ 566.892036][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1836'. [ 569.720203][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1847'. [ 571.438899][T14218] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 574.420669][T14277] serio: Serial port ttyS0 [ 574.698876][ T5838] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 574.706738][ T5838] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 576.092601][T14315] zswap: compressor not available [ 577.310994][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1882'. [ 579.308428][T14380] random: crng reseeded on system resumption [ 579.426693][T14380] vcan0: tx drop: invalid da for name 0x000000000000003f [ 580.035039][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 582.106390][T14426] random: crng reseeded on system resumption [ 582.240749][T14426] vcan0: tx drop: invalid da for name 0x000000000000003f [ 583.956974][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 585.135707][T14462] vcan0: tx drop: invalid da for name 0x000000000000003f [ 588.262570][T14512] random: crng reseeded on system resumption [ 588.386982][T14510] vcan0: tx drop: invalid da for name 0x000000000000003f [ 591.885477][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 591.910025][T14584] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1948'. [ 592.722167][T14600] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1951'. [ 596.320695][T14670] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 597.619470][T14685] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 597.654790][T14685] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 597.741493][T14685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 597.780894][T14685] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 597.845872][T14711] openvswitch: netlink: Key type 261 is out of range max 32 [ 597.885801][T14685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 597.929126][T14685] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 597.966168][T14685] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 598.837749][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 599.797486][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 599.962888][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 600.037559][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 600.917393][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 601.877441][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 602.046015][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 605.762369][T14870] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78c00 [ 605.889613][T14870] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 605.957654][T14870] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 606.000711][T14870] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 606.157411][T14870] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 606.243431][T14870] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 606.295568][T14870] head: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 606.367893][T14870] head: 00fff00000000003 ffffea0001e30001 00000000ffffffff 00000000ffffffff [ 606.402851][T14870] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 606.450264][T14870] page dumped because: unmovable page [ 606.455709][T14870] page_owner tracks the page as allocated [ 606.506098][T14870] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 79684912083, free_ts 79684590373 [ 606.597139][T14870] post_alloc_hook+0x153/0x170 [ 606.609442][T14870] get_page_from_freelist+0x111d/0x3140 [ 606.615179][T14870] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 606.707960][T14870] alloc_pages_mpol+0x1fb/0x550 [ 606.713116][T14870] alloc_pages_noprof+0x136/0x390 [ 606.757332][T14870] skb_page_frag_refill+0x365/0x5b0 [ 606.763062][T14870] try_fill_recv+0x7f1/0x2930 [ 606.791789][T14870] virtnet_poll+0x154a/0x3a20 [ 606.817731][T14870] __napi_poll.constprop.0+0xaf/0x450 [ 606.839575][T14870] net_rx_action+0xa40/0xf20 [ 606.844399][T14870] handle_softirqs+0x1eb/0x9e0 [ 606.901405][T14870] __irq_exit_rcu+0xef/0x150 [ 606.906157][T14870] irq_exit_rcu+0x9/0x30 [ 606.942744][T14870] common_interrupt+0xbe/0xe0 [ 606.958482][T14870] asm_common_interrupt+0x26/0x40 [ 606.979543][T14870] page last free pid 0 tgid 0 stack trace: [ 607.009920][T14870] __free_frozen_pages+0x7e1/0x10d0 [ 607.033339][T14870] __folio_put+0x3b4/0x540 [ 607.066086][T14870] skb_release_data+0x667/0x9d0 [ 607.076206][T14870] napi_consume_skb+0x1f6/0x320 [ 607.096400][T14870] skb_defer_free_flush+0x1f1/0x290 [ 607.119723][T14870] net_rx_action+0x3ca/0xf20 [ 607.136818][T14870] handle_softirqs+0x1eb/0x9e0 [ 607.151904][T14870] __irq_exit_rcu+0xef/0x150 [ 607.167741][T14870] irq_exit_rcu+0x9/0x30 [ 607.182680][T14870] common_interrupt+0xbe/0xe0 [ 607.201721][T14870] asm_common_interrupt+0x26/0x40 [ 610.041420][T14950] netlink: 'syz.3.2038': attribute type 11 has an invalid length. [ 610.174059][T14950] netlink: 'syz.3.2038': attribute type 11 has an invalid length. [ 610.331996][T14950] netlink: 'syz.3.2038': attribute type 11 has an invalid length. [ 610.583555][T14947] zswap: compressor 000 not available [ 611.587628][T14977] netlink: 346 bytes leftover after parsing attributes in process `syz.3.2043'. [ 611.752810][T14977] [U] ^@ [ 613.440297][T15006] netlink: 'syz.0.2053': attribute type 11 has an invalid length. [ 613.576688][T15006] netlink: 'syz.0.2053': attribute type 11 has an invalid length. [ 613.576724][T15006] netlink: 'syz.0.2053': attribute type 11 has an invalid length. [ 613.718471][T15017] FAULT_INJECTION: forcing a failure. [ 613.718471][T15017] name failslab, interval 1, probability 0, space 0, times 0 [ 613.718536][T15017] CPU: 0 UID: 0 PID: 15017 Comm: syz.1.2055 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.718562][T15017] Tainted: [L]=SOFTLOCKUP [ 613.718569][T15017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 613.718580][T15017] Call Trace: [ 613.718585][T15017] [ 613.718593][T15017] dump_stack_lvl+0x100/0x190 [ 613.718625][T15017] should_fail_ex.cold+0x5/0xa [ 613.718648][T15017] should_failslab+0xc2/0x120 [ 613.718674][T15017] __kmalloc_cache_noprof+0x7a/0x6f0 [ 613.718703][T15017] ? rfkill_fop_open+0x1b6/0x750 [ 613.718727][T15017] ? mark_held_locks+0x40/0x70 [ 613.718757][T15017] rfkill_fop_open+0x1b6/0x750 [ 613.718787][T15017] ? __pfx_rfkill_fop_open+0x10/0x10 [ 613.718818][T15017] misc_open+0x26d/0x450 [ 613.718842][T15017] ? __pfx_misc_open+0x10/0x10 [ 613.718865][T15017] chrdev_open+0x234/0x6a0 [ 613.718885][T15017] ? __pfx_apparmor_file_open+0x10/0x10 [ 613.718905][T15017] ? __pfx_chrdev_open+0x10/0x10 [ 613.718927][T15017] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 613.718952][T15017] do_dentry_open+0x6d8/0x1660 [ 613.718971][T15017] ? __pfx_chrdev_open+0x10/0x10 [ 613.718998][T15017] vfs_open+0x82/0x3f0 [ 613.719025][T15017] path_openat+0x208c/0x31a0 [ 613.719053][T15017] ? __pfx_path_openat+0x10/0x10 [ 613.719081][T15017] do_file_open+0x20e/0x430 [ 613.719113][T15017] ? __pfx_do_file_open+0x10/0x10 [ 613.719150][T15017] ? alloc_fd+0x476/0x790 [ 613.719171][T15017] ? do_getname+0x191/0x390 [ 613.719198][T15017] do_sys_openat2+0x10d/0x1e0 [ 613.719223][T15017] ? __pfx_do_sys_openat2+0x10/0x10 [ 613.719250][T15017] ? __fget_files+0x21f/0x3d0 [ 613.719274][T15017] __x64_sys_openat+0x12d/0x210 [ 613.719300][T15017] ? __pfx___x64_sys_openat+0x10/0x10 [ 613.719336][T15017] do_syscall_64+0x106/0xf80 [ 613.719354][T15017] ? clear_bhb_loop+0x40/0x90 [ 613.719377][T15017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.719395][T15017] RIP: 0033:0x7f971959c819 [ 613.719412][T15017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.719429][T15017] RSP: 002b:00007f971a37c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 613.719447][T15017] RAX: ffffffffffffffda RBX: 00007f9719816270 RCX: 00007f971959c819 [ 613.719458][T15017] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 613.719469][T15017] RBP: 00007f9719632c91 R08: 0000000000000000 R09: 0000000000000000 [ 613.719479][T15017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.719489][T15017] R13: 00007f9719816308 R14: 00007f9719816270 R15: 00007ffefd9597e8 [ 613.719512][T15017] [ 615.258866][T15036] netlink: 'syz.0.2060': attribute type 3 has an invalid length. [ 616.339432][T15045] futex_wake_op: syz.3.2062 tries to shift op by -2048; fix this program [ 617.807982][T15097] futex_wake_op: syz.1.2076 tries to shift op by -2048; fix this program [ 620.487951][T15165] FAULT_INJECTION: forcing a failure. [ 620.487951][T15165] name failslab, interval 1, probability 0, space 0, times 0 [ 620.531752][T15165] CPU: 0 UID: 0 PID: 15165 Comm: syz.0.2092 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.531784][T15165] Tainted: [L]=SOFTLOCKUP [ 620.531791][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 620.531802][T15165] Call Trace: [ 620.531808][T15165] [ 620.531816][T15165] dump_stack_lvl+0x100/0x190 [ 620.531849][T15165] should_fail_ex.cold+0x5/0xa [ 620.531871][T15165] should_failslab+0xc2/0x120 [ 620.531894][T15165] __kmalloc_cache_noprof+0x7a/0x6f0 [ 620.531920][T15165] ? uinput_open+0x48/0x160 [ 620.531947][T15165] uinput_open+0x48/0x160 [ 620.531970][T15165] ? __pfx_uinput_open+0x10/0x10 [ 620.531993][T15165] misc_open+0x26d/0x450 [ 620.532024][T15165] ? __pfx_misc_open+0x10/0x10 [ 620.532048][T15165] chrdev_open+0x234/0x6a0 [ 620.532067][T15165] ? __pfx_apparmor_file_open+0x10/0x10 [ 620.532088][T15165] ? __pfx_chrdev_open+0x10/0x10 [ 620.532109][T15165] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 620.532135][T15165] do_dentry_open+0x6d8/0x1660 [ 620.532155][T15165] ? __pfx_chrdev_open+0x10/0x10 [ 620.532181][T15165] vfs_open+0x82/0x3f0 [ 620.532207][T15165] path_openat+0x208c/0x31a0 [ 620.532235][T15165] ? __pfx_path_openat+0x10/0x10 [ 620.532263][T15165] do_file_open+0x20e/0x430 [ 620.532285][T15165] ? __pfx_do_file_open+0x10/0x10 [ 620.532322][T15165] ? alloc_fd+0x476/0x790 [ 620.532343][T15165] ? do_getname+0x191/0x390 [ 620.532369][T15165] do_sys_openat2+0x10d/0x1e0 [ 620.532394][T15165] ? __pfx_do_sys_openat2+0x10/0x10 [ 620.532421][T15165] ? __fget_files+0x21f/0x3d0 [ 620.532444][T15165] __x64_sys_openat+0x12d/0x210 [ 620.532470][T15165] ? __pfx___x64_sys_openat+0x10/0x10 [ 620.532504][T15165] do_syscall_64+0x106/0xf80 [ 620.532522][T15165] ? clear_bhb_loop+0x40/0x90 [ 620.532545][T15165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.532563][T15165] RIP: 0033:0x7f5e12d9c819 [ 620.532580][T15165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.532597][T15165] RSP: 002b:00007f5e13c39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 620.532615][T15165] RAX: ffffffffffffffda RBX: 00007f5e13015fa0 RCX: 00007f5e12d9c819 [ 620.532627][T15165] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 620.532639][T15165] RBP: 00007f5e12e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 620.532649][T15165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.532660][T15165] R13: 00007f5e13016038 R14: 00007f5e13015fa0 R15: 00007ffc8f832108 [ 620.532683][T15165] [ 620.917020][T15170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2091'. [ 621.043523][T15177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2091'. [ 621.112340][T15180] futex_wake_op: syz.0.2096 tries to shift op by -2048; fix this program [ 624.403453][T15128] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 624.474633][T15260] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 626.107361][T15278] zswap: compressor 000 not available [ 629.831073][T15344] zswap: compressor 000 not available [ 632.080673][T15395] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2140'. [ 632.137944][T15395] netlink: 'syz.3.2140': attribute type 11 has an invalid length. [ 636.519492][T15467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 636.553746][T15467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 636.584958][T15467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 636.610995][T15467] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 636.823946][T15467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 636.831709][T15467] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 638.050384][T15261] Bluetooth: hci0: command 0x0c1a tx timeout [ 638.485609][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 638.609750][T15261] Bluetooth: hci1: command 0x0c1a tx timeout [ 638.615816][T15261] Bluetooth: hci2: command 0x0c1a tx timeout [ 638.685404][T15516] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 638.849427][T15261] Bluetooth: hci3: command 0x0c1a tx timeout [ 638.880518][T15521] random: crng reseeded on system resumption [ 640.690793][T15261] Bluetooth: hci1: command 0x0c1a tx timeout [ 640.937794][T15261] Bluetooth: hci3: command 0x0c1a tx timeout [ 641.590870][ T30] audit: type=1800 audit(4294968394.517:20): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2178" name="features" dev="configfs" ino=60856 res=0 errno=0 [ 642.822678][T15585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2181'. [ 646.125264][T15654] FAULT_INJECTION: forcing a failure. [ 646.125264][T15654] name fail_futex, interval 1, probability 0, space 0, times 0 [ 646.226071][T15654] CPU: 0 UID: 0 PID: 15654 Comm: syz.3.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.226103][T15654] Tainted: [L]=SOFTLOCKUP [ 646.226110][T15654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.226120][T15654] Call Trace: [ 646.226126][T15654] [ 646.226133][T15654] dump_stack_lvl+0x100/0x190 [ 646.226167][T15654] should_fail_ex.cold+0x5/0xa [ 646.226186][T15654] ? rcu_is_watching+0x12/0xc0 [ 646.226217][T15654] get_futex_key+0x1d2/0x1620 [ 646.226243][T15654] ? __pfx_get_futex_key+0x10/0x10 [ 646.226265][T15654] ? lock_acquire+0x1cf/0x380 [ 646.226304][T15654] futex_wake+0xea/0x530 [ 646.226334][T15654] ? __pfx_futex_wake+0x10/0x10 [ 646.226364][T15654] ? exit_mm_release+0x19/0x30 [ 646.226393][T15654] do_futex+0x32b/0x350 [ 646.226419][T15654] ? __pfx_do_futex+0x10/0x10 [ 646.226442][T15654] ? __might_fault+0xc5/0x140 [ 646.226476][T15654] mm_release+0x24a/0x2f0 [ 646.226496][T15654] do_exit+0x704/0x2b60 [ 646.226524][T15654] ? __pfx_do_exit+0x10/0x10 [ 646.226549][T15654] ? do_raw_spin_lock+0x128/0x260 [ 646.226577][T15654] ? find_held_lock+0x2b/0x80 [ 646.226595][T15654] ? get_signal+0x7e0/0x21e0 [ 646.226617][T15654] do_group_exit+0xd5/0x2a0 [ 646.226644][T15654] get_signal+0x1ec7/0x21e0 [ 646.226669][T15654] ? ksys_write+0x190/0x250 [ 646.226690][T15654] ? __pfx_get_signal+0x10/0x10 [ 646.226711][T15654] ? do_futex+0x192/0x350 [ 646.226738][T15654] arch_do_signal_or_restart+0x91/0x770 [ 646.226764][T15654] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 646.226794][T15654] ? __pfx___x64_sys_futex+0x10/0x10 [ 646.226819][T15654] ? ksys_write+0x1ac/0x250 [ 646.226841][T15654] exit_to_user_mode_loop+0x86/0x4a0 [ 646.226868][T15654] do_syscall_64+0x668/0xf80 [ 646.226887][T15654] ? clear_bhb_loop+0x40/0x90 [ 646.226910][T15654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.226928][T15654] RIP: 0033:0x7f805399c819 [ 646.226944][T15654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.226962][T15654] RSP: 002b:00007f80548cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 646.226981][T15654] RAX: fffffffffffffe00 RBX: 00007f8053c15fa8 RCX: 00007f805399c819 [ 646.226992][T15654] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8053c15fa8 [ 646.227003][T15654] RBP: 00007f8053c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 646.227014][T15654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.227025][T15654] R13: 00007f8053c16038 R14: 00007ffe008acd40 R15: 00007ffe008ace28 [ 646.227047][T15654] [ 647.946651][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 650.225424][T15725] futex_wake_op: syz.3.2212 tries to shift op by -2048; fix this program [ 650.258611][T15725] futex_wake_op: syz.3.2212 tries to shift op by -2048; fix this program [ 650.293103][T15726] 0x000000000001-0x000000020000 : "" [ 650.357748][T15726] ftl_cs: FTL header corrupt! [ 650.696524][T15735] FAULT_INJECTION: forcing a failure. [ 650.696524][T15735] name failslab, interval 1, probability 0, space 0, times 0 [ 650.765458][T15735] CPU: 0 UID: 0 PID: 15735 Comm: syz.3.2215 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.765491][T15735] Tainted: [L]=SOFTLOCKUP [ 650.765497][T15735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 650.765508][T15735] Call Trace: [ 650.765514][T15735] [ 650.765521][T15735] dump_stack_lvl+0x100/0x190 [ 650.765555][T15735] should_fail_ex.cold+0x5/0xa [ 650.765578][T15735] should_failslab+0xc2/0x120 [ 650.765599][T15735] __kmalloc_cache_noprof+0x7a/0x6f0 [ 650.765626][T15735] ? dev_seq_start+0x8f/0x230 [ 650.765649][T15735] dev_seq_start+0x8f/0x230 [ 650.765668][T15735] ? __pfx_dev_seq_start+0x10/0x10 [ 650.765692][T15735] traverse.part.0.constprop.0+0xaf/0x650 [ 650.765731][T15735] seq_read_iter+0x93f/0x1270 [ 650.765776][T15735] proc_reg_read_iter+0x220/0x310 [ 650.765806][T15735] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 650.765836][T15735] vfs_read+0x825/0xb30 [ 650.765857][T15735] ? __pfx_vfs_read+0x10/0x10 [ 650.765873][T15735] ? find_held_lock+0x2b/0x80 [ 650.765906][T15735] __x64_sys_pread64+0x1eb/0x250 [ 650.765927][T15735] ? __pfx___x64_sys_pread64+0x10/0x10 [ 650.765954][T15735] do_syscall_64+0x106/0xf80 [ 650.765972][T15735] ? clear_bhb_loop+0x40/0x90 [ 650.765996][T15735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.766015][T15735] RIP: 0033:0x7f805399c819 [ 650.766031][T15735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.766049][T15735] RSP: 002b:00007f80548cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 650.766074][T15735] RAX: ffffffffffffffda RBX: 00007f8053c15fa0 RCX: 00007f805399c819 [ 650.766086][T15735] RDX: 0000000200000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 650.766097][T15735] RBP: 00007f80548cc090 R08: 0000000000000000 R09: 0000000000000000 [ 650.766108][T15735] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 650.766118][T15735] R13: 00007f8053c16038 R14: 00007f8053c15fa0 R15: 00007ffe008ace28 [ 650.766142][T15735] [ 651.364930][ T30] audit: type=1800 audit(4294968404.232:21): pid=15717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2210" name="features" dev="configfs" ino=61636 res=0 errno=0 [ 653.021904][T15768] zswap: compressor not available [ 653.763836][T15791] FAULT_INJECTION: forcing a failure. [ 653.763836][T15791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.828332][T15791] CPU: 0 UID: 0 PID: 15791 Comm: syz.1.2228 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.828365][T15791] Tainted: [L]=SOFTLOCKUP [ 653.828372][T15791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 653.828382][T15791] Call Trace: [ 653.828389][T15791] [ 653.828397][T15791] dump_stack_lvl+0x100/0x190 [ 653.828430][T15791] should_fail_ex.cold+0x5/0xa [ 653.828453][T15791] _copy_to_iter+0x1f3/0x1720 [ 653.828479][T15791] ? traverse.part.0.constprop.0+0x2c0/0x650 [ 653.828510][T15791] ? kfree+0x1f6/0x6b0 [ 653.828536][T15791] ? __pfx__copy_to_iter+0x10/0x10 [ 653.828562][T15791] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 653.828600][T15791] seq_read_iter+0x691/0x1270 [ 653.828640][T15791] proc_reg_read_iter+0x220/0x310 [ 653.828670][T15791] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 653.828700][T15791] vfs_read+0x825/0xb30 [ 653.828721][T15791] ? __pfx_vfs_read+0x10/0x10 [ 653.828737][T15791] ? find_held_lock+0x2b/0x80 [ 653.828769][T15791] __x64_sys_pread64+0x1eb/0x250 [ 653.828790][T15791] ? __pfx___x64_sys_pread64+0x10/0x10 [ 653.828816][T15791] do_syscall_64+0x106/0xf80 [ 653.828835][T15791] ? clear_bhb_loop+0x40/0x90 [ 653.828857][T15791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.828876][T15791] RIP: 0033:0x7f971959c819 [ 653.828892][T15791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.828910][T15791] RSP: 002b:00007f971a3df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 653.828929][T15791] RAX: ffffffffffffffda RBX: 00007f9719815fa0 RCX: 00007f971959c819 [ 653.828940][T15791] RDX: 0000000200000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 653.828967][T15791] RBP: 00007f971a3df090 R08: 0000000000000000 R09: 0000000000000000 [ 653.828984][T15791] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 653.828995][T15791] R13: 00007f9719816038 R14: 00007f9719815fa0 R15: 00007ffefd9597e8 [ 653.829017][T15791] [ 655.890195][T15829] FAULT_INJECTION: forcing a failure. [ 655.890195][T15829] name failslab, interval 1, probability 0, space 0, times 0 [ 655.940974][T15829] CPU: 0 UID: 0 PID: 15829 Comm: syz.3.2245 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.941007][T15829] Tainted: [L]=SOFTLOCKUP [ 655.941013][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 655.941030][T15829] Call Trace: [ 655.941038][T15829] [ 655.941046][T15829] dump_stack_lvl+0x100/0x190 [ 655.941078][T15829] should_fail_ex.cold+0x5/0xa [ 655.941101][T15829] should_failslab+0xc2/0x120 [ 655.941122][T15829] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 655.941151][T15829] ? alloc_empty_file+0x55/0x1c0 [ 655.941179][T15829] alloc_empty_file+0x55/0x1c0 [ 655.941204][T15829] alloc_file_pseudo+0x13a/0x230 [ 655.941230][T15829] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 655.941256][T15829] ? _raw_spin_unlock+0x28/0x50 [ 655.941283][T15829] ? alloc_fd+0x476/0x790 [ 655.941304][T15829] __anon_inode_getfile+0xe8/0x280 [ 655.941330][T15829] do_epoll_create+0x329/0x4b0 [ 655.941350][T15829] __x64_sys_epoll_create+0x45/0x70 [ 655.941370][T15829] do_syscall_64+0x106/0xf80 [ 655.941388][T15829] ? clear_bhb_loop+0x40/0x90 [ 655.941410][T15829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.941429][T15829] RIP: 0033:0x7f805399c819 [ 655.941445][T15829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.941462][T15829] RSP: 002b:00007f80548ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 655.941480][T15829] RAX: ffffffffffffffda RBX: 00007f8053c16090 RCX: 00007f805399c819 [ 655.941492][T15829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 655.941502][T15829] RBP: 00007f8053a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 655.941513][T15829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.941523][T15829] R13: 00007f8053c16128 R14: 00007f8053c16090 R15: 00007ffe008ace28 [ 655.941545][T15829] [ 656.663061][T15844] zram0: detected capacity change from 0 to 16 [ 656.984107][T15839] zswap: compressor not available [ 657.746612][T15854] zswap: compressor 000 not available [ 658.488053][T15869] FAULT_INJECTION: forcing a failure. [ 658.488053][T15869] name failslab, interval 1, probability 0, space 0, times 0 [ 658.624723][T15869] CPU: 0 UID: 0 PID: 15869 Comm: syz.3.2246 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.624754][T15869] Tainted: [L]=SOFTLOCKUP [ 658.624761][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 658.624772][T15869] Call Trace: [ 658.624778][T15869] [ 658.624785][T15869] dump_stack_lvl+0x100/0x190 [ 658.624819][T15869] should_fail_ex.cold+0x5/0xa [ 658.624841][T15869] should_failslab+0xc2/0x120 [ 658.624864][T15869] __kmalloc_cache_noprof+0x7a/0x6f0 [ 658.624890][T15869] ? ipv4_inetpeer_init+0x3f/0xb0 [ 658.624913][T15869] ? __pfx_ipv4_inetpeer_init+0x10/0x10 [ 658.624933][T15869] ipv4_inetpeer_init+0x3f/0xb0 [ 658.624953][T15869] ops_init+0x1e2/0x5f0 [ 658.624974][T15869] setup_net+0x118/0x3a0 [ 658.625000][T15869] ? __pfx_setup_net+0x10/0x10 [ 658.625017][T15869] ? lockdep_init_map_type+0x5c/0x250 [ 658.625043][T15869] ? mutex_init_lockep+0x110/0x150 [ 658.625072][T15869] copy_net_ns+0x46f/0x7c0 [ 658.625095][T15869] create_new_namespaces+0x3ea/0xac0 [ 658.625121][T15869] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 658.625143][T15869] ksys_unshare+0x473/0xad0 [ 658.625169][T15869] ? __pfx_ksys_unshare+0x10/0x10 [ 658.625201][T15869] __x64_sys_unshare+0x31/0x40 [ 658.625224][T15869] do_syscall_64+0x106/0xf80 [ 658.625242][T15869] ? clear_bhb_loop+0x40/0x90 [ 658.625264][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.625283][T15869] RIP: 0033:0x7f805399c819 [ 658.625300][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.625317][T15869] RSP: 002b:00007f80548cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 658.625335][T15869] RAX: ffffffffffffffda RBX: 00007f8053c15fa0 RCX: 00007f805399c819 [ 658.625347][T15869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 658.625357][T15869] RBP: 00007f8053a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 658.625368][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.625378][T15869] R13: 00007f8053c16038 R14: 00007f8053c15fa0 R15: 00007ffe008ace28 [ 658.625400][T15869] [ 660.639880][T15897] zswap: compressor 000 not available [ 660.976601][T15905] zswap: compressor not available [ 661.452431][T15920] zram: Cannot change disksize for initialized device [ 666.158295][T15966] zswap: compressor 000 not available [ 666.885395][T15106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 666.896741][T15106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 666.904872][T15106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 666.912603][T15106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 666.921659][T15106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 668.187741][T15981] chnl_net:caif_netlink_parms(): no params data found [ 668.194840][T15995] sd 0:0:1:0: PR command failed: 1026 [ 668.200327][T15995] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 668.255885][T15995] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 668.883757][T15981] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.907367][T15981] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.946840][T15981] bridge_slave_0: entered allmulticast mode [ 668.973777][T15981] bridge_slave_0: entered promiscuous mode [ 669.026665][T15106] Bluetooth: hci4: command tx timeout [ 669.061995][T15981] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.094804][T15981] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.127137][T15981] bridge_slave_1: entered allmulticast mode [ 669.159546][T15981] bridge_slave_1: entered promiscuous mode [ 669.343387][T15981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.484489][T15981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.634047][T15981] team0: Port device team_slave_0 added [ 669.717941][T15981] team0: Port device team_slave_1 added [ 669.959543][T15981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.977071][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.046767][T15981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.092184][T15981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.116285][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.173514][T15981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.390673][T15981] hsr_slave_0: entered promiscuous mode [ 670.405600][T15981] hsr_slave_1: entered promiscuous mode [ 670.417104][T15981] debugfs: 'hsr0' already exists in 'hsr' [ 670.430062][T15981] Cannot create hsr debugfs directory [ 670.947970][T15981] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.106355][T15106] Bluetooth: hci4: command tx timeout [ 671.131001][T15981] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.227190][T15981] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.364383][T15981] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.828418][T15981] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.378000][T15981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.415483][T15981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.474726][T15981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 672.540616][T15981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 673.092102][T15981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.188008][T15106] Bluetooth: hci4: command tx timeout [ 673.301566][T15981] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.564277][T15561] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.571592][T15561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.662940][T15561] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.670157][T15561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.452089][T15981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.538013][T15981] veth0_vlan: entered promiscuous mode [ 674.558951][T15981] veth1_vlan: entered promiscuous mode [ 674.613979][T15981] veth0_macvtap: entered promiscuous mode [ 674.680773][T15981] veth1_macvtap: entered promiscuous mode [ 674.751370][T15981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.804567][T15981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.897201][T15561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.950291][T15561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.000448][T15561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.081508][T15561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.267964][T15106] Bluetooth: hci4: command tx timeout [ 675.501060][T15119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.547712][T15119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.651155][T15119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.703071][T15119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.818108][T16100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2296'. [ 675.854154][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.905025][T16100] bridge_slave_1 (unregistering): left allmulticast mode [ 675.915589][T15981] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 675.945165][T16100] bridge_slave_1 (unregistering): left promiscuous mode [ 675.969992][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.397045][T16103] zswap: compressor 000 not available [ 676.977830][T16116] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 677.150184][T16122] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 679.013503][T16160] zswap: compressor 000 not available [ 682.147038][T16226] zswap: compressor 000 not available [ 687.340266][T16296] zswap: compressor 000 not available [ 688.797769][T15106] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 690.814139][T15261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 690.824023][T15261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 690.833158][T15261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 690.845566][T15261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 690.855494][T15261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.096768][T16358] chnl_net:caif_netlink_parms(): no params data found [ 692.411144][T16358] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.437798][T16358] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.461256][T16358] bridge_slave_0: entered allmulticast mode [ 692.485256][T16358] bridge_slave_0: entered promiscuous mode [ 692.508412][T16358] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.535075][T16358] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.559495][T16358] bridge_slave_1: entered allmulticast mode [ 692.588405][T16358] bridge_slave_1: entered promiscuous mode [ 692.717555][T16358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.765713][T16358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.876467][T15261] Bluetooth: hci0: command tx timeout [ 692.899679][T16358] team0: Port device team_slave_0 added [ 692.928046][T16358] team0: Port device team_slave_1 added [ 693.012488][T16358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.037481][T16358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.124734][T16358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.196892][T16358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.229775][T16358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.357270][T16358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.607881][T16358] hsr_slave_0: entered promiscuous mode [ 693.641758][T16358] hsr_slave_1: entered promiscuous mode [ 693.672424][T16358] debugfs: 'hsr0' already exists in 'hsr' [ 693.692445][T16358] Cannot create hsr debugfs directory [ 694.197786][T16403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2366'. [ 694.743932][T16358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.957475][T15261] Bluetooth: hci0: command tx timeout [ 695.489052][T16358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.950067][T16358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.105076][T16358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.499829][T16358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 696.552307][T16358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 696.593341][T16358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 696.646730][T16358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 696.889920][T16358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.939306][T16358] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.981129][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.988313][T15119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.027399][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 697.039665][T15261] Bluetooth: hci0: command tx timeout [ 697.049961][T15561] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.057082][T15561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.086403][T16437] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2374'. [ 697.176355][T16358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.187319][T16437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2374'. [ 697.465757][T16443] zero sized request [ 697.820164][T16358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.008311][T16358] veth0_vlan: entered promiscuous mode [ 698.113519][T16358] veth1_vlan: entered promiscuous mode [ 698.694430][T16358] veth0_macvtap: entered promiscuous mode [ 698.798132][T16358] veth1_macvtap: entered promiscuous mode [ 699.086257][T16358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.120096][T15261] Bluetooth: hci0: command tx timeout [ 699.163957][T16358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.218086][T15190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.252326][T15190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.284743][T15190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.379149][T15190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.492916][T15190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.524636][T15190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.590751][T15190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.606865][T15190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.645521][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 709.714101][T16609] kAFS: Invalid Command on /proc/fs/afs/cells file [ 712.240397][T16651] syz.1.2423 (16651): attempted to duplicate a private mapping with mremap. This is not supported. [ 714.924547][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 715.000275][T16685] kAFS: Invalid Command on /proc/fs/afs/cells file [ 716.151444][T16708] zswap: compressor 000 not available [ 716.677321][T16713] zswap: compressor 000 not available [ 717.385001][T16729] FAULT_INJECTION: forcing a failure. [ 717.385001][T16729] name failslab, interval 1, probability 0, space 0, times 0 [ 717.469161][T16729] CPU: 0 UID: 0 PID: 16729 Comm: syz.1.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.469193][T16729] Tainted: [L]=SOFTLOCKUP [ 717.469199][T16729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.469210][T16729] Call Trace: [ 717.469215][T16729] [ 717.469223][T16729] dump_stack_lvl+0x100/0x190 [ 717.469257][T16729] should_fail_ex.cold+0x5/0xa [ 717.469279][T16729] should_failslab+0xc2/0x120 [ 717.469301][T16729] __kmalloc_cache_noprof+0x7a/0x6f0 [ 717.469327][T16729] ? dev_seq_start+0x8f/0x230 [ 717.469351][T16729] dev_seq_start+0x8f/0x230 [ 717.469370][T16729] ? __pfx_dev_seq_start+0x10/0x10 [ 717.469394][T16729] traverse.part.0.constprop.0+0xaf/0x650 [ 717.469432][T16729] seq_read_iter+0x93f/0x1270 [ 717.469472][T16729] proc_reg_read_iter+0x220/0x310 [ 717.469502][T16729] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 717.469532][T16729] vfs_read+0x825/0xb30 [ 717.469553][T16729] ? __pfx_vfs_read+0x10/0x10 [ 717.469569][T16729] ? find_held_lock+0x2b/0x80 [ 717.469601][T16729] __x64_sys_pread64+0x1eb/0x250 [ 717.469621][T16729] ? __pfx___x64_sys_pread64+0x10/0x10 [ 717.469647][T16729] do_syscall_64+0x106/0xf80 [ 717.469666][T16729] ? clear_bhb_loop+0x40/0x90 [ 717.469689][T16729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.469708][T16729] RIP: 0033:0x7f971959c819 [ 717.469724][T16729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.469742][T16729] RSP: 002b:00007f971a3df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 717.469761][T16729] RAX: ffffffffffffffda RBX: 00007f9719815fa0 RCX: 00007f971959c819 [ 717.469772][T16729] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000004 [ 717.469783][T16729] RBP: 00007f971a3df090 R08: 0000000000000000 R09: 0000000000000000 [ 717.469794][T16729] R10: 0000400010000005 R11: 0000000000000246 R12: 0000000000000001 [ 717.469804][T16729] R13: 00007f9719816038 R14: 00007f9719815fa0 R15: 00007ffefd9597e8 [ 717.469827][T16729] [ 718.175844][T15261] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 718.175872][T15261] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 718.194313][T15261] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 718.194355][T15261] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 718.203096][T15261] Bluetooth: hci4: Unknown advertising packet type: 0x39 [ 718.210737][T15261] Bluetooth: hci4: Unknown advertising packet type: 0x55 [ 718.217884][T15261] Bluetooth: hci4: Unknown advertising packet type: 0x75 [ 718.225285][T15261] Bluetooth: hci4: adv larger than maximum supported [ 718.233194][T15261] Bluetooth: hci4: Malformed LE Event: 0x0d [ 719.782588][T15106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 719.792696][T15106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 719.801304][T15106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 719.809461][T15106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 719.817245][T15106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.246660][T16760] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 720.260780][T16750] zswap: compressor 000 not available [ 721.054718][T16753] chnl_net:caif_netlink_parms(): no params data found [ 721.492557][T16753] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.527731][T16753] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.563292][T16753] bridge_slave_0: entered allmulticast mode [ 721.586727][T16780] zswap: compressor 000 not available [ 721.597678][T16753] bridge_slave_0: entered promiscuous mode [ 721.633923][T16753] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.661002][T16753] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.668321][T16753] bridge_slave_1: entered allmulticast mode [ 721.705218][T16753] bridge_slave_1: entered promiscuous mode [ 721.812593][T16753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.848349][T16753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.862500][T15106] Bluetooth: hci2: command tx timeout [ 721.984909][T16753] team0: Port device team_slave_0 added [ 722.003211][T16753] team0: Port device team_slave_1 added [ 722.069905][T16753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.093013][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.232758][T16753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.280210][T16790] bridge0: port 3(veth0_to_bridge) entered blocking state [ 722.301753][T16790] bridge0: port 3(veth0_to_bridge) entered disabled state [ 722.316553][T16790] veth0_to_bridge: entered allmulticast mode [ 722.338556][T16790] veth0_to_bridge: entered promiscuous mode [ 722.357608][T16790] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.406213][T16790] bridge0: port 3(veth0_to_bridge) entered blocking state [ 722.413530][T16790] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 722.494979][T16753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.520862][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.661237][T16753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.887352][T16753] hsr_slave_0: entered promiscuous mode [ 722.927703][T16753] hsr_slave_1: entered promiscuous mode [ 722.964079][T16753] debugfs: 'hsr0' already exists in 'hsr' [ 723.001474][T16753] Cannot create hsr debugfs directory [ 723.445514][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2454'. [ 723.608248][T16753] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.883471][T16753] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.935438][T15106] Bluetooth: hci2: command tx timeout [ 724.135836][T16753] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.259043][T16753] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.749665][T16753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 724.790066][T16753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 724.866426][T16753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 724.901316][T15106] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 724.901342][T15106] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 724.920103][T15106] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 724.920144][T15106] Bluetooth: hci0: adv larger than maximum supported [ 724.928793][T15106] Bluetooth: hci0: adv larger than maximum supported [ 724.935731][T15106] Bluetooth: hci0: Unknown advertising packet type: 0x7a [ 724.944295][T15106] Bluetooth: hci0: Malformed LE Event: 0x0d [ 724.960599][T16753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 725.397504][T16753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.436714][T16814] zswap: compressor 000 not available [ 725.479150][T16753] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.519720][T15551] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.526909][T15551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.578829][T15551] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.586066][T15551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.016743][T15106] Bluetooth: hci2: command tx timeout [ 726.392826][T16753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.447114][T16853] FAULT_INJECTION: forcing a failure. [ 726.447114][T16853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 726.493007][T16853] CPU: 0 UID: 0 PID: 16853 Comm: syz.0.2468 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.493037][T16853] Tainted: [L]=SOFTLOCKUP [ 726.493044][T16853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 726.493054][T16853] Call Trace: [ 726.493061][T16853] [ 726.493073][T16853] dump_stack_lvl+0x100/0x190 [ 726.493106][T16853] should_fail_ex.cold+0x5/0xa [ 726.493125][T16853] ? prepare_alloc_pages+0x16d/0x5f0 [ 726.493150][T16853] should_fail_alloc_page+0xeb/0x140 [ 726.493174][T16853] prepare_alloc_pages+0x1f0/0x5f0 [ 726.493200][T16853] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 726.493232][T16853] ? rcu_is_watching+0x12/0xc0 [ 726.493261][T16853] ? trace_mm_page_alloc+0x17a/0x1d0 [ 726.493284][T16853] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 726.493312][T16853] ? kernel_text_address+0xa1/0x100 [ 726.493339][T16853] ? unwind_get_return_address+0x59/0xa0 [ 726.493360][T16853] ? arch_stack_walk+0xa6/0xf0 [ 726.493379][T16853] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 726.493419][T16853] ? stack_depot_save_flags+0x27/0x9d0 [ 726.493444][T16853] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 726.493472][T16853] ? pcpu_get_vm_areas+0x520/0x55d0 [ 726.493490][T16853] ? pcpu_create_chunk+0x254/0x730 [ 726.493523][T16853] ? pcpu_create_chunk+0x254/0x730 [ 726.493548][T16853] ? pcpu_alloc_noprof+0x18c4/0x1c50 [ 726.493579][T16853] alloc_pages_bulk_noprof+0x782/0x1490 [ 726.493617][T16853] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 726.493656][T16853] ? alloc_pages_noprof+0x238/0x390 [ 726.493679][T16853] __kasan_populate_vmalloc+0xf0/0x210 [ 726.493714][T16853] pcpu_get_vm_areas+0x2df1/0x55d0 [ 726.493752][T16853] ? __pfx_pcpu_get_vm_areas+0x10/0x10 [ 726.493780][T16853] pcpu_create_chunk+0x254/0x730 [ 726.493810][T16853] pcpu_alloc_noprof+0x18c4/0x1c50 [ 726.493849][T16853] bpf_map_alloc_percpu+0x9a/0xf0 [ 726.493868][T16853] ? __pfx_bpf_map_alloc_percpu+0x10/0x10 [ 726.493889][T16853] ? __pfx___might_resched+0x10/0x10 [ 726.493917][T16853] ? __bpf_map_area_alloc+0x13a/0x200 [ 726.493952][T16853] htab_map_alloc+0x1054/0x14e0 [ 726.493975][T16853] ? ns_capable+0xd2/0xf0 [ 726.493994][T16853] ? __pfx_htab_map_mem_usage+0x10/0x10 [ 726.494013][T16853] map_create+0x84e/0x2ba0 [ 726.494032][T16853] ? preempt_schedule_thunk+0x16/0x30 [ 726.494063][T16853] ? __pfx_map_create+0x10/0x10 [ 726.494080][T16853] ? __might_fault+0xc5/0x140 [ 726.494107][T16853] ? __might_fault+0xc5/0x140 [ 726.494144][T16853] __sys_bpf+0x2091/0x4b90 [ 726.494164][T16853] ? futex_private_hash_put+0x107/0x1c0 [ 726.494190][T16853] ? __pfx___sys_bpf+0x10/0x10 [ 726.494214][T16853] ? __pfx_futex_wake+0x10/0x10 [ 726.494245][T16853] ? do_writev+0x214/0x340 [ 726.494267][T16853] ? do_futex+0x192/0x350 [ 726.494304][T16853] ? xfd_validate_state+0x129/0x190 [ 726.494337][T16853] __x64_sys_bpf+0x7b/0xc0 [ 726.494359][T16853] ? lockdep_hardirqs_on+0x78/0x100 [ 726.494379][T16853] do_syscall_64+0x106/0xf80 [ 726.494396][T16853] ? clear_bhb_loop+0x40/0x90 [ 726.494419][T16853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.494437][T16853] RIP: 0033:0x7f5e12d9c819 [ 726.494453][T16853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.494471][T16853] RSP: 002b:00007f5e13c39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 726.494489][T16853] RAX: ffffffffffffffda RBX: 00007f5e13015fa0 RCX: 00007f5e12d9c819 [ 726.494501][T16853] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 726.494512][T16853] RBP: 00007f5e12e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 726.494523][T16853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.494533][T16853] R13: 00007f5e13016038 R14: 00007f5e13015fa0 R15: 00007ffc8f832108 [ 726.494557][T16853] [ 727.469626][T16753] veth0_vlan: entered promiscuous mode [ 727.521825][T16753] veth1_vlan: entered promiscuous mode [ 727.621583][T16861] Invalid ELF header magic: != ELF [ 727.622391][T16753] veth0_macvtap: entered promiscuous mode [ 727.656444][T16753] veth1_macvtap: entered promiscuous mode [ 727.791484][T16753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.814229][T16868] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 727.832783][T16753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.851218][T15119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.851402][T15119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.851446][T15119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.851475][T15119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.097722][T15106] Bluetooth: hci2: command tx timeout [ 728.366082][T16870] zswap: compressor 000 not available [ 728.367609][T16753] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 728.466712][T15551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.466763][T15551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.473877][T16753] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 728.502386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.502677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.502926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.503166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.503397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.503628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.503874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.504186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.504419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.504657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.506702][ C0] net_ratelimit: 15562 callbacks suppressed [ 733.506722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.507061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.507918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.508173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.508462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.509277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.509530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.509820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.510655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.510916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.848769][ C0] sched: DL replenish lagged too much [ 738.519251][ C0] net_ratelimit: 11208 callbacks suppressed [ 738.519271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 738.519490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.519848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.520149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.521037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 738.521259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.521519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.521825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.522704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 738.522934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.531795][ C0] net_ratelimit: 12255 callbacks suppressed [ 743.531816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.532110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.532432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.533416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 743.533675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.533950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.534262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.535180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 743.535410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.535705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.544850][ C0] net_ratelimit: 12373 callbacks suppressed [ 748.544870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 748.545079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.545348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.545629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.546845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 748.547066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.547319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.547645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.548509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 748.548726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.556746][ C0] net_ratelimit: 12337 callbacks suppressed [ 753.556768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.557611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 753.557828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.558080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.558378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.559261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 753.559478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.559731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.560020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.560853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 758.569684][ C0] net_ratelimit: 12443 callbacks suppressed [ 758.569705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 758.569918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.570171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.570455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.571275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 758.571484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.571728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.572011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.572843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 758.573076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.582500][ C0] net_ratelimit: 12338 callbacks suppressed [ 763.582520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 763.582744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.583015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.583338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.584201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 763.584430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.584711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.585345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.586181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 763.586398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.594183][ C0] net_ratelimit: 12546 callbacks suppressed [ 768.594203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 768.594418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.594663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.594954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.595755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 768.595970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.596263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.596546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.597353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 768.597562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.606902][ C0] net_ratelimit: 12510 callbacks suppressed [ 773.606923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 773.607146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.607387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.607661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.608491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 773.608720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.608989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.609263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.610047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 773.610252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.619291][ C0] net_ratelimit: 12196 callbacks suppressed [ 778.619311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.619619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.620441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 778.620650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.620894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.621192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.621989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 778.622227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.622475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.622776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.631837][ C0] net_ratelimit: 12451 callbacks suppressed [ 783.631858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.632122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.632437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.633274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 783.633492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.633745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.633998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.634295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.635181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 783.635397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.644245][ C0] net_ratelimit: 13165 callbacks suppressed [ 788.644267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.644519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.644833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.645656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 788.645866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.646118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.646365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.646673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.647481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 788.648372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.256598][T15261] Bluetooth: hci4: command 0x0406 tx timeout [ 793.657156][ C0] net_ratelimit: 14181 callbacks suppressed [ 793.657176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.657499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.658893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 793.659143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.659422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.659673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.659976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.660769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.661058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.661309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 798.669551][ C0] net_ratelimit: 11575 callbacks suppressed [ 798.669571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.670483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.670774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 798.670999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.671258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.671517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.671847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.672673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.673571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.673832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 803.682107][ C0] net_ratelimit: 11632 callbacks suppressed [ 803.682128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.682384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 803.682625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.682888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.683143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.683457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.684298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.685207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.685461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 803.685679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.694369][ C0] net_ratelimit: 12269 callbacks suppressed [ 808.694389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.695303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.695557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 808.695816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 808.696033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.696285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.696537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.696834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.697672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.698546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.707281][ C0] net_ratelimit: 12439 callbacks suppressed [ 813.707301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.707546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 813.707814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 813.708028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.708272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.708515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.708812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.709589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.710495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.710741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 816.579542][T15260] Bluetooth: hci0: command 0x0406 tx timeout [ 818.719187][ C0] net_ratelimit: 12149 callbacks suppressed [ 818.719208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.720070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.720346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 818.720591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 818.720805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.721049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.721292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.721573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.722347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.723180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.731724][ C0] net_ratelimit: 12543 callbacks suppressed [ 823.731750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.732014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 823.732273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 823.732496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.732966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.733276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.733595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.734526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.735501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.735796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 828.744343][ C0] net_ratelimit: 12283 callbacks suppressed [ 828.744364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.744668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.745491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.746364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.746626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 828.746907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 828.747132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.747385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.747670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.747966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.756860][ C0] net_ratelimit: 12440 callbacks suppressed [ 833.756880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.757783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.758038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 833.758281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 833.758520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.758771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.759014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.759293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.760068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.760961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.769458][ C0] net_ratelimit: 12261 callbacks suppressed [ 838.769478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.770300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.771183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.771437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 838.771727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 838.771943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.772196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.772452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.772781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.773574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.782285][ C0] net_ratelimit: 12192 callbacks suppressed [ 843.782305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.782574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 843.782872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 843.783101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.783367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.783633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.783944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.784853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.785780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.786047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 848.794501][ C0] net_ratelimit: 12293 callbacks suppressed [ 848.794521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.795403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.795655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 848.796088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 848.796365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.796634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.796906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.797220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.798279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.799215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.807049][ C0] net_ratelimit: 12167 callbacks suppressed [ 853.807069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.808048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 853.808317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 853.808544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.808854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.809125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.809428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.810268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.811214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.811501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 858.819387][ C0] net_ratelimit: 12280 callbacks suppressed [ 858.819407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 858.819619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.819867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.820120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.820426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.821226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.822070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.822316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 858.822562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 858.822786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.832505][ C0] net_ratelimit: 12428 callbacks suppressed [ 863.832525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.832778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 863.833036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 863.833255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.833541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.833788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.834077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.834848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.835714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.835966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 868.844356][ C0] net_ratelimit: 11972 callbacks suppressed [ 868.844377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.845211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.846153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.846413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 868.846681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 868.846925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.847185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.847443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.847747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.848561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.856843][ C0] net_ratelimit: 12369 callbacks suppressed [ 873.856863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 873.857140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 873.857395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.857671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.857978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.858283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.859159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.860073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.860360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 873.860620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 878.869316][ C0] net_ratelimit: 12348 callbacks suppressed [ 878.869337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.870295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.870559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 878.870829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 878.871052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.871339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.871598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.871903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.872751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.873656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.882302][ C0] net_ratelimit: 12390 callbacks suppressed [ 883.882323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.883278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.883568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 883.883842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 883.884068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.884332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.884596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.884945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.885784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.886744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.894577][ C0] net_ratelimit: 11927 callbacks suppressed [ 888.894604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.894861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 888.895109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 888.895320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.895567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.895821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.896104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.896925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.897774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.898020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 893.906877][ C0] net_ratelimit: 12185 callbacks suppressed [ 893.906897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.907174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.907428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.907940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.908947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.909903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.910175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 893.910481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 893.910742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.911002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.346593][ T31] INFO: task kworker/u10:3:15119 blocked for more than 148 seconds. [ 894.346626][ T31] Tainted: G L syzkaller #0 [ 894.346638][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 894.346647][ T31] task:kworker/u10:3 state:D stack:24808 pid:15119 tgid:15119 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 894.346703][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 894.346731][ T31] Call Trace: [ 894.346738][ T31] [ 894.346750][ T31] __schedule+0xfee/0x6120 [ 894.346791][ T31] ? __lock_acquire+0x4a5/0x2630 [ 894.346829][ T31] ? __pfx___schedule+0x10/0x10 [ 894.346858][ T31] ? find_held_lock+0x2b/0x80 [ 894.346879][ T31] ? schedule+0x2bf/0x390 [ 894.365640][ T31] schedule+0xdd/0x390 [ 894.365688][ T31] schedule_preempt_disabled+0x13/0x30 [ 894.365721][ T31] __mutex_lock+0xc9a/0x1b90 [ 894.365745][ T31] ? addrconf_dad_work+0x11f/0x1360 [ 894.365772][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 894.365793][ T31] ? trace_ignore_this_task+0xc3/0x100 [ 894.365824][ T31] ? look_up_lock_class+0x55/0x120 [ 894.365852][ T31] ? __lock_acquire+0x4a5/0x2630 [ 894.365882][ T31] ? addrconf_dad_work+0x11f/0x1360 [ 894.365904][ T31] ? rtnl_lock+0x9/0x20 [ 894.365926][ T31] addrconf_dad_work+0x11f/0x1360 [ 894.365952][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 894.365979][ T31] ? rcu_is_watching+0x12/0xc0 [ 894.366013][ T31] process_one_work+0xa23/0x19a0 [ 894.366059][ T31] ? __pfx_process_one_work+0x10/0x10 [ 894.366101][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 894.366126][ T31] worker_thread+0x5ef/0xe50 [ 894.366161][ T31] ? __pfx_worker_thread+0x10/0x10 [ 894.366191][ T31] ? kthread+0x13a/0x450 [ 894.366217][ T31] ? __pfx_worker_thread+0x10/0x10 [ 894.366245][ T31] kthread+0x370/0x450 [ 894.366271][ T31] ? __pfx_kthread+0x10/0x10 [ 894.366300][ T31] ret_from_fork+0x754/0xd80 [ 894.366332][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 894.366364][ T31] ? __switch_to+0x7b4/0x1120 [ 894.366388][ T31] ? __pfx_kthread+0x10/0x10 [ 894.366416][ T31] ret_from_fork_asm+0x1a/0x30 [ 894.366449][ T31] [ 894.366479][ T31] INFO: task syz.3.2471:16869 blocked for more than 148 seconds. [ 894.366496][ T31] Tainted: G L syzkaller #0 [ 894.366507][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 894.366516][ T31] task:syz.3.2471 state:D stack:26344 pid:16869 tgid:16866 ppid:16358 task_flags:0x400140 flags:0x00080002 [ 894.366574][ T31] Call Trace: [ 894.366581][ T31] [ 894.366592][ T31] __schedule+0xfee/0x6120 [ 894.366629][ T31] ? __lock_acquire+0x4a5/0x2630 [ 894.366666][ T31] ? __pfx___schedule+0x10/0x10 [ 894.366696][ T31] ? find_held_lock+0x2b/0x80 [ 894.366716][ T31] ? schedule+0x2bf/0x390 [ 894.366750][ T31] schedule+0xdd/0x390 [ 894.366780][ T31] schedule_preempt_disabled+0x13/0x30 [ 894.366811][ T31] __mutex_lock+0xc9a/0x1b90 [ 894.366832][ T31] ? mark_held_locks+0x40/0x70 [ 894.366858][ T31] ? ptmx_open+0x150/0x3c0 [ 894.366884][ T31] ? ptmx_open+0x102/0x3c0 [ 894.366913][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 894.375979][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 894.376010][ T31] ? __pfx_ida_alloc_range+0x10/0x10 [ 894.376033][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 894.376059][ T31] ? __pfx_devpts_acquire+0x10/0x10 [ 894.376092][ T31] ? ptmx_open+0x150/0x3c0 [ 894.376118][ T31] ptmx_open+0x150/0x3c0 [ 894.376145][ T31] ? __pfx_ptmx_open+0x10/0x10 [ 894.376172][ T31] chrdev_open+0x234/0x6a0 [ 894.376194][ T31] ? __pfx_apparmor_file_open+0x10/0x10 [ 894.376217][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 894.376241][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 894.376269][ T31] do_dentry_open+0x6d8/0x1660 [ 894.376290][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 894.376318][ T31] vfs_open+0x82/0x3f0 [ 894.376347][ T31] path_openat+0x208c/0x31a0 [ 894.376377][ T31] ? __pfx_path_openat+0x10/0x10 [ 894.376407][ T31] do_file_open+0x20e/0x430 [ 894.376431][ T31] ? __pfx_do_file_open+0x10/0x10 [ 894.376469][ T31] ? alloc_fd+0x476/0x790 [ 894.376492][ T31] ? do_getname+0x191/0x390 [ 894.376520][ T31] do_sys_openat2+0x10d/0x1e0 [ 894.376548][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 894.376584][ T31] __x64_sys_openat+0x12d/0x210 [ 894.376613][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 894.376655][ T31] do_syscall_64+0x106/0xf80 [ 894.376675][ T31] ? clear_bhb_loop+0x40/0x90 [ 894.376700][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.376722][ T31] RIP: 0033:0x7f0ff019c819 [ 894.376738][ T31] RSP: 002b:00007f0ff10d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 894.376759][ T31] RAX: ffffffffffffffda RBX: 00007f0ff0416180 RCX: 00007f0ff019c819 [ 894.376773][ T31] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 894.376785][ T31] RBP: 00007f0ff0232c91 R08: 0000000000000000 R09: 0000000000000000 [ 894.376798][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.376810][ T31] R13: 00007f0ff0416218 R14: 00007f0ff0416180 R15: 00007ffe3bcfaa58 [ 894.376835][ T31] [ 894.376846][ T31] [ 894.376846][ T31] Showing all locks held in the system: [ 894.376853][ T31] 1 lock held by init/1: [ 894.376865][ T31] 2 locks held by kthreadd/2: [ 894.376877][ T31] 4 locks held by kworker/0:1/10: [ 894.376889][ T31] 1 lock held by khungtaskd/31: [ 894.376899][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 894.385703][ T31] 1 lock held by kcompactd0/35: [ 894.385739][ T31] 1 lock held by klogd/5183: [ 894.385750][ T31] 2 locks held by udevd/5194: [ 894.385760][ T31] 1 lock held by dhcpcd/5488: [ 894.385771][ T31] #0: ffff88807c65de48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 894.385828][ T31] 2 locks held by dhcpcd/5489: [ 894.385840][ T31] 3 locks held by crond/5566: [ 894.385852][ T31] 3 locks held by syz-executor/5810: [ 894.385863][ T31] 2 locks held by syz-executor/5828: [ 894.385878][ T31] 3 locks held by kworker/0:4/5885: [ 894.385889][ T31] 3 locks held by kworker/0:5/5892: [ 894.385900][ T31] 2 locks held by kworker/0:7/5913: [ 894.385911][ T31] 5 locks held by kworker/0:0/14270: [ 894.385922][ T31] 3 locks held by kworker/u11:0/15106: [ 894.385933][ T31] 3 locks held by kworker/u10:1/15112: [ 894.385944][ T31] 3 locks held by kworker/u10:2/15113: [ 894.385955][ T31] 3 locks held by kworker/u10:3/15119: [ 894.385966][ T31] #0: ffff8880323d1948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 894.386026][ T31] #1: ffffc900048cfd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 894.386085][ T31] #2: ffffffff90616ce8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 894.386136][ T31] 7 locks held by kworker/u11:1/15128: [ 894.386147][ T31] #0: ffff88805388d948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 894.386204][ T31] #1: ffffc90002f17d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 894.386262][ T31] #2: ffff88802a75cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 894.386312][ T31] #3: ffff88802a75c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 894.386361][ T31] #4: ffffffff908affc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x119/0x360 [ 894.386407][ T31] #5: ffff888051cba300 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 894.386465][ T31] #6: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 894.386517][ T31] 3 locks held by kworker/u10:4/15133: [ 894.386529][ T31] 2 locks held by kworker/u10:7/15190: [ 894.386541][ T31] 5 locks held by kworker/u11:2/15260: [ 894.386552][ T31] #0: ffff8880323d1148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 894.386609][ T31] #1: ffffc90004727d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 894.386673][ T31] #2: ffff888028068ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 894.386721][ T31] #3: ffff8880280680c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 894.386769][ T31] #4: ffffffff908affc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x119/0x360 [ 894.386817][ T31] 5 locks held by kworker/u10:8/15536: [ 894.386828][ T31] 4 locks held by kworker/u10:9/15537: [ 894.386839][ T31] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 894.386896][ T31] #1: ffffc900032a7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 898.919371][ C0] net_ratelimit: 12558 callbacks suppressed [ 898.919390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 898.919636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.919892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.920146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.920436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.921264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.922138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.922391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 898.922613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.922903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 903.484945][T15106] Bluetooth: hci2: command tx timeout [ 903.931893][ C0] net_ratelimit: 12904 callbacks suppressed [ 903.931913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.932197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 903.932406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.932660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.932942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.933224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.933999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.934898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.935148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:42:11:0a:bb:2d, vlan:0) [ 903.935360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 905.618537][ T31] #2: ffffffff905fe490 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 905.618607][ T31] #3: ffffffff90616ce8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 [ 905.618659][ T31] 3 locks held by kworker/u10:10/15538: [ 905.618671][ T31] 3 locks held by kworker/u10:11/15539: [ 905.618683][ T31] 3 locks held by kworker/u10:12/15550: [ 905.618694][ T31] 3 locks held by kworker/u10:13/15551: [ 905.618706][ T31] 3 locks held by kworker/u10:14/15552: [ 905.618718][ T31] 3 locks held by kworker/u10:16/15554: [ 905.618730][ T31] 4 locks held by kworker/u10:17/15555: [ 905.618741][ T31] 3 locks held by kworker/u10:18/15556: [ 905.618753][ T31] 3 locks held by kworker/u10:19/15557: [ 905.618765][ T31] 3 locks held by kworker/u10:20/15558: [ 905.618777][ T31] 4 locks held by kworker/u10:21/15559: [ 905.618788][ T31] 3 locks held by kworker/u10:22/15560: [ 905.618800][ T31] 3 locks held by kworker/u10:23/15561: [ 905.618811][ T31] 3 locks held by kworker/u10:24/15562: [ 905.618823][ T31] 3 locks held by kworker/u10:25/15563: [ 905.618845][ T31] 2 locks held by syz-executor/16358: [ 905.618859][ T31] 4 locks held by syz-executor/16753: [ 905.618870][ T31] #0: ffffffff906c3030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 905.618920][ T31] #1: ffffffff906c30e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 905.618972][ T31] #2: ffffffff90616ce8 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_register+0x1e3d/0x2d30 [ 905.619023][ T31] #3: ffff88806b988788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x9e/0x1b0 [ 905.619079][ T31] 4 locks held by syz.0.2468/16862: [ 905.619091][ T31] 2 locks held by syz.2.2469/16857: [ 905.619102][ T31] 1 lock held by syz.3.2471/16869: [ 905.619114][ T31] #0: ffffffff8f4f17a8 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x150/0x3c0 [ 905.619170][ T31] [ 905.619176][ T31] ============================================= [ 905.619176][ T31] [ 905.619184][ T31] NMI backtrace for cpu 0 [ 905.619199][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 905.619224][ T31] Tainted: [L]=SOFTLOCKUP [ 905.619230][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 905.619241][ T31] Call Trace: [ 905.619247][ T31] [ 905.619254][ T31] dump_stack_lvl+0x100/0x190 [ 905.619284][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 905.619315][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 905.619344][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 905.619373][ T31] sys_info+0x141/0x190 [ 905.619395][ T31] watchdog+0xd25/0x1050 [ 905.619420][ T31] ? __pfx_watchdog+0x10/0x10 [ 905.619440][ T31] ? __kthread_parkme+0x18c/0x230 [ 905.619464][ T31] ? kthread+0x13a/0x450 [ 905.619488][ T31] ? __pfx_watchdog+0x10/0x10 [ 905.619504][ T31] kthread+0x370/0x450 [ 905.619528][ T31] ? __pfx_kthread+0x10/0x10 [ 905.619555][ T31] ret_from_fork+0x754/0xd80 [ 905.619586][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 905.619616][ T31] ? __switch_to+0x7b4/0x1120 [ 905.619637][ T31] ? __pfx_kthread+0x10/0x10 [ 905.619664][ T31] ret_from_fork_asm+0x1a/0x30 [ 905.619694][ T31] [ 905.619705][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 905.619718][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 905.619743][ T31] Tainted: [L]=SOFTLOCKUP [ 905.619750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 905.619760][ T31] Call Trace: [ 905.619767][ T31] [ 905.619773][ T31] dump_stack_lvl+0x100/0x190 [ 905.619802][ T31] vpanic+0x552/0x970 [ 905.619821][ T31] ? __pfx_vpanic+0x10/0x10 [ 905.619846][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 905.619873][ T31] ? rcu_is_watching+0x12/0xc0 [ 905.619906][ T31] panic+0xd1/0xe0 [ 905.619923][ T31] ? __pfx_panic+0x10/0x10 [ 905.619943][ T31] ? nmi_cpu_backtrace+0x79/0x200 [ 905.619970][ T31] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 905.619996][ T31] ? watchdog.cold+0x198/0x1ca [ 905.620017][ T31] ? watchdog+0xd35/0x1050 [ 905.620037][ T31] watchdog.cold+0x1a9/0x1ca [ 905.620064][ T31] ? __pfx_watchdog+0x10/0x10 [ 905.620084][ T31] ? __kthread_parkme+0x18c/0x230 [ 905.620108][ T31] ? kthread+0x13a/0x450 [ 905.620132][ T31] ? __pfx_watchdog+0x10/0x10 [ 905.620150][ T31] kthread+0x370/0x450 [ 905.620175][ T31] ? __pfx_kthread+0x10/0x10 [ 905.620203][ T31] ret_from_fork+0x754/0xd80 [ 905.620233][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 905.620264][ T31] ? __switch_to+0x7b4/0x1120 [ 905.620285][ T31] ? __pfx_kthread+0x10/0x10 [ 905.620313][ T31] ret_from_fork_asm+0x1a/0x30 [ 905.620343][ T31] [ 905.620405][ T31] Kernel Offset: disabled