last executing test programs: 46.331883775s ago: executing program 3 (id=2571): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x8000000012, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) r0 = open(0x0, 0x161342, 0x130) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r0, 0x7f, &(0x7f00000000c0)="81488f316af6231d90dfba4ae7070a56dfc14cdf3ed584b939dc3e3549e9785fe4a985419c42a198490d") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) sendto$auto(r1, 0x0, 0xf, 0xfffffff8, &(0x7f0000000000)=@in={0x2, 0x4e1f, @remote}, 0x1c) bind$auto(r0, 0x0, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlockall$auto(0x800000000000005) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x10, 0x20000008, 0xfff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x800008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/teql0/statistics/rx_dropped\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyq3/uevent\x00', 0x1a001, 0x0) write$auto(r3, 0x0, 0xd4d0) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) kexec_load$auto(0x1000009, 0x5, 0x0, 0x1003e0000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) write$auto(r4, &(0x7f0000000080)='9\x00;T\x16\b\x06\x00\x00\x00', 0x10) 46.176772785s ago: executing program 0 (id=2572): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x92106405, r0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r1 = socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x3ff}, 0x4295) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) migrate_pages$auto(0x0, 0x7, &(0x7f0000000100)=0x7, &(0x7f0000000140)=0x2) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x4, 0x4020009, 0xdf, 0x7f, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0x6, &(0x7f00000000c0)={@siginfo_0_0={0x5, 0x5, 0xffffffff, @_sigfault={&(0x7f0000000000)="6ee2a44ddf155204d09dcfb1a8991ad001ce6dda2eb79a460cd39a871ffe21a1a62f87cdad8416a5daf5727d818ad2c384e1ee6f20ed00d050b94a07c2922dd2d32290891621aaf62a42722d530c79180bb81c8f5cb51147d6b12a1bf1db08963cde3ed94dd979ca8894f4758bd89bbeae81d989b06f5ba4b2571b82af9c43e12aaf3c0a946464daf38601a6d991a51492f9c197480266531bd4dc4233304b84da783ba0e068d09a9aaaf46f6f5132ed26edfa30947ea30a051177", @_trapno=0xfffffffc}}}, 0xffff, &(0x7f0000000140)={{0xd04a, 0x2627}, {0x8000000000000000, 0xc252000000000000}, 0x7, 0x48d, 0x6, 0x9, 0x95a, 0x8, 0xee, 0x3, 0x2, 0x40, 0x2, 0x70c1, 0x7, 0x9}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x2a540, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) mprotect$auto(0x0, 0x8000000000000001, 0x8) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 45.878400497s ago: executing program 2 (id=2573): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xc008aeba, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x100000005, 0xeb2, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x0, 0x8, 0x2000006) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) 45.506110004s ago: executing program 2 (id=2574): syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), 0xffffffffffffffff) symlink$auto(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x903080, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd8\x00', 0x4e0dc3, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8095}, 0x404c081) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x48100, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000", @ANYRES16=r4, @ANYBLOB="010024bd3000fedbdfa504"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000200)={0x68, 0xee01, 0x2}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r5, 0x400c4d02, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ptrace$auto_ARCH_SHSTK_LOCK(0x80000001, 0x0, 0x7, 0x5003) landlock_restrict_self$auto(0xffffffffffffffff, 0x1ffff) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x80006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffe) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) 45.344937705s ago: executing program 0 (id=2576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x48000000000000}, 0x4000) 44.89161848s ago: executing program 3 (id=2579): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) msync$auto(0x0, 0x2000000005, 0x6) r0 = socket(0x21, 0x2, 0x2) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r1 = socket(0x22, 0x2, 0x10000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004803}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x408000) clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) r2 = socket(0x1e, 0x1, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x400000000000f8, r2, 0x8000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x4f1f, 0x6, 0x5, 0x7) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x1, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x7) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x0, 0x0) socket(0xa, 0x2, 0x3a) 44.867590278s ago: executing program 2 (id=2580): r0 = userfaultfd$auto(0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x5c8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)=@bpf_attr_5={@target_ifindex=r4, r1, 0x2, 0x7, r0, @relative_fd=r3, 0x6}, 0x2) 44.52993267s ago: executing program 1 (id=2581): set_mempolicy$auto(0x1, 0x0, 0x21) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0xd00) 44.465518634s ago: executing program 2 (id=2582): sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x780, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x76c, 0x19, 0x0, 0x1, [@generic="2467560fdcb7922477655e10e7be50a9b160cf19d10185b2139596f946bafc34b2b819ae3b486f7ca3693c1f87f5f84f007f1daced9807bea608896b1753079faa167fa8a25936f57afe2891e945f9e80b06d50c8853f905bdd5e65a8b2738ec1aacde2d4b7327ad505a8e08c2047be403944a32f2fab966420ecd390812ac9af2e220b39afb15e542d6456e14cded687b485d2788b4659facaf4c02f9146e1490c3b932e38fc67120e0768c18642073f439b7d2195e64080f6619fb6bd199e879f3042b3cd375e9a4c71eba9ed5e299387e5a2215d19df6bbcc596013190433c946b18902f63155b5a21a7bb976dad01fe57fe50f3e61252c594ba4e090ef97f0ec16da596eca63d60d9333fc43c8edc0d357c29db146a7bb1c0be98b262a6fcc15f4b8acde08680bf7ce8d39a2e88df4f13471094f349599fd1a93e148ece7d953f6b152e50e886b98e25c59e1f11f652049bdbd5fcbea8b83b948d6cf6d1b9335c380ebf163002fc5833e1870c44ec63fd030eba6d237e9e05968d9803588c82a820c5bb04fdcb5c7122c34dee40a094e2d1110704491d1092c87736aa607dcf0c63c211eddaa8b3c35a060e343446f115d45db3f452c863bc3406e027fc507c73fcab90faf39ca3d56dc1f87eade59ca4bbe1c380a1605c28684e78ea15fa565bc8b04540a88c10a7d6a8bd7c49244ded2c91013889a561378cc4bd3257d4e2a1e2139ff73779ce15d821f787bc99987e193ebff1ecc40e3dcfebe7af745f43ef4380c29b46c728af2917fea8ec7bee8c249437c975c9933f04a113bb16e0db8a54292499584e75416385143bab979ddefe0b21fabbb26810f193565c21687bb3026744f844350ea93a00627791e7c634f958270a47796c5bfcaf914a47607dfee0c795b2376a025ffe15ed1d03507e5d76fa5636ef6e53e332a803c7e8f2089f6cf6b4665be90f99a16cc6c52b20eb2fc4f8f1a239b7f7296c1c799d05df04e3fa8b802ed958715438544eae7825951f931c57376f24797775eefcb21dcc07a7de6b9321e4cec4a309a52d5f71da8038d45406af3b6370e0d767efaeb5556fd10b658d785a97bcc9f91316c461ab705fc377f9e0783ddb6ddc853b861f5bd9db21d6761e9c3945f9e7bd3a1142fc44f600a0aaa206f38ccea05aa831e570e7071c44075d14dfeb3aeaac1eb0cd1538c9db580f36ec2de32f8f7c941daaaa590b8494f7d8281c9b9b40b5cfd5383e9de7eced8baf73f5f5bd41fc731974533711bfb738ad9b06e6453f86ce2a199673b50f75baef0bd73bbb9e1294ab8a988fe972954b3ebda8ec79b8d0b715ce3b06a46b32f3730f141494271e63a88e6e8d132e741f31b526003b1ae318be7969dc07e2b4e8a3ad675e17d1c067a72afacdc5d55e1144f2bb95ac4ac3cd4d62b2aed8c8e56fdc4ef5619d2a305f8dcd40d6f3fae631d147ef26dae6d5ac23e5b67b342ecf59e040be43f0c0e94b1314de1f6d0b5472fd7d1c03493fc503d96babf085bcf567277ee851ae3850a7500b99581db655e1432e17ab63676dc6f166336e13982d8c81027607780f97de6695afb72add7b4f46a0ba43bb41770450a74318623a4486e49c365a6b77386544348c1de178af78c276aca51ed530a55f8552df5ba5f780be772e35faf65341e50ae510d7ee240f132d81189f40a25e303328678df4948006e115c9ee0d0f3ce88e39fe090ba03b37a81dbd5ea49995f58054a3766b458e66ab21820cdaac3d602ee758cccf8867200dbfc75c2dbeed6af7a95844b03b8500a346aed8444e8ba63f6b421bdf7d4bcbc54e9f02f9f1058abea860abecfc987b894f1892e76072a202ea9a65bfaeee3338b2028c451f87b348b9edb279529bd211f69389282c8721a57353def150274be6439b6b5365a0292a8bd22c61bcf52cb6aef882db470c8c46c604697925a5d718cf40009b265c3012060f8aa2d76bc7748c1810408d0d13ac811e4a48b053131de2204218b149b83089722e8213517fc5f36b55698d728ad07c59fbafad44958e6259109705140efa43befc2fed6afb3100a0a80be4c008ea8c23fc12fc6cb8237cb10aa3dce465172c21dae6975fbf2d9dcaff4b17a30a58b766633da3f3196d8176c183a8d646f692ac68328a6772f7497b657eb25a78038782cada0b6a42b99fb057a90b6459e1360fbd4ec2e05adfd9d2b6215d9983f93bcb9f1ffc2e5d91998a2376002eec0beef28d1aa8529baa96c9d45cbcc6b2ae067fc3109aa78e9db7a2ee4cf569e9d4445c1cb4513c664157d0b59ba2f37d6a017fcd12a38e4d0bdd79ef68777ae232c1fa3328d305e6856cb010f9d639711e21630aef15c4d8e387c547e5545678cf9d06db4fafd7d1fb7f9068a2c01155419897288473668f977166c2b3307ed8ce3e9ff2292c3e570b85da68b8657ba9beb16e8c676f241ba584cbf22f0035674c02fe6e3099d108ee8dd82833091128e1250d9a8a5f59c65bd2bca03ff067286d38131c5abe626a37938c6d14c58de13c176a8a9c419d84f40fd8cc07ccf29d907b05775f5a125b58737dbd66e5e3f283ef4f1b6d89fa88689d38874fb75319d89ca236e4ae62c98f239654dfa3604dd364abc20581c8604b61f2e7833a27be5c064b3ffea5ab5ac53c8fe73cd8aba94526602b99f01cf1b4d"]}]}, 0x780}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) 44.317824123s ago: executing program 1 (id=2583): socket(0x2, 0x3, 0xa) socket(0x22, 0x80000, 0x1ff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2903c2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x8000000000000001, 0x10001, 0xfffffffffffffff9, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) 44.313943896s ago: executing program 0 (id=2584): r0 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x5, 0x8}, 0x84, 0x400400) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000080)="cb749722b0c67bc46500d5709b7885f1f4f6a7fffb17d81c5938ec1ca95eb9a9af1e2af0749011063e608cc80c6c94ac90d71727ac80305687f9de1ca11dad781649290b779d5ae581bef562b464e0a1a17958aff5823699e92df0ee4a777af922c957e49016a1b1c9afdeb130c6866d0633f6115a8039c4b58bdac33dde9d422130946c56d2459335df6d1ddb47aefa1860d8622b04a9d4eb6c7a5cb094c7da5e9ef09650e63abbb0b5347fa200c04f2c81842937501d5443dbcecbc0c44c00e5f5896a9ece0c100eff6c7753785a2a2355f1d744731907b6a1862ac2d8e75cdebcee8c5c829d9aa34a5fb4cc0e83d75cec8d4d06e0", 0x5) (async, rerun: 64) open(0x0, 0x22240, 0x55) (rerun: 64) socket(0x2, 0x1, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x9c2342, 0x0) futex$auto(0x0, 0x10b, 0x1, 0x0, 0x0, 0xfbfffffa) (async, rerun: 32) socket(0x23, 0x4, 0x0) (async, rerun: 32) socket(0x1e, 0x4, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCVHANGUP(r2, 0x5437, 0x0) (async, rerun: 64) ioctl$auto_TIOCVHANGUP(r2, 0x5437, 0x0) (async, rerun: 64) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/v4l-subdev7\x00', 0x2, 0x0) (async, rerun: 64) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) r3 = socket(0xa, 0x5, 0x0) (rerun: 64) getsockopt$auto(r3, 0x84, 0x6, 0x0, 0x0) (async, rerun: 32) openat$auto_component_list_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) (async) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 44.154279251s ago: executing program 2 (id=2585): r0 = epoll_create$auto(0x2) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) sysfs$auto(0x2, 0x9, 0x0) fsopen$auto(0x0, 0x1) epoll_pwait2$auto(r0, 0x0, 0x8, &(0x7f0000002780)={0x10008000004, 0x8}, 0x0, 0x8) r1 = epoll_create$auto(0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x240024000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket(0x2, 0x801, 0x106) connect$auto(r2, &(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast2}, 0x6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x8006) r3 = socketpair$auto(0x1, 0x0, 0x4000, 0x0) recvmmsg$auto(r3, 0x0, 0x6, 0x704, 0x0) close_range$auto(0x0, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/firmware/acpi/interrupts/gpe04\x00', 0x10000, 0x0) read$auto(r4, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu1\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyz1\x00', 0x840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0xf528) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 43.755208698s ago: executing program 3 (id=2586): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x26, 0x3, 0x2b) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/oobsize\x00', 0x40000, 0x0) read$auto(r2, 0x0, 0x9) r3 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "f99c0301d407000000e50400"}, 0x55) epoll_create$auto(0x8800001) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r4, 0x3314, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) pipe$auto(0x0) getrandom$auto(&(0x7f0000000080)='s+/\x00', 0x3, 0x10001) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) tkill$auto(r3, 0x9) writev$auto(r1, 0x0, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x81, 0x9}, 0x7f, &(0x7f0000000040)={0x7, 0x1f}, &(0x7f00000000c0)={0x6}, 0x8) lseek$auto(r0, 0x7fffffffffffffff, 0xfffffffe) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x20000000008, 0x8000000000000001, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 43.28021331s ago: executing program 1 (id=2587): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x26, 0x3, 0x2b) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/oobsize\x00', 0x40000, 0x0) read$auto(r2, 0x0, 0x9) r3 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "f99c0301d407000000e50400"}, 0x55) epoll_create$auto(0x8800001) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r4, 0x3314, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) pipe$auto(0x0) getrandom$auto(&(0x7f0000000080)='s+/\x00', 0x3, 0x10001) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) tkill$auto(r3, 0x9) writev$auto(r1, 0x0, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x81, 0x9}, 0x7f, &(0x7f0000000040)={0x7, 0x1f}, &(0x7f00000000c0)={0x6}, 0x8) lseek$auto(r0, 0x7fffffffffffffff, 0xfffffffe) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x20000000008, 0x8000000000000001, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 43.133349115s ago: executing program 0 (id=2588): mmap$auto(0x0, 0x400008, 0x4, 0xffffffffffffffd1, 0x2, 0x8000) r0 = io_uring_setup$auto(0xdd7, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') ioctl$NS_GET_PARENT(r1, 0xb701, 0x0) preadv$auto(0x40000000000003, 0x0, 0x3, 0xe27c, 0x8) r2 = socket(0x2b, 0x1, 0x1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, r2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a10ba01, 0x0) r4 = socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x8, 0xe2, 0xeb1, 0x69a5, 0xa800000000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) setsockopt$auto(r4, 0x1, 0x12, 0x0, 0xa4) socketpair$auto(0x20004, 0x1, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(0x2, 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$auto(0x0, 0x0, 0x6f4) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 42.853074914s ago: executing program 1 (id=2589): syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), 0xffffffffffffffff) symlink$auto(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x903080, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd8\x00', 0x4e0dc3, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8095}, 0x404c081) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x48100, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000", @ANYRES16=r4, @ANYBLOB="010024bd3000fedbdfa504"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000200)={0x68, 0xee01, 0x2}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r5, 0x400c4d02, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ptrace$auto_ARCH_SHSTK_LOCK(0x80000001, 0x0, 0x7, 0x5003) landlock_restrict_self$auto(0xffffffffffffffff, 0x1ffff) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x80006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffe) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) 42.826765701s ago: executing program 3 (id=2590): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fadbdf250f60000008000300", @ANYRES32=r1, @ANYBLOB="05003000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) 42.620130436s ago: executing program 2 (id=2591): set_mempolicy$auto(0x6, 0x0, 0x3) r0 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) fchown$auto(r0, 0xff, 0x5) fcntl$auto(r0, 0x4, 0xfffffffffffffff9) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f000000ac80)=ANY=[@ANYBLOB="b2260396", @ANYRES16=r3, @ANYBLOB="010429bd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 42.332571509s ago: executing program 3 (id=2592): r0 = socket(0xa, 0x2, 0x3a) r1 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x151) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1ad, &(0x7f0000000100)={&(0x7f0000000280)="5585a25d85", 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) recvfrom$auto(r0, 0x0, 0x4, 0x80000000, 0x0, 0x0) 42.279575614s ago: executing program 1 (id=2593): sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x780, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x76c, 0x19, 0x0, 0x1, [@generic="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"]}]}, 0x780}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) 42.154597585s ago: executing program 0 (id=2594): r0 = prctl$auto_PR_SYS_DISPATCH_OFF(0x5899, 0x0, 0xffffffffffffffff, 0x6, 0x10) r1 = ioctl$auto_TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000440)=0x8) close_range$auto(r0, 0xffffffffffffffff, 0x2) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)="000004") (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/all/mldv1_unsolicited_report_interval\x00', 0x1500, 0x0) socket(0x2, 0x1, 0x106) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) setsockopt$auto(r1, 0x0, 0xffffff80, 0x0, 0x10040) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) r10 = setfsuid$auto(0xee00) setreuid$auto(r10, 0x0) (async) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r8, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a407c51f8da326bd2218389fcc15fcee1898f95a8ec086d352429d988b46bc881072b4", @ANYRES16=r9, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04002fe6ff6a0500", @ANYRES32, @ANYRES16=r5, @ANYRES32=r10, @ANYRESHEX=r3], 0x278}, 0x1, 0x0, 0x0, 0x1}, 0x4004840) (async) r11 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) close_range$auto(r2, r7, 0x8000) (async) ioctl$auto__ctl_fops_dm_ioctl(r11, 0x1ff, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r11, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x44880}, 0x4000) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="040097419029a667770abd7f00fddbdf2704000000"], 0x14}, 0x1, 0x0, 0x0, 0x40c8000}, 0xa80cf26c279ae80d) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="ac000000", @ANYBLOB="20002dbd7000fedbdf2515000000080014002c902d2f880019000df0ecd65a3ff707bb11721c7d181a4656b102cf1653ddac5c0d342e1dca1eb2dba9cbd6534e4005d0aa0b9528450d7577b29f6a47beaa2e83083c96c2e5ada4eb8c3afa1d762338b29be5b900b88dd1703b4bc55fc49c2a8b21315ec5a41d06355373d23470d6cae607c1bed4bad85e1072530acac39daf9d91eb0cf1cd9f0de89a47370800010069080000"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x810) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000052acd98b77dd25d26aaa63d32b56b3456c6b4a06414e6c0701648df767448c381d31939d836722c294b813a372c404235a91f5f30cd23f4cbfde9a868188048d170000004c8e212b5114748eb9f2b4d800"/100, @ANYRES32=0x0, @ANYBLOB="01002dbd7000fedbdf257e005c17", @ANYRES32=r6], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendfile$auto(r3, r4, 0x0, 0x80) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20942, 0x0) (async) r12 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000680), 0x404100, 0x0) close_range$auto(r11, r12, 0x31c) 42.110267497s ago: executing program 1 (id=2595): socket(0x2, 0x3, 0xa) socket(0x22, 0x80000, 0x1ff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2903c2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x8000000000000001, 0x10001, 0xfffffffffffffff9, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) 38.946773261s ago: executing program 0 (id=2596): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x0, 0x4, 0x10) connect$auto(0x3, &(0x7f0000000000)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x55) r1 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000180), 0x10b0c0, 0x0) write$auto_cachefiles_daemon_fops_internal(r1, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x40, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0xfffffffffffffffc, 0x3, 0x4, 0x40eb1, 0x401, 0x300000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xa, 0x4) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x1, 0x84) r4 = socket(0x28, 0x5, 0x0) bind$auto(r2, &(0x7f0000000140)=@llc={0x1a, 0xfffe, 0x6, 0x1, 0xf9, 0x0, @local}, 0x6a) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0xffffffffffffc990}, 0x0) getsockopt$auto_SO_RESERVE_MEM(r4, 0x1, 0x49, &(0x7f0000000080)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000100)=0xa) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(r3, r5, 0x4) ioctl$auto_SNDRV_TIMER_IOCTL_START(r2, 0x54a0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 38.922625823s ago: executing program 3 (id=2597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0xf0ffffffffffff}, 0x4000) 23.633068798s ago: executing program 32 (id=2596): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x0, 0x4, 0x10) connect$auto(0x3, &(0x7f0000000000)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x55) r1 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000180), 0x10b0c0, 0x0) write$auto_cachefiles_daemon_fops_internal(r1, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x40, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0xfffffffffffffffc, 0x3, 0x4, 0x40eb1, 0x401, 0x300000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xa, 0x4) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x1, 0x84) r4 = socket(0x28, 0x5, 0x0) bind$auto(r2, &(0x7f0000000140)=@llc={0x1a, 0xfffe, 0x6, 0x1, 0xf9, 0x0, @local}, 0x6a) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0xffffffffffffc990}, 0x0) getsockopt$auto_SO_RESERVE_MEM(r4, 0x1, 0x49, &(0x7f0000000080)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000100)=0xa) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(r3, r5, 0x4) ioctl$auto_SNDRV_TIMER_IOCTL_START(r2, 0x54a0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 23.500311525s ago: executing program 33 (id=2595): socket(0x2, 0x3, 0xa) socket(0x22, 0x80000, 0x1ff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2903c2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x8000000000000001, 0x10001, 0xfffffffffffffff9, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) 23.357376332s ago: executing program 34 (id=2591): set_mempolicy$auto(0x6, 0x0, 0x3) r0 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) fchown$auto(r0, 0xff, 0x5) fcntl$auto(r0, 0x4, 0xfffffffffffffff9) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f000000ac80)=ANY=[@ANYBLOB="b2260396", @ANYRES16=r3, @ANYBLOB="010429bd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 23.267787157s ago: executing program 35 (id=2597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0xf0ffffffffffff}, 0x4000) 0s ago: executing program 7 (id=2601): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x2) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000040), 0x424041, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0x3, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) io_uring_setup$auto(0x3, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x48001, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x1f, 0x0) ppoll$auto(&(0x7f0000000100)={0xffffffffffffffff, 0x690, 0xffa1}, 0x5, 0x0, &(0x7f0000000140)={0x4}, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r0, 0x4018bc0e, &(0x7f0000000080)={0x5, 0x0, 0x5, 0x1}) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd=0xffffffffffffffff, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r4) pread64$auto(r0, &(0x7f0000000540)='%!:{\x14.*\x00', 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc050}, 0x4084) prctl$auto(0x44, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) kernel console output (not intermixed with test programs): op=collect_data cause=failed comm="syz.1.2450" name="discovery_nqn" dev="configfs" ino=58901 res=0 errno=0 [ 508.097337][T14760] random: crng reseeded on system resumption [ 508.147983][T14757] FAULT_INJECTION: forcing a failure. [ 508.147983][T14757] name failslab, interval 1, probability 393216, space 0, times 0 [ 508.177980][T14757] CPU: 1 UID: 0 PID: 14757 Comm: syz.3.2447 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.178029][T14757] Tainted: [L]=SOFTLOCKUP [ 508.178040][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.178059][T14757] Call Trace: [ 508.178069][T14757] [ 508.178081][T14757] dump_stack_lvl+0x16c/0x1f0 [ 508.178122][T14757] should_fail_ex+0x512/0x640 [ 508.178173][T14757] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 508.178213][T14757] should_failslab+0xc2/0x120 [ 508.178254][T14757] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 508.178296][T14757] ? alloc_inode+0xc3/0x240 [ 508.178333][T14757] ? alloc_inode+0xc3/0x240 [ 508.178364][T14757] alloc_inode+0xc3/0x240 [ 508.178395][T14757] path_from_stashed+0x25b/0x750 [ 508.178440][T14757] ? do_raw_spin_unlock+0x172/0x230 [ 508.178482][T14757] ns_get_path+0x60/0x80 [ 508.178524][T14757] proc_ns_get_link+0x121/0x230 [ 508.178557][T14757] ? __pfx_proc_ns_get_link+0x10/0x10 [ 508.178592][T14757] ? atime_needs_update+0x8b/0x710 [ 508.178630][T14757] pick_link+0xc96/0x13b0 [ 508.178664][T14757] ? __pfx_proc_ns_get_link+0x10/0x10 [ 508.178701][T14757] step_into_slowpath+0x6c6/0xf50 [ 508.178743][T14757] ? __pfx_step_into_slowpath+0x10/0x10 [ 508.178779][T14757] ? find_held_lock+0x2b/0x80 [ 508.178826][T14757] path_openat+0x10db/0x3140 [ 508.178879][T14757] ? __pfx_path_openat+0x10/0x10 [ 508.178931][T14757] do_filp_open+0x20b/0x470 [ 508.178973][T14757] ? __pfx_do_filp_open+0x10/0x10 [ 508.179040][T14757] ? alloc_fd+0x471/0x7d0 [ 508.179091][T14757] do_sys_openat2+0x11f/0x280 [ 508.179122][T14757] ? __pfx_do_sys_openat2+0x10/0x10 [ 508.179173][T14757] __x64_sys_openat+0x174/0x210 [ 508.179204][T14757] ? __pfx___x64_sys_openat+0x10/0x10 [ 508.179249][T14757] do_syscall_64+0xcd/0xf80 [ 508.179286][T14757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.179315][T14757] RIP: 0033:0x7ff146b8e010 [ 508.179338][T14757] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 508.179366][T14757] RSP: 002b:00007ff14798df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 508.179393][T14757] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff146b8e010 [ 508.179413][T14757] RDX: 0000000000000002 RSI: 00007ff14798dfa0 RDI: 00000000ffffff9c [ 508.179433][T14757] RBP: 00007ff14798dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 508.179453][T14757] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 508.179472][T14757] R13: 00007ff146de6218 R14: 00007ff146de6180 R15: 00007ffe2f18d5d8 [ 508.179511][T14757] [ 508.463592][T14760] hub 1-0:1.0: USB hub found [ 508.470674][T14760] hub 1-0:1.0: 1 port detected [ 509.190876][T14789] FAULT_INJECTION: forcing a failure. [ 509.190876][T14789] name failslab, interval 1, probability 393216, space 0, times 0 [ 509.204464][T14789] CPU: 1 UID: 0 PID: 14789 Comm: syz.1.2457 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.204518][T14789] Tainted: [L]=SOFTLOCKUP [ 509.204528][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.204547][T14789] Call Trace: [ 509.204557][T14789] [ 509.204569][T14789] dump_stack_lvl+0x16c/0x1f0 [ 509.204611][T14789] should_fail_ex+0x512/0x640 [ 509.204654][T14789] ? __kmalloc_noprof+0xca/0x910 [ 509.204691][T14789] should_failslab+0xc2/0x120 [ 509.204732][T14789] __kmalloc_noprof+0xeb/0x910 [ 509.204761][T14789] ? lockdep_init_map_type+0x5c/0x270 [ 509.204792][T14789] ? xfrm_hash_alloc+0xd1/0x100 [ 509.204841][T14789] ? xfrm_hash_alloc+0xd1/0x100 [ 509.204882][T14789] xfrm_hash_alloc+0xd1/0x100 [ 509.204923][T14789] xfrm_net_init+0x35f/0xcc0 [ 509.204975][T14789] ? __pfx_xfrm_net_init+0x10/0x10 [ 509.205026][T14789] ops_init+0x1e2/0x5f0 [ 509.205062][T14789] setup_net+0x11d/0x3a0 [ 509.205095][T14789] ? __pfx_setup_net+0x10/0x10 [ 509.205125][T14789] ? lockdep_init_map_type+0x5c/0x270 [ 509.205161][T14789] ? mutex_init_lockep+0x110/0x150 [ 509.205196][T14789] copy_net_ns+0x351/0x7c0 [ 509.205236][T14789] create_new_namespaces+0x3ea/0xab0 [ 509.205285][T14789] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 509.205329][T14789] ksys_unshare+0x45b/0xa40 [ 509.205374][T14789] ? __pfx_ksys_unshare+0x10/0x10 [ 509.205420][T14789] ? xfd_validate_state+0x61/0x180 [ 509.205459][T14789] __x64_sys_unshare+0x31/0x40 [ 509.205507][T14789] do_syscall_64+0xcd/0xf80 [ 509.205546][T14789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.205577][T14789] RIP: 0033:0x7f198bd8f7c9 [ 509.205601][T14789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.205630][T14789] RSP: 002b:00007f198cc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 509.205659][T14789] RAX: ffffffffffffffda RBX: 00007f198bfe5fa0 RCX: 00007f198bd8f7c9 [ 509.205680][T14789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 509.205698][T14789] RBP: 00007f198be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 509.205717][T14789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.205734][T14789] R13: 00007f198bfe6038 R14: 00007f198bfe5fa0 R15: 00007ffeb03c3338 [ 509.205774][T14789] [ 509.216577][T14791] FAULT_INJECTION: forcing a failure. [ 509.216577][T14791] name failslab, interval 1, probability 393216, space 0, times 0 [ 509.495935][T14791] CPU: 0 UID: 0 PID: 14791 Comm: syz.3.2458 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.495978][T14791] Tainted: [L]=SOFTLOCKUP [ 509.495987][T14791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.496002][T14791] Call Trace: [ 509.496011][T14791] [ 509.496021][T14791] dump_stack_lvl+0x16c/0x1f0 [ 509.496067][T14791] should_fail_ex+0x512/0x640 [ 509.496103][T14791] ? __kmalloc_noprof+0xca/0x910 [ 509.496133][T14791] should_failslab+0xc2/0x120 [ 509.496169][T14791] __kmalloc_noprof+0xeb/0x910 [ 509.496195][T14791] ? process_preds+0x48b/0x1c50 [ 509.496232][T14791] ? process_preds+0x48b/0x1c50 [ 509.496260][T14791] process_preds+0x48b/0x1c50 [ 509.496299][T14791] ? create_filter_start.constprop.0+0x56/0x300 [ 509.496335][T14791] create_filter+0x140/0x210 [ 509.496368][T14791] ? __pfx_create_filter+0x10/0x10 [ 509.496399][T14791] ? __pfx___mutex_lock+0x10/0x10 [ 509.496432][T14791] ? find_held_lock+0x2b/0x80 [ 509.496466][T14791] apply_event_filter+0x220/0x500 [ 509.496501][T14791] ? __pfx_apply_event_filter+0x10/0x10 [ 509.496544][T14791] event_filter_write+0x16d/0x290 [ 509.496570][T14791] ? __pfx_event_filter_write+0x10/0x10 [ 509.496592][T14791] vfs_write+0x2a0/0x11d0 [ 509.496628][T14791] ? __pfx___mutex_lock+0x10/0x10 [ 509.496661][T14791] ? __pfx_vfs_write+0x10/0x10 [ 509.496704][T14791] ? __fget_files+0x20e/0x3c0 [ 509.496748][T14791] ksys_write+0x12a/0x250 [ 509.496780][T14791] ? __pfx_ksys_write+0x10/0x10 [ 509.496830][T14791] do_syscall_64+0xcd/0xf80 [ 509.496863][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.496889][T14791] RIP: 0033:0x7ff146b8f7c9 [ 509.496910][T14791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.496935][T14791] RSP: 002b:00007ff1479d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.496959][T14791] RAX: ffffffffffffffda RBX: 00007ff146de5fa0 RCX: 00007ff146b8f7c9 [ 509.496976][T14791] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 509.496991][T14791] RBP: 00007ff146c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 509.497006][T14791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.497022][T14791] R13: 00007ff146de6038 R14: 00007ff146de5fa0 R15: 00007ffe2f18d5d8 [ 509.497065][T14791] [ 509.926889][T14783] kexec: Could not allocate control_code_buffer [ 510.334725][T14795] netlink: 3864 bytes leftover after parsing attributes in process `syz.3.2459'. [ 510.334749][T14795] openvswitch: netlink: Flow key attr not present in new flow. [ 510.757815][T14811] FAULT_INJECTION: forcing a failure. [ 510.757815][T14811] name failslab, interval 1, probability 393216, space 0, times 0 [ 510.799416][T14811] CPU: 0 UID: 0 PID: 14811 Comm: syz.3.2464 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.799465][T14811] Tainted: [L]=SOFTLOCKUP [ 510.799476][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.799493][T14811] Call Trace: [ 510.799504][T14811] [ 510.799515][T14811] dump_stack_lvl+0x16c/0x1f0 [ 510.799556][T14811] should_fail_ex+0x512/0x640 [ 510.799601][T14811] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 510.799641][T14811] should_failslab+0xc2/0x120 [ 510.799683][T14811] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 510.799734][T14811] ? __d_alloc+0x35/0xa80 [ 510.799786][T14811] ? __d_alloc+0x35/0xa80 [ 510.799827][T14811] __d_alloc+0x35/0xa80 [ 510.799869][T14811] ? bpf_lsm_inode_permission+0x9/0x10 [ 510.799905][T14811] d_alloc+0x4a/0x1e0 [ 510.799950][T14811] vfs_tmpfile+0x148/0x9b0 [ 510.799999][T14811] path_openat+0x1936/0x3140 [ 510.800038][T14811] ? do_syscall_64+0xcd/0xf80 [ 510.800070][T14811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.800112][T14811] ? __pfx_path_openat+0x10/0x10 [ 510.800161][T14811] ? __lock_acquire+0x436/0x2890 [ 510.800194][T14811] do_filp_open+0x20b/0x470 [ 510.800236][T14811] ? __pfx_do_filp_open+0x10/0x10 [ 510.800304][T14811] ? _raw_spin_unlock+0x28/0x50 [ 510.800335][T14811] ? alloc_fd+0x471/0x7d0 [ 510.800385][T14811] do_sys_openat2+0x11f/0x280 [ 510.800421][T14811] ? __pfx_do_sys_openat2+0x10/0x10 [ 510.800469][T14811] __x64_sys_open+0x153/0x1e0 [ 510.800501][T14811] ? __pfx___x64_sys_open+0x10/0x10 [ 510.800542][T14811] ? rcu_is_watching+0x12/0xc0 [ 510.800585][T14811] do_syscall_64+0xcd/0xf80 [ 510.800622][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.800651][T14811] RIP: 0033:0x7ff146b8f7c9 [ 510.800676][T14811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.800703][T14811] RSP: 002b:00007ff1479d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 510.800740][T14811] RAX: ffffffffffffffda RBX: 00007ff146de5fa0 RCX: 00007ff146b8f7c9 [ 510.800761][T14811] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 510.800781][T14811] RBP: 00007ff146c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 510.800799][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.800817][T14811] R13: 00007ff146de6038 R14: 00007ff146de5fa0 R15: 00007ffe2f18d5d8 [ 510.800857][T14811] [ 511.603790][T14822] FAULT_INJECTION: forcing a failure. [ 511.603790][T14822] name failslab, interval 1, probability 393216, space 0, times 0 [ 511.639076][T14822] CPU: 1 UID: 0 PID: 14822 Comm: syz.1.2468 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.639130][T14822] Tainted: [L]=SOFTLOCKUP [ 511.639141][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.639160][T14822] Call Trace: [ 511.639170][T14822] [ 511.639182][T14822] dump_stack_lvl+0x16c/0x1f0 [ 511.639223][T14822] should_fail_ex+0x512/0x640 [ 511.639267][T14822] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 511.639314][T14822] should_failslab+0xc2/0x120 [ 511.639356][T14822] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 511.639396][T14822] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 511.639428][T14822] ? xfrm4_net_init+0x9e/0x1c0 [ 511.639472][T14822] ? __pfx_xfrm4_net_init+0x10/0x10 [ 511.639516][T14822] ? kmemdup_noprof+0x29/0x60 [ 511.639549][T14822] kmemdup_noprof+0x29/0x60 [ 511.639583][T14822] xfrm4_net_init+0x9e/0x1c0 [ 511.639632][T14822] ? __pfx_xfrm4_net_init+0x10/0x10 [ 511.639673][T14822] ops_init+0x1e2/0x5f0 [ 511.639710][T14822] setup_net+0x11d/0x3a0 [ 511.639743][T14822] ? __pfx_setup_net+0x10/0x10 [ 511.639773][T14822] ? lockdep_init_map_type+0x5c/0x270 [ 511.639804][T14822] ? mutex_init_lockep+0x110/0x150 [ 511.639839][T14822] copy_net_ns+0x351/0x7c0 [ 511.639878][T14822] create_new_namespaces+0x3ea/0xab0 [ 511.639929][T14822] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 511.639970][T14822] ksys_unshare+0x45b/0xa40 [ 511.640014][T14822] ? __pfx_ksys_unshare+0x10/0x10 [ 511.640061][T14822] ? xfd_validate_state+0x61/0x180 [ 511.640098][T14822] __x64_sys_unshare+0x31/0x40 [ 511.640142][T14822] do_syscall_64+0xcd/0xf80 [ 511.640179][T14822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.640210][T14822] RIP: 0033:0x7f198bd8f7c9 [ 511.640234][T14822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.640263][T14822] RSP: 002b:00007f198cc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 511.640291][T14822] RAX: ffffffffffffffda RBX: 00007f198bfe5fa0 RCX: 00007f198bd8f7c9 [ 511.640312][T14822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 511.640331][T14822] RBP: 00007f198be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 511.640349][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.640368][T14822] R13: 00007f198bfe6038 R14: 00007f198bfe5fa0 R15: 00007ffeb03c3338 [ 511.640408][T14822] [ 512.015526][ T8571] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 512.026080][ T8571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 512.034680][ T8571] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 512.044253][ T8571] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 512.053100][ T8571] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.089310][T14827] FAULT_INJECTION: forcing a failure. [ 512.089310][T14827] name failslab, interval 1, probability 393216, space 0, times 0 [ 512.102927][T14827] CPU: 1 UID: 0 PID: 14827 Comm: syz.1.2469 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.102973][T14827] Tainted: [L]=SOFTLOCKUP [ 512.102985][T14827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.103003][T14827] Call Trace: [ 512.103013][T14827] [ 512.103025][T14827] dump_stack_lvl+0x16c/0x1f0 [ 512.103066][T14827] should_fail_ex+0x512/0x640 [ 512.103107][T14827] ? __kmalloc_cache_noprof+0x5f/0x800 [ 512.103145][T14827] should_failslab+0xc2/0x120 [ 512.103187][T14827] __kmalloc_cache_noprof+0x80/0x800 [ 512.103232][T14827] ? trace_kmalloc+0x2b/0xb0 [ 512.103284][T14827] ? __kmalloc_noprof+0x35d/0x910 [ 512.103314][T14827] ? apply_wqattrs_prepare+0x130/0xbd0 [ 512.103359][T14827] ? apply_wqattrs_prepare+0x130/0xbd0 [ 512.103396][T14827] apply_wqattrs_prepare+0x130/0xbd0 [ 512.103449][T14827] apply_workqueue_attrs_locked+0x64/0xe0 [ 512.103489][T14827] __alloc_workqueue+0xf42/0x1810 [ 512.103553][T14827] alloc_workqueue_noprof+0xd2/0x200 [ 512.103598][T14827] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 512.103647][T14827] ? rcu_is_watching+0x12/0xc0 [ 512.103686][T14827] ? trace_kmalloc+0x2b/0xb0 [ 512.103723][T14827] ? __kmalloc_noprof+0x35d/0x910 [ 512.103754][T14827] ? ieee80211_register_hw+0x15c9/0x4160 [ 512.103798][T14827] ieee80211_register_hw+0x1f1a/0x4160 [ 512.103842][T14827] ? lockdep_hardirqs_on+0x11/0x110 [ 512.103878][T14827] ? _raw_spin_unlock+0x41/0x50 [ 512.103917][T14827] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 512.103956][T14827] ? __pfx___debug_object_init+0x10/0x10 [ 512.104000][T14827] ? find_held_lock+0x2b/0x80 [ 512.104037][T14827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 512.104080][T14827] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 512.104115][T14827] ? __hrtimer_setup+0x176/0x280 [ 512.104153][T14827] mac80211_hwsim_new_radio+0x3323/0x5150 [ 512.104220][T14827] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 512.104282][T14827] hwsim_new_radio_nl+0xba2/0x1330 [ 512.104330][T14827] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 512.104387][T14827] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 512.104430][T14827] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 512.104481][T14827] genl_family_rcv_msg_doit+0x209/0x2f0 [ 512.104530][T14827] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 512.104571][T14827] ? genl_get_cmd+0x194/0x580 [ 512.104616][T14827] ? bpf_lsm_capable+0x9/0x10 [ 512.104653][T14827] ? security_capable+0x7e/0x260 [ 512.104691][T14827] ? ns_capable+0xd7/0x110 [ 512.104729][T14827] genl_rcv_msg+0x55c/0x800 [ 512.104772][T14827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.104812][T14827] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 512.104869][T14827] netlink_rcv_skb+0x158/0x420 [ 512.104904][T14827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.104944][T14827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.104994][T14827] ? netlink_deliver_tap+0x1ae/0xd30 [ 512.105033][T14827] genl_rcv+0x28/0x40 [ 512.105068][T14827] netlink_unicast+0x5aa/0x870 [ 512.105108][T14827] ? __pfx_netlink_unicast+0x10/0x10 [ 512.105157][T14827] netlink_sendmsg+0x8c8/0xdd0 [ 512.105198][T14827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.105237][T14827] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 512.105284][T14827] ____sys_sendmsg+0xa5d/0xc30 [ 512.105323][T14827] ? copy_msghdr_from_user+0x10a/0x160 [ 512.105353][T14827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.105400][T14827] ? __pfx_futex_wake_mark+0x10/0x10 [ 512.105453][T14827] ___sys_sendmsg+0x134/0x1d0 [ 512.105484][T14827] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.105516][T14827] ? futex_private_hash_put+0x160/0x1b0 [ 512.105587][T14827] __sys_sendmsg+0x16d/0x220 [ 512.105618][T14827] ? __pfx___sys_sendmsg+0x10/0x10 [ 512.105645][T14827] ? __x64_sys_futex+0x1e0/0x4c0 [ 512.105700][T14827] do_syscall_64+0xcd/0xf80 [ 512.105737][T14827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.105767][T14827] RIP: 0033:0x7f198bd8f7c9 [ 512.105790][T14827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.105818][T14827] RSP: 002b:00007f198cc18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.105847][T14827] RAX: ffffffffffffffda RBX: 00007f198bfe5fa0 RCX: 00007f198bd8f7c9 [ 512.105866][T14827] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 512.105885][T14827] RBP: 00007f198be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 512.105903][T14827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.105921][T14827] R13: 00007f198bfe6038 R14: 00007f198bfe5fa0 R15: 00007ffeb03c3338 [ 512.105962][T14827] [ 512.870526][T14833] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2471'. [ 512.920186][T14833] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2471'. [ 513.162218][T10575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.254118][T10575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.292487][T14824] chnl_net:caif_netlink_parms(): no params data found [ 513.372559][T10575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.526698][T10575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.646524][T14824] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.655637][T14824] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.666684][T14824] bridge_slave_0: entered allmulticast mode [ 513.675902][T14824] bridge_slave_0: entered promiscuous mode [ 513.725075][T14824] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.733147][T14824] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.743031][T14824] bridge_slave_1: entered allmulticast mode [ 513.751156][T14824] bridge_slave_1: entered promiscuous mode [ 513.790950][T10575] bridge_slave_1: left allmulticast mode [ 513.811317][T10575] bridge_slave_1: left promiscuous mode [ 513.817107][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.828579][T10575] bridge_slave_0: left allmulticast mode [ 513.835013][T10575] bridge_slave_0: left promiscuous mode [ 513.844132][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.982176][T14860] FAULT_INJECTION: forcing a failure. [ 513.982176][T14860] name failslab, interval 1, probability 393216, space 0, times 0 [ 514.005973][T14860] CPU: 1 UID: 0 PID: 14860 Comm: syz.2.2479 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.006021][T14860] Tainted: [L]=SOFTLOCKUP [ 514.006031][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.006047][T14860] Call Trace: [ 514.006057][T14860] [ 514.006069][T14860] dump_stack_lvl+0x16c/0x1f0 [ 514.006111][T14860] should_fail_ex+0x512/0x640 [ 514.006153][T14860] ? __kmalloc_cache_noprof+0x5f/0x800 [ 514.006189][T14860] should_failslab+0xc2/0x120 [ 514.006231][T14860] __kmalloc_cache_noprof+0x80/0x800 [ 514.006261][T14860] ? trace_kmalloc+0x2b/0xb0 [ 514.006298][T14860] ? __kmalloc_noprof+0x35d/0x910 [ 514.006326][T14860] ? apply_wqattrs_prepare+0x130/0xbd0 [ 514.006370][T14860] ? apply_wqattrs_prepare+0x130/0xbd0 [ 514.006405][T14860] apply_wqattrs_prepare+0x130/0xbd0 [ 514.006455][T14860] apply_workqueue_attrs_locked+0x64/0xe0 [ 514.006494][T14860] __alloc_workqueue+0xf42/0x1810 [ 514.006547][T14860] alloc_workqueue_noprof+0xd2/0x200 [ 514.006589][T14860] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 514.006636][T14860] ? rcu_is_watching+0x12/0xc0 [ 514.006681][T14860] ? trace_kmalloc+0x2b/0xb0 [ 514.006715][T14860] ? __kmalloc_noprof+0x35d/0x910 [ 514.006743][T14860] ? ieee80211_register_hw+0x15c9/0x4160 [ 514.006785][T14860] ieee80211_register_hw+0x1f1a/0x4160 [ 514.006842][T14860] ? lockdep_hardirqs_on+0x11/0x110 [ 514.006877][T14860] ? _raw_spin_unlock+0x41/0x50 [ 514.006910][T14860] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 514.006946][T14860] ? __pfx___debug_object_init+0x10/0x10 [ 514.006986][T14860] ? find_held_lock+0x2b/0x80 [ 514.007018][T14860] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 514.007058][T14860] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 514.007093][T14860] ? __hrtimer_setup+0x176/0x280 [ 514.007129][T14860] mac80211_hwsim_new_radio+0x3323/0x5150 [ 514.007210][T14860] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 514.007268][T14860] hwsim_new_radio_nl+0xba2/0x1330 [ 514.007314][T14860] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 514.007369][T14860] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 514.007411][T14860] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 514.007461][T14860] genl_family_rcv_msg_doit+0x209/0x2f0 [ 514.007502][T14860] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 514.007542][T14860] ? genl_get_cmd+0x194/0x580 [ 514.007585][T14860] ? bpf_lsm_capable+0x9/0x10 [ 514.007619][T14860] ? security_capable+0x7e/0x260 [ 514.007666][T14860] ? ns_capable+0xd7/0x110 [ 514.007706][T14860] genl_rcv_msg+0x55c/0x800 [ 514.007748][T14860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.007784][T14860] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 514.007839][T14860] netlink_rcv_skb+0x158/0x420 [ 514.007873][T14860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.007915][T14860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.007961][T14860] ? netlink_deliver_tap+0x1ae/0xd30 [ 514.007999][T14860] genl_rcv+0x28/0x40 [ 514.008031][T14860] netlink_unicast+0x5aa/0x870 [ 514.008066][T14860] ? __pfx_netlink_unicast+0x10/0x10 [ 514.008111][T14860] netlink_sendmsg+0x8c8/0xdd0 [ 514.008157][T14860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.008198][T14860] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 514.008241][T14860] ____sys_sendmsg+0xa5d/0xc30 [ 514.008279][T14860] ? copy_msghdr_from_user+0x10a/0x160 [ 514.008309][T14860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.008344][T14860] ? preempt_schedule_thunk+0x16/0x30 [ 514.008380][T14860] ? try_to_wake_up+0xa67/0x1860 [ 514.008423][T14860] ___sys_sendmsg+0x134/0x1d0 [ 514.008454][T14860] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.008484][T14860] ? futex_private_hash_put+0x160/0x1b0 [ 514.008558][T14860] __sys_sendmsg+0x16d/0x220 [ 514.008588][T14860] ? __pfx___sys_sendmsg+0x10/0x10 [ 514.008616][T14860] ? __x64_sys_futex+0x1e0/0x4c0 [ 514.008683][T14860] do_syscall_64+0xcd/0xf80 [ 514.008721][T14860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.008750][T14860] RIP: 0033:0x7f6ca6b8f7c9 [ 514.008773][T14860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.008801][T14860] RSP: 002b:00007f6ca7a33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.008829][T14860] RAX: ffffffffffffffda RBX: 00007f6ca6de5fa0 RCX: 00007f6ca6b8f7c9 [ 514.008849][T14860] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 514.008864][T14860] RBP: 00007f6ca6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 514.008882][T14860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.008899][T14860] R13: 00007f6ca6de6038 R14: 00007f6ca6de5fa0 R15: 00007ffe8be1f2d8 [ 514.008939][T14860] [ 514.473485][ T8571] Bluetooth: hci2: command tx timeout [ 514.988540][T10575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.017449][T10575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.035557][T10575] bond0 (unregistering): Released all slaves [ 515.179354][T14824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.269000][T14824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.466575][T14824] team0: Port device team_slave_0 added [ 515.490500][T14824] team0: Port device team_slave_1 added [ 515.674217][T14824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.700730][T14824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.758789][T14824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.800807][ T8571] Bluetooth: hci3: Malformed Event: 0x02 [ 515.839466][T14824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.856721][T14824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.983074][T14824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.348468][T14824] hsr_slave_0: entered promiscuous mode [ 516.385257][T14824] hsr_slave_1: entered promiscuous mode [ 516.391733][T14824] debugfs: 'hsr0' already exists in 'hsr' [ 516.425127][T14824] Cannot create hsr debugfs directory [ 516.515956][ T8571] Bluetooth: hci2: command tx timeout [ 516.682272][T14900] NFSD: Failed to start, no listeners configured. [ 518.082580][T14936] NFSD: Failed to start, no listeners configured. [ 518.402272][T14824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 518.548241][T14824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 518.584064][ T8571] Bluetooth: hci2: command tx timeout [ 518.624591][T14824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 518.658001][T14943] FAULT_INJECTION: forcing a failure. [ 518.658001][T14943] name failslab, interval 1, probability 393216, space 0, times 0 [ 518.692522][T14943] CPU: 0 UID: 0 PID: 14943 Comm: syz.0.2497 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.692568][T14943] Tainted: [L]=SOFTLOCKUP [ 518.692579][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 518.692595][T14943] Call Trace: [ 518.692603][T14943] [ 518.692615][T14943] dump_stack_lvl+0x16c/0x1f0 [ 518.692654][T14943] should_fail_ex+0x512/0x640 [ 518.692697][T14943] ? kmem_cache_alloc_noprof+0x62/0x770 [ 518.692734][T14943] should_failslab+0xc2/0x120 [ 518.692771][T14943] kmem_cache_alloc_noprof+0x83/0x770 [ 518.692801][T14943] ? __proc_create+0x2c8/0x8d0 [ 518.692840][T14943] ? __proc_create+0x2c8/0x8d0 [ 518.692870][T14943] __proc_create+0x2c8/0x8d0 [ 518.692906][T14943] ? __pfx___proc_create+0x10/0x10 [ 518.692959][T14943] ? _raw_write_unlock+0x28/0x50 [ 518.692989][T14943] ? proc_register+0x559/0x8b0 [ 518.693028][T14943] proc_create_reg+0x7d/0x180 [ 518.693070][T14943] proc_create_net_data+0x8e/0x1c0 [ 518.693106][T14943] ? __pfx_proc_create_net_data+0x10/0x10 [ 518.693142][T14943] ? __pfx___netlink_kernel_create+0x10/0x10 [ 518.693183][T14943] fib_proc_init+0xf4/0x1b0 [ 518.693216][T14943] fib_net_init+0x2af/0x3f0 [ 518.693249][T14943] ? __pfx___register_sysctl_table+0x10/0x10 [ 518.693287][T14943] ? __pfx_fib_net_init+0x10/0x10 [ 518.693321][T14943] ? lockdep_init_map_type+0x5c/0x270 [ 518.693356][T14943] ? __pfx_nl_fib_input+0x10/0x10 [ 518.693399][T14943] ? devinet_init_net+0x5c2/0x910 [ 518.693437][T14943] ? __pfx_fib_net_init+0x10/0x10 [ 518.693468][T14943] ops_init+0x1e2/0x5f0 [ 518.693500][T14943] setup_net+0x11d/0x3a0 [ 518.693528][T14943] ? __pfx_setup_net+0x10/0x10 [ 518.693552][T14943] ? lockdep_init_map_type+0x5c/0x270 [ 518.693579][T14943] ? mutex_init_lockep+0x110/0x150 [ 518.693609][T14943] copy_net_ns+0x351/0x7c0 [ 518.693644][T14943] create_new_namespaces+0x3ea/0xab0 [ 518.693686][T14943] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 518.693726][T14943] ksys_unshare+0x45b/0xa40 [ 518.693765][T14943] ? __pfx_ksys_unshare+0x10/0x10 [ 518.693804][T14943] ? xfd_validate_state+0x61/0x180 [ 518.693840][T14943] __x64_sys_unshare+0x31/0x40 [ 518.693881][T14943] do_syscall_64+0xcd/0xf80 [ 518.693913][T14943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.693933][T14943] RIP: 0033:0x7f60abf8f7c9 [ 518.693957][T14943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.693972][T14943] RSP: 002b:00007f60acdb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 518.693988][T14943] RAX: ffffffffffffffda RBX: 00007f60ac1e5fa0 RCX: 00007f60abf8f7c9 [ 518.693999][T14943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 518.694008][T14943] RBP: 00007f60ac013f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.694018][T14943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.694027][T14943] R13: 00007f60ac1e6038 R14: 00007f60ac1e5fa0 R15: 00007ffd36444058 [ 518.694049][T14943] [ 519.007916][T14824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 519.049392][T10575] hsr_slave_0: left promiscuous mode [ 519.057132][T10575] hsr_slave_1: left promiscuous mode [ 519.064915][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.073259][T10575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.084564][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.096342][T10575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.165823][T10575] veth0_macvtap: left promiscuous mode [ 519.176856][T10575] veth1_vlan: left promiscuous mode [ 519.182606][T10575] veth0_vlan: left promiscuous mode [ 520.611281][T10575] team0 (unregistering): Port device team_slave_1 removed [ 520.652570][ T8571] Bluetooth: hci2: command tx timeout [ 520.684413][T10575] team0 (unregistering): Port device team_slave_0 removed [ 521.520061][T14824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.582828][T14824] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.609688][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.616862][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.664476][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.671757][ T6245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.861279][T15019] NFSD: Failed to start, no listeners configured. [ 522.004152][T15026] device-mapper: ioctl: Invalid ioctl structure: name iVFv, dev 2e00000000 [ 522.111340][T14824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.232207][T14824] veth0_vlan: entered promiscuous mode [ 522.257197][T14824] veth1_vlan: entered promiscuous mode [ 522.308571][T14824] veth0_macvtap: entered promiscuous mode [ 522.329072][T14824] veth1_macvtap: entered promiscuous mode [ 522.378221][T14824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.405855][T14824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.434805][T11059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.457360][T11059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.477764][T11059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.505571][T11059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.597890][T15039] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2511'. [ 522.660274][ T6238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.686819][ T6238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.739316][T11059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.750180][T11059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.309959][ T8573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 524.321498][ T8573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 524.335074][ T8573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 524.346875][ T8573] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 524.358693][ T8573] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 524.877255][T15081] chnl_net:caif_netlink_parms(): no params data found [ 524.938088][T15100] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 524.991809][T15104] FAULT_INJECTION: forcing a failure. [ 524.991809][T15104] name failslab, interval 1, probability 393216, space 0, times 0 [ 525.029005][T15104] CPU: 1 UID: 0 PID: 15104 Comm: syz.1.2523 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.029054][T15104] Tainted: [L]=SOFTLOCKUP [ 525.029066][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.029085][T15104] Call Trace: [ 525.029094][T15104] [ 525.029107][T15104] dump_stack_lvl+0x16c/0x1f0 [ 525.029148][T15104] should_fail_ex+0x512/0x640 [ 525.029190][T15104] ? __kmalloc_noprof+0xca/0x910 [ 525.029222][T15104] should_failslab+0xc2/0x120 [ 525.029261][T15104] __kmalloc_noprof+0xeb/0x910 [ 525.029292][T15104] ? process_preds+0x46c/0x1c50 [ 525.029333][T15104] ? process_preds+0x46c/0x1c50 [ 525.029365][T15104] process_preds+0x46c/0x1c50 [ 525.029408][T15104] ? create_filter_start.constprop.0+0x56/0x300 [ 525.029450][T15104] create_filter+0x140/0x210 [ 525.029496][T15104] ? __pfx_create_filter+0x10/0x10 [ 525.029534][T15104] ? __pfx___mutex_lock+0x10/0x10 [ 525.029574][T15104] ? find_held_lock+0x2b/0x80 [ 525.029609][T15104] apply_event_filter+0x220/0x500 [ 525.029646][T15104] ? __pfx_apply_event_filter+0x10/0x10 [ 525.029693][T15104] event_filter_write+0x16d/0x290 [ 525.029723][T15104] ? __pfx_event_filter_write+0x10/0x10 [ 525.029748][T15104] vfs_write+0x2a0/0x11d0 [ 525.029790][T15104] ? __pfx___mutex_lock+0x10/0x10 [ 525.029829][T15104] ? __pfx_vfs_write+0x10/0x10 [ 525.029878][T15104] ? __fget_files+0x20e/0x3c0 [ 525.029928][T15104] ksys_write+0x12a/0x250 [ 525.029963][T15104] ? __pfx_ksys_write+0x10/0x10 [ 525.030011][T15104] do_syscall_64+0xcd/0xf80 [ 525.030056][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.030087][T15104] RIP: 0033:0x7f198bd8f7c9 [ 525.030111][T15104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.030139][T15104] RSP: 002b:00007f198cc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 525.030167][T15104] RAX: ffffffffffffffda RBX: 00007f198bfe5fa0 RCX: 00007f198bd8f7c9 [ 525.030187][T15104] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 525.030206][T15104] RBP: 00007f198be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 525.030224][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.030242][T15104] R13: 00007f198bfe6038 R14: 00007f198bfe5fa0 R15: 00007ffeb03c3338 [ 525.030283][T15104] [ 525.519717][T15081] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.527014][T15081] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.534425][T15081] bridge_slave_0: entered allmulticast mode [ 525.543636][T15081] bridge_slave_0: entered promiscuous mode [ 525.554443][T15081] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.578084][T15081] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.584865][T15110] zswap: compressor not available [ 525.585380][T15081] bridge_slave_1: entered allmulticast mode [ 525.609658][T15081] bridge_slave_1: entered promiscuous mode [ 525.626752][ T30] audit: type=1800 audit(1765438335.350:56): pid=15120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2526" name="discovery_nqn" dev="configfs" ino=61283 res=0 errno=0 [ 525.674670][T15081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.692281][T15081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.730684][T15120] hub 1-0:1.0: USB hub found [ 525.754934][T15120] hub 1-0:1.0: 1 port detected [ 525.838552][T15081] team0: Port device team_slave_0 added [ 525.848555][T15081] team0: Port device team_slave_1 added [ 525.932323][ T6238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.085701][T15081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.097315][T15081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.124225][T15081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.163325][T15081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.185913][T15081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.276453][T15081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.308734][T15133] ptp ptp0: new virtual clock ptp1 [ 526.335076][ T6238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.348821][T15133] ptp ptp0: new virtual clock ptp2 [ 526.372868][T15133] ptp ptp0: new virtual clock ptp3 [ 526.384010][ T8573] Bluetooth: hci0: command tx timeout [ 526.397189][T15133] ptp ptp0: guarantee physical clock free running [ 526.424545][T15132] mkiss: ax0: crc mode is auto. [ 526.499867][ T6238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.590241][T15081] hsr_slave_0: entered promiscuous mode [ 526.632436][T15081] hsr_slave_1: entered promiscuous mode [ 526.641954][T15081] debugfs: 'hsr0' already exists in 'hsr' [ 526.647735][T15081] Cannot create hsr debugfs directory [ 526.985997][ T6238] bridge_slave_1: left allmulticast mode [ 526.995670][ T6238] bridge_slave_1: left promiscuous mode [ 527.005207][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.031398][ T6238] bridge_slave_0: left allmulticast mode [ 527.045934][ T6238] bridge_slave_0: left promiscuous mode [ 527.059350][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.509210][T15155] NFSD: Failed to start, no listeners configured. [ 527.701081][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 527.830782][ T6238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.901464][ T6238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.195837][ T6238] bond0 (unregistering): Released all slaves [ 528.359963][ T6238] ovs_ÿþÿþ?: left promiscuous mode [ 528.451650][ T8573] Bluetooth: hci0: command tx timeout [ 528.463840][T15166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2537'. [ 528.531703][ T6238] Â: left promiscuous mode [ 528.686514][T15171] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2539'. [ 528.837942][T15174] FAULT_INJECTION: forcing a failure. [ 528.837942][T15174] name failslab, interval 1, probability 393216, space 0, times 0 [ 528.938701][T15177] NFSD: Failed to start, no listeners configured. [ 528.943083][T15174] CPU: 0 UID: 0 PID: 15174 Comm: syz.3.2540 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.943130][T15174] Tainted: [L]=SOFTLOCKUP [ 528.943141][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.943158][T15174] Call Trace: [ 528.943169][T15174] [ 528.943181][T15174] dump_stack_lvl+0x16c/0x1f0 [ 528.943222][T15174] should_fail_ex+0x512/0x640 [ 528.943264][T15174] ? kmem_cache_alloc_noprof+0x62/0x770 [ 528.943311][T15174] should_failslab+0xc2/0x120 [ 528.943355][T15174] kmem_cache_alloc_noprof+0x83/0x770 [ 528.943389][T15174] ? __proc_create+0x2c8/0x8d0 [ 528.943432][T15174] ? __proc_create+0x2c8/0x8d0 [ 528.943466][T15174] __proc_create+0x2c8/0x8d0 [ 528.943503][T15174] ? __pfx___proc_create+0x10/0x10 [ 528.943544][T15174] ? __pfx___netlink_kernel_create+0x10/0x10 [ 528.943586][T15174] proc_create_reg+0x7d/0x180 [ 528.943627][T15174] proc_create_seq_private+0x8e/0x180 [ 528.943668][T15174] ? __pfx_proc_create_seq_private+0x10/0x10 [ 528.943708][T15174] ? __pfx_nl_fib_input+0x10/0x10 [ 528.943751][T15174] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 528.943791][T15174] ip_rt_do_proc_init+0x57/0x1b0 [ 528.943831][T15174] ops_init+0x1e2/0x5f0 [ 528.943866][T15174] setup_net+0x11d/0x3a0 [ 528.943898][T15174] ? __pfx_setup_net+0x10/0x10 [ 528.943926][T15174] ? lockdep_init_map_type+0x5c/0x270 [ 528.943956][T15174] ? mutex_init_lockep+0x110/0x150 [ 528.943992][T15174] copy_net_ns+0x351/0x7c0 [ 528.944030][T15174] create_new_namespaces+0x3ea/0xab0 [ 528.944076][T15174] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 528.944122][T15174] ksys_unshare+0x45b/0xa40 [ 528.944166][T15174] ? __pfx_ksys_unshare+0x10/0x10 [ 528.944212][T15174] ? xfd_validate_state+0x61/0x180 [ 528.944249][T15174] __x64_sys_unshare+0x31/0x40 [ 528.944312][T15174] do_syscall_64+0xcd/0xf80 [ 528.944352][T15174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.944382][T15174] RIP: 0033:0x7fb09598f7c9 [ 528.944405][T15174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.944432][T15174] RSP: 002b:00007fb096754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 528.944459][T15174] RAX: ffffffffffffffda RBX: 00007fb095be5fa0 RCX: 00007fb09598f7c9 [ 528.944479][T15174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 528.944497][T15174] RBP: 00007fb095a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 528.944515][T15174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.944534][T15174] R13: 00007fb095be6038 R14: 00007fb095be5fa0 R15: 00007fff1e5ed348 [ 528.944572][T15174] [ 529.558089][T15081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 529.575124][T15081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 529.617523][T15081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 529.683678][T15081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 529.718722][T15190] FAULT_INJECTION: forcing a failure. [ 529.718722][T15190] name failslab, interval 1, probability 393216, space 0, times 0 [ 529.754898][T15190] CPU: 0 UID: 0 PID: 15190 Comm: syz.3.2543 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.754947][T15190] Tainted: [L]=SOFTLOCKUP [ 529.754957][T15190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.754979][T15190] Call Trace: [ 529.754997][T15190] [ 529.755009][T15190] dump_stack_lvl+0x16c/0x1f0 [ 529.755049][T15190] should_fail_ex+0x512/0x640 [ 529.755094][T15190] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 529.755134][T15190] should_failslab+0xc2/0x120 [ 529.755175][T15190] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 529.755209][T15190] ? rcu_is_watching+0x12/0xc0 [ 529.755246][T15190] ? __d_alloc+0x35/0xa80 [ 529.755296][T15190] ? __d_alloc+0x35/0xa80 [ 529.755337][T15190] __d_alloc+0x35/0xa80 [ 529.755384][T15190] d_alloc_pseudo+0x1c/0xc0 [ 529.755417][T15190] alloc_file_pseudo+0xcf/0x230 [ 529.755450][T15190] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 529.755481][T15190] ? alloc_fd+0x471/0x7d0 [ 529.755526][T15190] sock_alloc_file+0x50/0x210 [ 529.755560][T15190] __sys_socket+0x1c0/0x260 [ 529.755599][T15190] ? __pfx___sys_socket+0x10/0x10 [ 529.755637][T15190] ? xfd_validate_state+0x61/0x180 [ 529.755672][T15190] __x64_sys_socket+0x72/0xb0 [ 529.755709][T15190] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.755743][T15190] do_syscall_64+0xcd/0xf80 [ 529.755781][T15190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.755810][T15190] RIP: 0033:0x7fb09598f7c9 [ 529.755839][T15190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.755868][T15190] RSP: 002b:00007fb096754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 529.755896][T15190] RAX: ffffffffffffffda RBX: 00007fb095be5fa0 RCX: 00007fb09598f7c9 [ 529.755917][T15190] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 529.755933][T15190] RBP: 00007fb095a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.755951][T15190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.755969][T15190] R13: 00007fb095be6038 R14: 00007fb095be5fa0 R15: 00007fff1e5ed348 [ 529.756015][T15190] getty: ttyS0: read error: Resource temporarily unavailable [ 530.525219][ T8573] Bluetooth: hci0: command tx timeout [ 530.558119][T15081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.442651][T15081] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.851821][T10575] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.859193][T10575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.921262][T10575] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.928575][T10575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.999487][T15081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.594529][ T8573] Bluetooth: hci0: command tx timeout [ 532.815724][T15081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.906916][T15242] FAULT_INJECTION: forcing a failure. [ 532.906916][T15242] name failslab, interval 1, probability 393216, space 0, times 0 [ 532.931465][T15242] CPU: 1 UID: 0 PID: 15242 Comm: syz.2.2550 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.931509][T15242] Tainted: [L]=SOFTLOCKUP [ 532.931519][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.931535][T15242] Call Trace: [ 532.931544][T15242] [ 532.931555][T15242] dump_stack_lvl+0x16c/0x1f0 [ 532.931592][T15242] should_fail_ex+0x512/0x640 [ 532.931634][T15242] ? __kmalloc_noprof+0xca/0x910 [ 532.931668][T15242] should_failslab+0xc2/0x120 [ 532.931707][T15242] __kmalloc_noprof+0xeb/0x910 [ 532.931735][T15242] ? __init_waitqueue_head+0xca/0x150 [ 532.931774][T15242] ? __netlink_kernel_create+0x17f/0x750 [ 532.931814][T15242] ? __netlink_kernel_create+0x17f/0x750 [ 532.931846][T15242] __netlink_kernel_create+0x17f/0x750 [ 532.931886][T15242] ? __pfx___netlink_kernel_create+0x10/0x10 [ 532.931932][T15242] fib_net_init+0x26d/0x3f0 [ 532.931973][T15242] ? __pfx___register_sysctl_table+0x10/0x10 [ 532.932013][T15242] ? __pfx_fib_net_init+0x10/0x10 [ 532.932048][T15242] ? lockdep_init_map_type+0x5c/0x270 [ 532.932076][T15242] ? __pfx_nl_fib_input+0x10/0x10 [ 532.932116][T15242] ? devinet_init_net+0x5c2/0x910 [ 532.932157][T15242] ? __pfx_fib_net_init+0x10/0x10 [ 532.932188][T15242] ops_init+0x1e2/0x5f0 [ 532.932223][T15242] setup_net+0x11d/0x3a0 [ 532.932255][T15242] ? __pfx_setup_net+0x10/0x10 [ 532.932282][T15242] ? lockdep_init_map_type+0x5c/0x270 [ 532.932310][T15242] ? mutex_init_lockep+0x110/0x150 [ 532.932341][T15242] copy_net_ns+0x351/0x7c0 [ 532.932378][T15242] create_new_namespaces+0x3ea/0xab0 [ 532.932421][T15242] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 532.932461][T15242] ksys_unshare+0x45b/0xa40 [ 532.932502][T15242] ? __pfx_ksys_unshare+0x10/0x10 [ 532.932546][T15242] ? xfd_validate_state+0x61/0x180 [ 532.932582][T15242] __x64_sys_unshare+0x31/0x40 [ 532.932622][T15242] do_syscall_64+0xcd/0xf80 [ 532.932656][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.932684][T15242] RIP: 0033:0x7f6ca6b8f7c9 [ 532.932706][T15242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.932732][T15242] RSP: 002b:00007f6ca7a33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 532.932757][T15242] RAX: ffffffffffffffda RBX: 00007f6ca6de5fa0 RCX: 00007f6ca6b8f7c9 [ 532.932776][T15242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 532.932793][T15242] RBP: 00007f6ca6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.932810][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.932825][T15242] R13: 00007f6ca6de6038 R14: 00007f6ca6de5fa0 R15: 00007ffe8be1f2d8 [ 532.932863][T15242] [ 533.704032][ T6238] hsr_slave_0: left promiscuous mode [ 533.723721][ T6238] hsr_slave_1: left promiscuous mode [ 533.731284][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.765749][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.794779][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.802485][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.931855][ T6238] veth1_macvtap: left promiscuous mode [ 533.940911][ T6238] veth0_macvtap: left promiscuous mode [ 533.971254][ T6238] veth1_vlan: left promiscuous mode [ 533.983586][ T6238] veth0_vlan: left promiscuous mode [ 534.026100][ T30] audit: type=1800 audit(1765438343.783:57): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2554" name="discovery_nqn" dev="configfs" ino=63582 res=0 errno=0 [ 534.056262][T15258] random: crng reseeded on system resumption [ 534.236528][T15258] hub 1-0:1.0: USB hub found [ 534.344012][T15258] hub 1-0:1.0: 1 port detected [ 534.572940][T15271] FAULT_INJECTION: forcing a failure. [ 534.572940][T15271] name failslab, interval 1, probability 393216, space 0, times 0 [ 534.589858][T15271] CPU: 1 UID: 0 PID: 15271 Comm: syz.3.2555 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.589901][T15271] Tainted: [L]=SOFTLOCKUP [ 534.589909][T15271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 534.589924][T15271] Call Trace: [ 534.589933][T15271] [ 534.589944][T15271] dump_stack_lvl+0x16c/0x1f0 [ 534.589981][T15271] should_fail_ex+0x512/0x640 [ 534.590019][T15271] ? fs_reclaim_acquire+0xae/0x150 [ 534.590062][T15271] should_failslab+0xc2/0x120 [ 534.590101][T15271] __kmalloc_noprof+0xeb/0x910 [ 534.590132][T15271] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 534.590170][T15271] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 534.590200][T15271] tomoyo_realpath_from_path+0xc2/0x6e0 [ 534.590235][T15271] ? tomoyo_profile+0x47/0x60 [ 534.590272][T15271] tomoyo_path_number_perm+0x245/0x580 [ 534.590312][T15271] ? tomoyo_path_number_perm+0x237/0x580 [ 534.590357][T15271] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 534.590401][T15271] ? find_held_lock+0x2b/0x80 [ 534.590472][T15271] ? find_held_lock+0x2b/0x80 [ 534.590505][T15271] ? hook_file_ioctl_common+0x144/0x410 [ 534.590555][T15271] ? __fget_files+0x20e/0x3c0 [ 534.590605][T15271] security_file_ioctl+0x9b/0x240 [ 534.590634][T15271] __x64_sys_ioctl+0xb7/0x210 [ 534.590668][T15271] do_syscall_64+0xcd/0xf80 [ 534.590704][T15271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.590733][T15271] RIP: 0033:0x7fb09598f7c9 [ 534.590755][T15271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.590782][T15271] RSP: 002b:00007fb093bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.590809][T15271] RAX: ffffffffffffffda RBX: 00007fb095be6090 RCX: 00007fb09598f7c9 [ 534.590828][T15271] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 534.590845][T15271] RBP: 00007fb093bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.590863][T15271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.590880][T15271] R13: 00007fb095be6128 R14: 00007fb095be6090 R15: 00007fff1e5ed348 [ 534.590916][T15271] [ 534.591716][T15271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 535.453810][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 535.520332][T15280] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 535.531907][ T6238] team0 (unregistering): Port device team_slave_0 removed [ 535.548700][T15280] FAULT_INJECTION: forcing a failure. [ 535.548700][T15280] name failslab, interval 1, probability 393216, space 0, times 0 [ 535.575073][T15280] CPU: 1 UID: 0 PID: 15280 Comm: syz.3.2558 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.575121][T15280] Tainted: [L]=SOFTLOCKUP [ 535.575133][T15280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.575150][T15280] Call Trace: [ 535.575160][T15280] [ 535.575171][T15280] dump_stack_lvl+0x16c/0x1f0 [ 535.575212][T15280] should_fail_ex+0x512/0x640 [ 535.575252][T15280] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 535.575293][T15280] should_failslab+0xc2/0x120 [ 535.575332][T15280] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 535.575372][T15280] ? parse_pred+0x2d3/0x3190 [ 535.575414][T15280] ? kmemdup_nul+0x49/0xf0 [ 535.575445][T15280] kmemdup_nul+0x49/0xf0 [ 535.575480][T15280] parse_pred+0x2d3/0x3190 [ 535.575525][T15280] ? __pfx_parse_pred+0x10/0x10 [ 535.575575][T15280] ? rcu_is_watching+0x12/0xc0 [ 535.575620][T15280] ? process_preds+0x48b/0x1c50 [ 535.575664][T15280] process_preds+0x6bf/0x1c50 [ 535.575709][T15280] ? create_filter_start.constprop.0+0x56/0x300 [ 535.575752][T15280] create_filter+0x140/0x210 [ 535.575801][T15280] ? __pfx_create_filter+0x10/0x10 [ 535.575839][T15280] ? __pfx___mutex_lock+0x10/0x10 [ 535.575879][T15280] ? find_held_lock+0x2b/0x80 [ 535.575919][T15280] apply_event_filter+0x220/0x500 [ 535.575960][T15280] ? __pfx_apply_event_filter+0x10/0x10 [ 535.576010][T15280] event_filter_write+0x16d/0x290 [ 535.576041][T15280] ? __pfx_event_filter_write+0x10/0x10 [ 535.576068][T15280] vfs_write+0x2a0/0x11d0 [ 535.576110][T15280] ? __pfx___mutex_lock+0x10/0x10 [ 535.576150][T15280] ? __pfx_vfs_write+0x10/0x10 [ 535.576200][T15280] ? __fget_files+0x20e/0x3c0 [ 535.576248][T15280] ksys_write+0x12a/0x250 [ 535.576284][T15280] ? __pfx_ksys_write+0x10/0x10 [ 535.576336][T15280] do_syscall_64+0xcd/0xf80 [ 535.576374][T15280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.576404][T15280] RIP: 0033:0x7fb09598f7c9 [ 535.576429][T15280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.576458][T15280] RSP: 002b:00007fb096754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 535.576486][T15280] RAX: ffffffffffffffda RBX: 00007fb095be5fa0 RCX: 00007fb09598f7c9 [ 535.576507][T15280] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 535.576524][T15280] RBP: 00007fb095a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.576543][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.576561][T15280] R13: 00007fb095be6038 R14: 00007fb095be5fa0 R15: 00007fff1e5ed348 [ 535.576603][T15280] [ 536.805297][T15081] veth0_vlan: entered promiscuous mode [ 536.961605][T15081] veth1_vlan: entered promiscuous mode [ 537.076315][T15081] veth0_macvtap: entered promiscuous mode [ 537.112028][T15081] veth1_macvtap: entered promiscuous mode [ 537.261297][T15081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.274220][T15290] FAULT_INJECTION: forcing a failure. [ 537.274220][T15290] name failslab, interval 1, probability 393216, space 0, times 0 [ 537.288136][T15290] CPU: 1 UID: 0 PID: 15290 Comm: syz.1.2560 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.288181][T15290] Tainted: [L]=SOFTLOCKUP [ 537.288192][T15290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.288210][T15290] Call Trace: [ 537.288220][T15290] [ 537.288231][T15290] dump_stack_lvl+0x16c/0x1f0 [ 537.288271][T15290] should_fail_ex+0x512/0x640 [ 537.288321][T15290] ? __kmalloc_noprof+0xca/0x910 [ 537.288354][T15290] should_failslab+0xc2/0x120 [ 537.288396][T15290] __kmalloc_noprof+0xeb/0x910 [ 537.288424][T15290] ? proc_create_reg+0xe3/0x180 [ 537.288459][T15290] ? xfrm_hash_alloc+0xd1/0x100 [ 537.288504][T15290] ? xfrm_hash_alloc+0xd1/0x100 [ 537.288540][T15290] xfrm_hash_alloc+0xd1/0x100 [ 537.288577][T15290] xfrm_state_init+0x15f/0x640 [ 537.288622][T15290] ? __pfx_xfrm_net_init+0x10/0x10 [ 537.288662][T15290] xfrm_net_init+0x210/0xcc0 [ 537.288710][T15290] ? __pfx_xfrm_net_init+0x10/0x10 [ 537.288752][T15290] ops_init+0x1e2/0x5f0 [ 537.288786][T15290] setup_net+0x11d/0x3a0 [ 537.288817][T15290] ? __pfx_setup_net+0x10/0x10 [ 537.288845][T15290] ? lockdep_init_map_type+0x5c/0x270 [ 537.288873][T15290] ? mutex_init_lockep+0x110/0x150 [ 537.288906][T15290] copy_net_ns+0x351/0x7c0 [ 537.288942][T15290] create_new_namespaces+0x3ea/0xab0 [ 537.288986][T15290] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 537.289028][T15290] ksys_unshare+0x45b/0xa40 [ 537.289073][T15290] ? __pfx_ksys_unshare+0x10/0x10 [ 537.289117][T15290] ? xfd_validate_state+0x61/0x180 [ 537.289156][T15290] __x64_sys_unshare+0x31/0x40 [ 537.289200][T15290] do_syscall_64+0xcd/0xf80 [ 537.289239][T15290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.289269][T15290] RIP: 0033:0x7f198bd8f7c9 [ 537.289294][T15290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.289341][T15290] RSP: 002b:00007f198cc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 537.289369][T15290] RAX: ffffffffffffffda RBX: 00007f198bfe5fa0 RCX: 00007f198bd8f7c9 [ 537.289389][T15290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 537.289407][T15290] RBP: 00007f198be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.289425][T15290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.289442][T15290] R13: 00007f198bfe6038 R14: 00007f198bfe5fa0 R15: 00007ffeb03c3338 [ 537.289480][T15290] [ 537.558664][T15081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.583604][T11056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.593171][T11056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.607362][T11056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.616838][T11056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.732676][ T6229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.756138][ T6229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.806404][ T6229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.825854][ T6229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.919236][T15295] FAULT_INJECTION: forcing a failure. [ 537.919236][T15295] name failslab, interval 1, probability 393216, space 0, times 0 [ 537.947037][T15295] CPU: 0 UID: 0 PID: 15295 Comm: syz.1.2562 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.947081][T15295] Tainted: [L]=SOFTLOCKUP [ 537.947092][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.947110][T15295] Call Trace: [ 537.947120][T15295] [ 537.947132][T15295] dump_stack_lvl+0x16c/0x1f0 [ 537.947170][T15295] should_fail_ex+0x512/0x640 [ 537.947209][T15295] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 537.947251][T15295] should_failslab+0xc2/0x120 [ 537.947291][T15295] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 537.947337][T15295] ? kasprintf+0xc7/0x100 [ 537.947385][T15295] ? kvasprintf+0xbc/0x150 [ 537.947421][T15295] kvasprintf+0xbc/0x150 [ 537.947456][T15295] ? __pfx_kvasprintf+0x10/0x10 [ 537.947506][T15295] kasprintf+0xc7/0x100 [ 537.947543][T15295] ? __pfx_kasprintf+0x10/0x10 [ 537.947580][T15295] ? __is_module_percpu_address+0x1e0/0x440 [ 537.947625][T15295] alloc_workqueue_noprof+0x114/0x200 [ 537.947670][T15295] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 537.947712][T15295] ? rcu_is_watching+0x12/0xc0 [ 537.947750][T15295] ? trace_kmalloc+0x2b/0xb0 [ 537.947785][T15295] ? __kmalloc_noprof+0x35d/0x910 [ 537.947812][T15295] ? ieee80211_register_hw+0x15c9/0x4160 [ 537.947857][T15295] ieee80211_register_hw+0x1f1a/0x4160 [ 537.947900][T15295] ? lockdep_hardirqs_on+0x11/0x110 [ 537.947933][T15295] ? _raw_spin_unlock+0x41/0x50 [ 537.947962][T15295] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 537.947996][T15295] ? __pfx___debug_object_init+0x10/0x10 [ 537.948034][T15295] ? find_held_lock+0x2b/0x80 [ 537.948066][T15295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.948103][T15295] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 537.948132][T15295] ? __hrtimer_setup+0x176/0x280 [ 537.948165][T15295] mac80211_hwsim_new_radio+0x3323/0x5150 [ 537.948220][T15295] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 537.948268][T15295] hwsim_new_radio_nl+0xba2/0x1330 [ 537.948308][T15295] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.948367][T15295] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 537.948405][T15295] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 537.948447][T15295] genl_family_rcv_msg_doit+0x209/0x2f0 [ 537.948483][T15295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.948516][T15295] ? genl_get_cmd+0x194/0x580 [ 537.948553][T15295] ? bpf_lsm_capable+0x9/0x10 [ 537.948585][T15295] ? security_capable+0x7e/0x260 [ 537.948619][T15295] ? ns_capable+0xd7/0x110 [ 537.948652][T15295] genl_rcv_msg+0x55c/0x800 [ 537.948689][T15295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.948722][T15295] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.948771][T15295] netlink_rcv_skb+0x158/0x420 [ 537.948800][T15295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.948834][T15295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.948876][T15295] ? netlink_deliver_tap+0x1ae/0xd30 [ 537.948908][T15295] genl_rcv+0x28/0x40 [ 537.948937][T15295] netlink_unicast+0x5aa/0x870 [ 537.948972][T15295] ? __pfx_netlink_unicast+0x10/0x10 [ 537.949013][T15295] netlink_sendmsg+0x8c8/0xdd0 [ 537.949048][T15295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.949081][T15295] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 537.949120][T15295] ____sys_sendmsg+0xa5d/0xc30 [ 537.949153][T15295] ? copy_msghdr_from_user+0x10a/0x160 [ 537.949179][T15295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.949218][T15295] ? __pfx_futex_wake_mark+0x10/0x10 [ 537.949256][T15295] ___sys_sendmsg+0x134/0x1d0 [ 537.949284][T15295] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.949309][T15295] ? futex_private_hash_put+0x160/0x1b0 [ 537.949381][T15295] __sys_sendmsg+0x16d/0x220 [ 537.949408][T15295] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.949435][T15295] ? __x64_sys_futex+0x1e0/0x4c0 [ 537.949483][T15295] do_syscall_64+0xcd/0xf80 [ 537.949516][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.949542][T15295] RIP: 0033:0x7f198bd8f7c9 [ 537.949565][T15295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.949590][T15295] RSP: 002b:00007f198cc18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.949615][T15295] RAX: ffffffffffffffda RBX: 00007f198bfe5fa0 RCX: 00007f198bd8f7c9 [ 537.949633][T15295] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 537.949649][T15295] RBP: 00007f198be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.949665][T15295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.949680][T15295] R13: 00007f198bfe6038 R14: 00007f198bfe5fa0 R15: 00007ffeb03c3338 [ 537.949715][T15295] [ 538.849607][T15309] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 539.202680][T15292] kexec: Could not allocate control_code_buffer [ 539.449910][T15315] FAULT_INJECTION: forcing a failure. [ 539.449910][T15315] name failslab, interval 1, probability 393216, space 0, times 0 [ 539.486669][T15315] CPU: 1 UID: 0 PID: 15315 Comm: syz.0.2568 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.486696][T15315] Tainted: [L]=SOFTLOCKUP [ 539.486702][T15315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.486712][T15315] Call Trace: [ 539.486718][T15315] [ 539.486725][T15315] dump_stack_lvl+0x16c/0x1f0 [ 539.486748][T15315] should_fail_ex+0x512/0x640 [ 539.486771][T15315] ? __kmalloc_noprof+0xca/0x910 [ 539.486790][T15315] should_failslab+0xc2/0x120 [ 539.486811][T15315] __kmalloc_noprof+0xeb/0x910 [ 539.486827][T15315] ? proc_create_reg+0xe3/0x180 [ 539.486846][T15315] ? xfrm_hash_alloc+0xd1/0x100 [ 539.486870][T15315] ? __pfx_xfrm_net_init+0x10/0x10 [ 539.486892][T15315] ? xfrm_hash_alloc+0xd1/0x100 [ 539.486911][T15315] xfrm_hash_alloc+0xd1/0x100 [ 539.486932][T15315] xfrm_state_init+0xdd/0x640 [ 539.486956][T15315] ? __pfx_xfrm_net_init+0x10/0x10 [ 539.486977][T15315] xfrm_net_init+0x210/0xcc0 [ 539.487002][T15315] ? __pfx_xfrm_net_init+0x10/0x10 [ 539.487024][T15315] ops_init+0x1e2/0x5f0 [ 539.487044][T15315] setup_net+0x11d/0x3a0 [ 539.487060][T15315] ? __pfx_setup_net+0x10/0x10 [ 539.487075][T15315] ? lockdep_init_map_type+0x5c/0x270 [ 539.487091][T15315] ? mutex_init_lockep+0x110/0x150 [ 539.487109][T15315] copy_net_ns+0x351/0x7c0 [ 539.487128][T15315] create_new_namespaces+0x3ea/0xab0 [ 539.487153][T15315] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 539.487175][T15315] ksys_unshare+0x45b/0xa40 [ 539.487198][T15315] ? __pfx_ksys_unshare+0x10/0x10 [ 539.487221][T15315] ? xfd_validate_state+0x61/0x180 [ 539.487240][T15315] __x64_sys_unshare+0x31/0x40 [ 539.487262][T15315] do_syscall_64+0xcd/0xf80 [ 539.487288][T15315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.487305][T15315] RIP: 0033:0x7fb26cb8f7c9 [ 539.487319][T15315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.487334][T15315] RSP: 002b:00007fb26d946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 539.487349][T15315] RAX: ffffffffffffffda RBX: 00007fb26cde5fa0 RCX: 00007fb26cb8f7c9 [ 539.487359][T15315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 539.487368][T15315] RBP: 00007fb26cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 539.487377][T15315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.487386][T15315] R13: 00007fb26cde6038 R14: 00007fb26cde5fa0 R15: 00007ffd54f572a8 [ 539.487407][T15315] [ 540.683262][T15332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2572'. [ 541.326705][T15339] FAULT_INJECTION: forcing a failure. [ 541.326705][T15339] name failslab, interval 1, probability 393216, space 0, times 0 [ 541.364572][T15339] CPU: 1 UID: 0 PID: 15339 Comm: syz.2.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.364619][T15339] Tainted: [L]=SOFTLOCKUP [ 541.364630][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.364647][T15339] Call Trace: [ 541.364658][T15339] [ 541.364669][T15339] dump_stack_lvl+0x16c/0x1f0 [ 541.364711][T15339] should_fail_ex+0x512/0x640 [ 541.364757][T15339] ? fs_reclaim_acquire+0xae/0x150 [ 541.364805][T15339] should_failslab+0xc2/0x120 [ 541.364867][T15339] kmem_cache_alloc_noprof+0x83/0x770 [ 541.364902][T15339] ? __pfx_map_id_range_down+0x10/0x10 [ 541.364941][T15339] ? security_inode_alloc+0x3b/0x2b0 [ 541.364989][T15339] ? security_inode_alloc+0x3b/0x2b0 [ 541.365029][T15339] security_inode_alloc+0x3b/0x2b0 [ 541.365072][T15339] inode_init_always_gfp+0xced/0x1040 [ 541.365119][T15339] alloc_inode+0x86/0x240 [ 541.365151][T15339] sock_alloc+0x40/0x280 [ 541.365185][T15339] __sock_create+0xc2/0x8a0 [ 541.365238][T15339] __sys_socket+0x14d/0x260 [ 541.365280][T15339] ? __pfx___sys_socket+0x10/0x10 [ 541.365320][T15339] ? xfd_validate_state+0x61/0x180 [ 541.365358][T15339] __x64_sys_socket+0x72/0xb0 [ 541.365396][T15339] ? lockdep_hardirqs_on+0x7c/0x110 [ 541.365435][T15339] do_syscall_64+0xcd/0xf80 [ 541.365473][T15339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.365503][T15339] RIP: 0033:0x7f6ca6b8f7c9 [ 541.365527][T15339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.365557][T15339] RSP: 002b:00007f6ca7a33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 541.365586][T15339] RAX: ffffffffffffffda RBX: 00007f6ca6de5fa0 RCX: 00007f6ca6b8f7c9 [ 541.365606][T15339] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 541.365624][T15339] RBP: 00007f6ca6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 541.365643][T15339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.365661][T15339] R13: 00007f6ca6de6038 R14: 00007f6ca6de5fa0 R15: 00007ffe8be1f2d8 [ 541.365701][T15339] [ 541.365769][T15339] socket: no more sockets [ 541.637153][T15325] kexec: Could not allocate control_code_buffer [ 541.665611][T15345] NFSD: Failed to start, no listeners configured. [ 541.780918][T15349] openvswitch: netlink: IP tunnel dst address not specified [ 541.813261][T15352] FAULT_INJECTION: forcing a failure. [ 541.813261][T15352] name failslab, interval 1, probability 393216, space 0, times 0 [ 541.828547][T15352] CPU: 0 UID: 0 PID: 15352 Comm: syz.2.2580 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.828594][T15352] Tainted: [L]=SOFTLOCKUP [ 541.828606][T15352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.828623][T15352] Call Trace: [ 541.828633][T15352] [ 541.828645][T15352] dump_stack_lvl+0x16c/0x1f0 [ 541.828685][T15352] should_fail_ex+0x512/0x640 [ 541.828728][T15352] ? __kmalloc_noprof+0xca/0x910 [ 541.828763][T15352] should_failslab+0xc2/0x120 [ 541.828806][T15352] __kmalloc_noprof+0xeb/0x910 [ 541.828838][T15352] ? process_preds+0x48b/0x1c50 [ 541.828880][T15352] ? process_preds+0x48b/0x1c50 [ 541.828915][T15352] process_preds+0x48b/0x1c50 [ 541.828959][T15352] ? create_filter_start.constprop.0+0x56/0x300 [ 541.829003][T15352] create_filter+0x140/0x210 [ 541.829040][T15352] ? __pfx_create_filter+0x10/0x10 [ 541.829081][T15352] ? __pfx___mutex_lock+0x10/0x10 [ 541.829120][T15352] ? find_held_lock+0x2b/0x80 [ 541.829160][T15352] apply_event_filter+0x220/0x500 [ 541.829201][T15352] ? __pfx_apply_event_filter+0x10/0x10 [ 541.829251][T15352] event_filter_write+0x16d/0x290 [ 541.829287][T15352] ? __pfx_event_filter_write+0x10/0x10 [ 541.829314][T15352] vfs_write+0x2a0/0x11d0 [ 541.829356][T15352] ? __pfx___mutex_lock+0x10/0x10 [ 541.829395][T15352] ? __pfx_vfs_write+0x10/0x10 [ 541.829453][T15352] ? __fget_files+0x20e/0x3c0 [ 541.829509][T15352] ksys_write+0x12a/0x250 [ 541.829548][T15352] ? __pfx_ksys_write+0x10/0x10 [ 541.829599][T15352] do_syscall_64+0xcd/0xf80 [ 541.829636][T15352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.829663][T15352] RIP: 0033:0x7f6ca6b8f7c9 [ 541.829686][T15352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.829714][T15352] RSP: 002b:00007f6ca7a33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.829741][T15352] RAX: ffffffffffffffda RBX: 00007f6ca6de5fa0 RCX: 00007f6ca6b8f7c9 [ 541.829761][T15352] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 541.829779][T15352] RBP: 00007f6ca6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 541.829798][T15352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.829816][T15352] R13: 00007f6ca6de6038 R14: 00007f6ca6de5fa0 R15: 00007ffe8be1f2d8 [ 541.829857][T15352] [ 542.453608][T15354] FAULT_INJECTION: forcing a failure. [ 542.453608][T15354] name failslab, interval 1, probability 393216, space 0, times 0 [ 542.508697][T15354] CPU: 0 UID: 0 PID: 15354 Comm: syz.3.2579 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.508743][T15354] Tainted: [L]=SOFTLOCKUP [ 542.508753][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.508770][T15354] Call Trace: [ 542.508778][T15354] [ 542.508790][T15354] dump_stack_lvl+0x16c/0x1f0 [ 542.508829][T15354] should_fail_ex+0x512/0x640 [ 542.508885][T15354] ? __kvmalloc_node_noprof+0x129/0xa40 [ 542.508930][T15354] should_failslab+0xc2/0x120 [ 542.508974][T15354] __kvmalloc_node_noprof+0x14a/0xa40 [ 542.509015][T15354] ? v4l2_ctrl_new+0x982/0x2190 [ 542.509049][T15354] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 542.509102][T15354] ? v4l2_ctrl_new+0x982/0x2190 [ 542.509138][T15354] v4l2_ctrl_new+0x982/0x2190 [ 542.509188][T15354] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 542.509224][T15354] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 542.509272][T15354] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 542.509320][T15354] v4l2_ctrl_new_std+0x1be/0x290 [ 542.509370][T15354] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 542.509404][T15354] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 542.509449][T15354] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 542.509492][T15354] ? media_request_object_init+0x100/0x180 [ 542.509526][T15354] vicodec_open+0x1d9/0xf70 [ 542.509555][T15354] ? kobject_get_unless_zero+0x156/0x1e0 [ 542.509602][T15354] v4l2_open+0x1d2/0x5e0 [ 542.509635][T15354] ? __pfx_v4l2_open+0x10/0x10 [ 542.509667][T15354] chrdev_open+0x234/0x6a0 [ 542.509709][T15354] ? __pfx_apparmor_file_open+0x10/0x10 [ 542.509750][T15354] ? __pfx_chrdev_open+0x10/0x10 [ 542.509795][T15354] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 542.509860][T15354] do_dentry_open+0x748/0x1590 [ 542.509902][T15354] ? __pfx_chrdev_open+0x10/0x10 [ 542.509953][T15354] vfs_open+0x82/0x3f0 [ 542.509990][T15354] path_openat+0x2078/0x3140 [ 542.510043][T15354] ? __pfx_path_openat+0x10/0x10 [ 542.510098][T15354] do_filp_open+0x20b/0x470 [ 542.510141][T15354] ? __pfx_do_filp_open+0x10/0x10 [ 542.510210][T15354] ? alloc_fd+0x471/0x7d0 [ 542.510262][T15354] do_sys_openat2+0x11f/0x280 [ 542.510293][T15354] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.510340][T15354] __x64_sys_openat+0x174/0x210 [ 542.510373][T15354] ? __pfx___x64_sys_openat+0x10/0x10 [ 542.510420][T15354] do_syscall_64+0xcd/0xf80 [ 542.510458][T15354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.510489][T15354] RIP: 0033:0x7fb09598f7c9 [ 542.510514][T15354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.510543][T15354] RSP: 002b:00007fb093bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.510571][T15354] RAX: ffffffffffffffda RBX: 00007fb095be6090 RCX: 00007fb09598f7c9 [ 542.510592][T15354] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 542.510624][T15354] RBP: 00007fb095a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 542.510644][T15354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.510663][T15354] R13: 00007fb095be6128 R14: 00007fb095be6090 R15: 00007fff1e5ed348 [ 542.510704][T15354] syzkaller syzkaller login: [ 543.147322][ T30] audit: type=1800 audit(1765438352.961:58): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2586" name="discovery_nqn" dev="configfs" ino=64736 res=0 errno=0 [ 543.174929][T15378] random: crng reseeded on system resumption [ 543.351427][T15378] hub 1-0:1.0: USB hub found [ 543.414413][T15378] hub 1-0:1.0: 1 port detected [ 543.463189][T15384] hub 1-0:1.0: USB hub found [ 543.475225][T15384] hub 1-0:1.0: 1 port detected [ 543.979766][T15395] FAULT_INJECTION: forcing a failure. [ 543.979766][T15395] name failslab, interval 1, probability 393216, space 0, times 0 [ 544.023295][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.1.2589 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.023346][T15395] Tainted: [L]=SOFTLOCKUP [ 544.023357][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 544.023374][T15395] Call Trace: [ 544.023385][T15395] [ 544.023396][T15395] dump_stack_lvl+0x16c/0x1f0 [ 544.023438][T15395] should_fail_ex+0x512/0x640 [ 544.023481][T15395] ? __kmalloc_noprof+0xca/0x910 [ 544.023516][T15395] should_failslab+0xc2/0x120 [ 544.023557][T15395] __kmalloc_noprof+0xeb/0x910 [ 544.023590][T15395] ? lsm_blob_alloc+0x68/0x90 [ 544.023628][T15395] ? lsm_blob_alloc+0x68/0x90 [ 544.023661][T15395] lsm_blob_alloc+0x68/0x90 [ 544.023695][T15395] security_sk_alloc+0x2f/0x270 [ 544.023738][T15395] sk_prot_alloc+0xfb/0x2a0 [ 544.023776][T15395] sk_alloc+0x36/0xe30 [ 544.023823][T15395] inet6_create+0x381/0x12b0 [ 544.023872][T15395] ? inet6_create+0x7f/0x12b0 [ 544.023911][T15395] __sock_create+0x339/0x8a0 [ 544.023955][T15395] __sys_socket+0x14d/0x260 [ 544.023995][T15395] ? __pfx___sys_socket+0x10/0x10 [ 544.024033][T15395] ? xfd_validate_state+0x61/0x180 [ 544.024073][T15395] __x64_sys_socket+0x72/0xb0 [ 544.024112][T15395] ? lockdep_hardirqs_on+0x7c/0x110 [ 544.024147][T15395] do_syscall_64+0xcd/0xf80 [ 544.024186][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.024216][T15395] RIP: 0033:0x7f198bd8f7c9 [ 544.024240][T15395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.024269][T15395] RSP: 002b:00007f198cc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 544.024298][T15395] RAX: ffffffffffffffda RBX: 00007f198bfe5fa0 RCX: 00007f198bd8f7c9 [ 544.024317][T15395] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 544.024336][T15395] RBP: 00007f198be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 544.024355][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.024373][T15395] R13: 00007f198bfe6038 R14: 00007f198bfe5fa0 R15: 00007ffeb03c3338 [ 544.024413][T15395] [ 544.341975][T15400] bridge0: port 3(veth0_to_bridge) entered blocking state [ 544.355617][T15400] bridge0: port 3(veth0_to_bridge) entered disabled state [ 544.364783][T15400] veth0_to_bridge: entered allmulticast mode [ 544.402503][T15400] veth0_to_bridge: entered promiscuous mode [ 544.410915][T15400] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.425429][T15400] bridge0: port 3(veth0_to_bridge) entered blocking state [ 544.433113][T15400] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 544.533396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.546027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.558996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.571515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.584098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.596710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.609362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.622051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.348848][ C0] net_ratelimit: 7230 callbacks suppressed [ 546.348866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 546.367272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.379567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 546.391880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.404106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 546.416381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.428636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 546.441181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.453438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 546.465694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 551.332844][ C0] net_ratelimit: 20333 callbacks suppressed [ 551.332861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 551.351057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 551.363357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 551.375713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 551.388160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 551.400456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 551.412723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 551.425174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 551.437458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 551.449731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 556.316879][ C0] net_ratelimit: 21138 callbacks suppressed [ 556.316897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 556.335200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.347706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.360145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 556.372481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 556.384708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.397038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.409358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 556.421696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 556.434003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.301018][ C0] net_ratelimit: 20855 callbacks suppressed [ 561.301035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.319251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.331684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 561.344022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.356270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.368557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.380891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 561.393135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.405410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.417682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.285157][ C0] net_ratelimit: 18585 callbacks suppressed [ 566.285175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.303557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.315977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.328577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 566.340997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.353504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.365873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.378565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 566.390954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.403379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.815266][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.821714][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.365591][T15435] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 569.407462][T15436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.442786][T15437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 569.505789][T15435] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 569.532252][T15436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.547590][T15082] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 569.585404][T15082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 569.612046][T15437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 569.635924][T15435] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 569.695681][T15436] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.734406][T15437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 569.776301][T15082] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 569.820615][T15435] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.854099][T15437] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.911786][T15436] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 569.950149][T15435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 569.998237][T15436] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.037552][T15435] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 570.299639][T15437] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 570.522064][T15437] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 571.269246][ C0] net_ratelimit: 19341 callbacks suppressed [ 571.269265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 571.287639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.299969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.312542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.325023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 571.337666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.349987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.362549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.375082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 571.387645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.317706][T15437] Bluetooth: hci6: command tx timeout [ 572.637163][T15433] Bluetooth: hci5: command tx timeout [ 574.466506][T15434] Bluetooth: hci7: Opcode 0x0c16 failed: -110 [ 576.253124][ C0] net_ratelimit: 21415 callbacks suppressed [ 576.253143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.271614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.284174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.296641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 576.309049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.321292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.333885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.346380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 576.358967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.371242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.048356][ T8573] Bluetooth: hci5: command tx timeout [ 578.074175][T15433] Bluetooth: hci6: command tx timeout [ 578.102541][T15436] Bluetooth: hci3: command tx timeout [ 578.477356][T15437] Bluetooth: hci7: unexpected event for opcode 0x0c16 [ 579.525289][T15437] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 580.118157][T15434] Bluetooth: hci6: command tx timeout [ 580.490150][T15437] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 580.560922][T15436] Bluetooth: hci5: command tx timeout [ 581.237194][ C0] net_ratelimit: 18637 callbacks suppressed [ 581.237213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 581.255643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.268162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.280486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.293034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 581.305465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.317914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.330225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.342739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 581.355041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.179647][ T8573] Bluetooth: hci6: command tx timeout [ 582.439847][T15434] Bluetooth: hci3: command tx timeout [ 582.455871][T15436] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 582.570309][T15431] Bluetooth: hci7: Opcode 0x1001 failed: -110 [ 582.594184][T15436] Bluetooth: hci5: command tx timeout [ 584.505921][T15436] Bluetooth: hci3: command tx timeout [ 586.221389][ C0] net_ratelimit: 20509 callbacks suppressed [ 586.221408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.239340][ C0] sched: DL replenish lagged too much [ 586.245178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 586.257524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.269993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.282332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.294898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 586.307383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.319831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.332131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.344660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 587.682459][T15437] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 587.700013][T15434] Bluetooth: hci3: command tx timeout [ 587.725391][T15437] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 587.756697][T15437] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 589.502144][T15437] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 589.597630][T15437] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 591.205383][ C0] net_ratelimit: 19099 callbacks suppressed [ 591.205404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 591.224049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.236666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.249275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.261691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 591.274144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.286380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.298811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.311159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 591.323952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.053060][T15436] Bluetooth: hci7: command tx timeout [ 594.120839][T15436] Bluetooth: hci7: command tx timeout [ 596.189452][ C0] net_ratelimit: 20026 callbacks suppressed [ 596.189470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 596.207982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.220554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.233174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.245871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 596.258229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.271145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.283464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.295997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 596.308422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.367320][T15437] Bluetooth: hci7: command tx timeout [ 599.992409][T15434] Bluetooth: hci1: command 0x0406 tx timeout [ 601.173524][ C0] net_ratelimit: 20467 callbacks suppressed [ 601.173542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.192044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.204624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.217678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 601.230090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.242488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.254833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.267750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 601.280116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.292775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.020043][T15436] Bluetooth: hci7: command tx timeout [ 606.158362][ C0] net_ratelimit: 14452 callbacks suppressed [ 606.158380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.177102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 606.189647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.202173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.216152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.228695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 606.241220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.253525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.266688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.279295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 611.141634][ C0] net_ratelimit: 13399 callbacks suppressed [ 611.141652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.160136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 611.172643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.185236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 611.197935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.211622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.224215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 611.236743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.249355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 611.261869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.126968][ C0] net_ratelimit: 14150 callbacks suppressed [ 616.126986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.145546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 616.158159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.170611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.183019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 616.195426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.208427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.220878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 616.233198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.245680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.109837][ C0] net_ratelimit: 14545 callbacks suppressed [ 621.109859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.129390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.142000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 621.154544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.167043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.180580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 621.193199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.206801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.219441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 621.231952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.094204][ C0] net_ratelimit: 15003 callbacks suppressed [ 626.094222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.112683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 626.125195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.137799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.150363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 626.162872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.176436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.189452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 626.201975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.214443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.945787][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.952138][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.077940][ C0] net_ratelimit: 14832 callbacks suppressed [ 631.077958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 631.096332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.109992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.122590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 631.135251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.147775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.160348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 631.172878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.186194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.198686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 635.253110][T15436] Bluetooth: hci2: command 0x0406 tx timeout [ 636.062017][ C0] net_ratelimit: 15308 callbacks suppressed [ 636.062041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.080672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.093262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.105660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 636.118078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.130422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.142868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 636.155344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.168362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.180830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.046258][ C0] net_ratelimit: 15513 callbacks suppressed [ 641.046275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 641.064834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.077357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.089944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 641.102485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.116136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.128790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.141366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.153957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 641.166428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.030378][ C0] net_ratelimit: 15536 callbacks suppressed [ 646.030396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.048833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 646.061560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.075232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.087840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.100592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.113335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 646.125864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.138388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.150947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 651.014730][ C0] net_ratelimit: 16249 callbacks suppressed [ 651.014748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.033097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.045654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.058343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 651.070996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.083493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.096145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 651.108671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.122597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.135208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.998574][ C0] net_ratelimit: 15688 callbacks suppressed [ 655.998592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.017080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 656.030043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.042592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.055253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 656.067901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.081756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.094570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.107220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.119849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 660.982556][ C0] net_ratelimit: 15540 callbacks suppressed [ 660.982574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.001332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.013932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.026542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 661.039074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.051602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.064187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 661.076741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.090426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.103129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.966603][ C0] net_ratelimit: 15833 callbacks suppressed [ 665.966620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 665.985091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.997640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.010256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 666.022777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.036544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.049084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.061710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.074542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 666.087153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.850829][T15415] NFSD: Failed to start, no listeners configured. [ 670.951408][ C0] net_ratelimit: 15483 callbacks suppressed [ 670.951425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.969769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.982394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.995020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 671.007461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.019808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.032114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 671.044544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.057531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.069999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.934671][ C0] net_ratelimit: 15601 callbacks suppressed [ 675.934695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 675.953625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.966193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.978847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 675.991793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.005443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.017942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.030608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.043377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 676.056021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.918962][ C0] net_ratelimit: 15835 callbacks suppressed [ 680.918980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.937558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.950288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.962991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 680.975592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.988125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.000667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 681.013281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.026841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.039450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.902796][ C0] net_ratelimit: 15414 callbacks suppressed [ 685.902817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.921281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.933869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.946693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 685.959312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.971812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.984085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 685.996615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.009477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.022013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.062899][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.069366][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.887508][ C0] net_ratelimit: 15614 callbacks suppressed [ 690.887526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.905869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.918927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.931547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 690.943861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.956280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.968511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 690.980974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.994274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.006708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.786793][ T31] INFO: task kworker/1:9:10672 blocked for more than 143 seconds. [ 694.794661][ T31] Tainted: G L syzkaller #0 [ 694.801299][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 694.826396][ T31] task:kworker/1:9 state:D stack:27080 pid:10672 tgid:10672 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 694.846287][ T31] Workqueue: events_power_efficient crda_timeout_work [ 694.853228][ T31] Call Trace: [ 694.866188][ T31] [ 694.869186][ T31] ? __schedule+0x10b9/0x6150 [ 694.874006][ T31] __schedule+0x1139/0x6150 [ 694.892896][ T31] ? __pfx___schedule+0x10/0x10 [ 694.905984][ T31] ? find_held_lock+0x2b/0x80 [ 694.910738][ T31] ? schedule+0x2d7/0x3a0 [ 694.915105][ T31] schedule+0xe7/0x3a0 [ 694.925864][ T31] schedule_preempt_disabled+0x13/0x30 [ 694.931393][ T31] __mutex_lock+0xc69/0x1ca0 [ 694.953592][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 694.958816][ T31] ? crda_timeout_work+0x16/0x70 [ 694.963818][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 694.970257][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 694.976290][ T31] ? crda_timeout_work+0x16/0x70 [ 694.981272][ T31] ? rtnl_lock+0x9/0x20 [ 694.985458][ T31] crda_timeout_work+0x16/0x70 [ 694.990836][ T31] process_one_work+0x9ba/0x1b20 [ 694.996181][ T31] ? __pfx_process_one_work+0x10/0x10 [ 695.001614][ T31] ? assign_work+0x1a0/0x250 [ 695.006774][ T31] worker_thread+0x6c8/0xf10 [ 695.011413][ T31] ? __kthread_parkme+0x19e/0x250 [ 695.017018][ T31] ? __pfx_worker_thread+0x10/0x10 [ 695.022169][ T31] kthread+0x3c5/0x780 [ 695.026707][ T31] ? __pfx_kthread+0x10/0x10 [ 695.031334][ T31] ? rcu_is_watching+0x12/0xc0 [ 695.036789][ T31] ? __pfx_kthread+0x10/0x10 [ 695.041422][ T31] ret_from_fork+0x983/0xb10 [ 695.046483][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 695.051642][ T31] ? __switch_to+0x7af/0x10d0 [ 695.056832][ T31] ? __pfx_kthread+0x10/0x10 [ 695.061478][ T31] ret_from_fork_asm+0x1a/0x30 [ 695.066752][ T31] [ 695.069828][ T31] INFO: task syz.2.2591:15403 blocked for more than 143 seconds. [ 695.078045][ T31] Tainted: G L syzkaller #0 [ 695.084567][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.093711][ T31] task:syz.2.2591 state:D stack:27280 pid:15403 tgid:15399 ppid:14129 task_flags:0x400140 flags:0x00080002 [ 695.106392][ T31] Call Trace: [ 695.109702][ T31] [ 695.112652][ T31] ? __schedule+0x10b9/0x6150 [ 695.118044][ T31] __schedule+0x1139/0x6150 [ 695.122587][ T31] ? __lock_acquire+0x436/0x2890 [ 695.128388][ T31] ? __pfx___schedule+0x10/0x10 [ 695.133298][ T31] ? find_held_lock+0x2b/0x80 [ 695.138476][ T31] ? schedule+0x2d7/0x3a0 [ 695.142850][ T31] schedule+0xe7/0x3a0 [ 695.147385][ T31] schedule_preempt_disabled+0x13/0x30 [ 695.152887][ T31] __mutex_lock+0xc69/0x1ca0 [ 695.157935][ T31] ? ip_tunnel_init_net+0x21d/0x7d0 [ 695.163186][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 695.168958][ T31] ? net_generic+0xea/0x2a0 [ 695.173604][ T31] ? ip_tunnel_init_net+0x21d/0x7d0 [ 695.179310][ T31] ? rtnl_lock+0x9/0x20 [ 695.183515][ T31] ip_tunnel_init_net+0x21d/0x7d0 [ 695.189048][ T31] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 695.199782][ T31] ? ops_init+0x77/0x5f0 [ 695.204204][ T31] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 695.210315][ T31] ops_init+0x1e2/0x5f0 [ 695.215111][ T31] setup_net+0x11d/0x3a0 [ 695.219393][ T31] ? __pfx_setup_net+0x10/0x10 [ 695.224182][ T31] ? lockdep_init_map_type+0x5c/0x270 [ 695.230190][ T31] ? mutex_init_lockep+0x110/0x150 [ 695.235696][ T31] copy_net_ns+0x351/0x7c0 [ 695.240171][ T31] create_new_namespaces+0x3ea/0xab0 [ 695.246029][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 695.251723][ T31] ksys_unshare+0x45b/0xa40 [ 695.256744][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 695.261831][ T31] ? do_user_addr_fault+0x843/0x1370 [ 695.267648][ T31] __x64_sys_unshare+0x31/0x40 [ 695.272468][ T31] do_syscall_64+0xcd/0xf80 [ 695.277454][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.283396][ T31] RIP: 0033:0x7f6ca6b8f7c9 [ 695.288335][ T31] RSP: 002b:00007f6ca7a12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 695.297474][ T31] RAX: ffffffffffffffda RBX: 00007f6ca6de6090 RCX: 00007f6ca6b8f7c9 [ 695.305864][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 695.314320][ T31] RBP: 00007f6ca6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 695.322340][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.330896][ T31] R13: 00007f6ca6de6128 R14: 00007f6ca6de6090 R15: 00007ffe8be1f2d8 [ 695.339266][ T31] [ 695.342360][ T31] [ 695.342360][ T31] Showing all locks held in the system: [ 695.350667][ T31] 4 locks held by kworker/1:0/24: [ 695.356103][ T31] #0: ffff8880803f0548 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 695.367615][ T31] #1: ffffc900001e7c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 695.407632][ T31] #2: ffff888077e71308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 695.420622][ T31] #3: ffff8880766dbea8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 695.432744][ T31] 1 lock held by khungtaskd/31: [ 695.437922][ T31] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 695.448189][ T31] 3 locks held by kworker/1:1/50: [ 695.453617][ T31] #0: ffff888034497548 ((wq_completion)wg-kex-wg1#16){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 695.469927][ T31] #1: ffffc90000bafc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 695.509998][ T31] #2: ffff88805af1d278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe80 [ 695.521664][ T31] 4 locks held by syz-executor/5814: [ 695.527370][ T31] #0: ffff8880759b51c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x117/0x580 [ 695.536987][ T31] #1: ffff88814e684518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 695.546900][ T31] #2: ffff888076e418c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x353/0x1880 [ 695.558287][ T31] #3: ffff888076e415b0 (&ei->i_data_sem){++++}-{4:4}, at: ext4_da_get_block_prep+0x6ad/0x1230 [ 695.569172][ T31] 4 locks held by kworker/0:4/5917: [ 695.574771][ T31] 3 locks held by kworker/0:6/5921: [ 695.579990][ T31] 3 locks held by kworker/1:7/5922: [ 695.585653][ T31] #0: ffff88813ff56948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 695.597960][ T31] #1: ffffc90004517c90 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 695.608828][ T31] #2: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x1190 [ 695.618944][ T31] 3 locks held by kworker/0:7/5925: [ 695.624498][ T31] 4 locks held by kworker/u10:1/6222: [ 695.629891][ T31] 3 locks held by kworker/u10:2/6223: [ 695.635725][ T31] 3 locks held by kworker/u10:4/6229: [ 695.641119][ T31] 3 locks held by kworker/u10:5/6238: [ 695.646982][ T31] 3 locks held by kworker/u10:6/6245: [ 695.652684][ T31] #0: ffff88814cf98148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 695.664151][ T31] #1: ffffc9000b5bfc90 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 695.677579][ T31] #2: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 695.687538][ T31] 3 locks held by kworker/u10:7/6250: [ 695.693404][ T31] 3 locks held by kworker/u10:8/6256: [ 695.698807][ T31] 8 locks held by kworker/u10:9/6269: [ 695.704745][ T31] 4 locks held by kworker/u10:11/6284: [ 695.710322][ T31] #0: ffff888028d62148 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 695.726654][ T31] #1: ffffc9000b79fc90 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 695.740084][ T31] #2: ffff88807c189308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 695.752878][ T31] #3: ffff88805af1d278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 695.764863][ T31] 5 locks held by kworker/u10:12/6293: [ 695.770347][ T31] 3 locks held by kworker/u10:13/6367: [ 695.776338][ T31] 3 locks held by kworker/u10:15/6468: [ 695.782124][ T31] 4 locks held by kworker/u10:16/6708: [ 695.787603][ T31] #0: ffff88807b1b8148 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 695.799228][ T31] #1: ffffc90004587c90 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 695.812489][ T31] #2: ffff888077e71308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 695.825160][ T31] #3: ffff8880766dbea8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 695.837259][ T31] 3 locks held by kworker/u10:17/7211: [ 695.843142][ T31] 2 locks held by kworker/u10:18/7318: [ 695.848710][ T31] 3 locks held by kworker/u11:4/8573: [ 695.854572][ T31] #0: ffff88801f705948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 695.865398][ T31] #1: ffffc90004d17c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 695.871543][ C0] net_ratelimit: 13838 callbacks suppressed [ 695.871566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.878089][ T31] #2: [ 695.883802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.895885][ T31] ffff88802bf30ec0 [ 695.898824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.910868][ T31] ( [ 695.914705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 695.926621][ T31] &hdev->req_lock [ 695.929089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.941086][ T31] ){+.+.}-{4:4} [ 695.944823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.956616][ T31] , at: hci_cmd_sync_work+0x175/0x470 [ 695.960230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:ae:93:0b:62:f0, vlan:0) [ 695.972478][ T31] 4 locks held by kworker/u10:20/10572: [ 695.977930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.989956][ T31] 5 locks held by kworker/u10:22/10574: [ 695.996676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.007444][ T31] 3 locks held by kworker/u10:23/10575: [ 696.013016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.025155][ T31] 3 locks held by kworker/1:9/10672: [ 696.047822][ T31] #0: ffff88813ff56948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 696.060083][ T31] #1: ffffc90003187c90 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 696.070956][ T31] #2: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x70 [ 696.080581][ T31] 3 locks held by kworker/u10:24/11056: [ 696.086150][ T31] 4 locks held by kworker/u10:25/11057: [ 696.092354][ T31] #0: ffff888029c6b148 ((wq_completion)wg-kex-wg2#15){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 696.103903][ T31] #1: ffffc9000bd8fc90 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 696.117227][ T31] #2: ffff888024e4d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 696.134420][ T31] #3: ffff88805af1c890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 696.146506][ T31] 3 locks held by kworker/u10:26/11058: [ 696.152422][ T31] 3 locks held by kworker/u10:27/11059: [ 696.158080][ T31] 1 lock held by syz-executor/13862: [ 696.163813][ T31] #0: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 696.173307][ T31] 1 lock held by syz-executor/15081: [ 696.178612][ T31] #0: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 696.188217][ T31] 2 locks held by getty/15372: [ 696.193368][ T31] #0: ffff88814d95e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 696.203521][ T31] #1: ffffc90003c792f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 696.214365][ T31] 2 locks held by syz.2.2591/15403: [ 696.219948][ T31] #0: ffffffff9012b750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 696.229952][ T31] #1: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21d/0x7d0 [ 696.239833][ T31] 3 locks held by syz.3.2597/15415: [ 696.245153][ T31] #0: ffffffff901e83d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 696.253907][ T31] #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 696.264495][ T31] #2: ffffffff8e3d4ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 696.274852][ T31] 4 locks held by kworker/1:10/15417: [ 696.280576][ T31] #0: ffff88805a77bd48 ((wq_completion)wg-kex-wg2#16){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 696.292087][ T31] #1: ffffc90004acfc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 696.332299][ T31] #2: ffff888024e4d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 696.348440][ T31] #3: ffff88805af1c890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 696.361759][ T31] 1 lock held by syz-executor/15425: [ 696.367080][ T31] #0: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 696.377047][ T31] 1 lock held by syz-executor/15427: [ 696.387399][ T31] #0: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 696.397254][ T31] 1 lock held by syz-executor/15429: [ 696.402918][ T31] #0: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 696.412801][ T31] 3 locks held by kworker/u11:1/15433: [ 696.418608][ T31] #0: ffff888057854148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 696.429305][ T31] #1: ffffc900044e7c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 696.441646][ T31] #2: ffff888059bd8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 696.451885][ T31] 3 locks held by kworker/u11:2/15434: [ 696.457365][ T31] #0: ffff88801f701948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 696.468194][ T31] #1: ffffc90004617c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 696.480513][ T31] #2: ffff888032898ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 696.490805][ T31] 6 locks held by kworker/u11:7/15437: [ 696.496379][ T31] #0: ffff888034f6d148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 696.507174][ T31] #1: ffffc9000474fc90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 696.519537][ T31] #2: ffff88808596cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 696.529785][ T31] #3: ffff88808596c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 696.540137][ T31] #4: ffffffff903bed48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x360 [ 696.550260][ T31] #5: ffff88807ecf0b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 696.560031][ T31] 3 locks held by kworker/0:12/15446: [ 696.565428][ T31] 4 locks held by kworker/0:13/15447: [ 696.571261][ T31] 3 locks held by kworker/0:15/15449: [ 696.576928][ T31] 2 locks held by kworker/0:17/15451: [ 696.582888][ T31] 1 lock held by syz-executor/15454: [ 696.588470][ T31] #0: ffffffff90141f28 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 696.598295][ T31] 2 locks held by kworker/0:20/15459: [ 696.603692][ T31] 2 locks held by dhcpcd/15461: [ 696.608984][ T31] #0: ffff88807fedc260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 696.619099][ T31] #1: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 696.634711][ T31] 2 locks held by dhcpcd/15462: [ 696.639971][ T31] #0: ffff88801c3b8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 696.650113][ T31] #1: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 696.660647][ T31] 1 lock held by dhcpcd/15463: [ 696.665439][ T31] #0: ffff88801c3bc260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 696.675643][ T31] 1 lock held by dhcpcd/15465: [ 696.680762][ T31] #0: ffff88807dc7c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 696.691804][ T31] 4 locks held by kworker/u10:28/15466: [ 696.697733][ T31] 4 locks held by kworker/u10:29/15467: [ 696.703306][ T31] [ 696.705644][ T31] ============================================= [ 696.705644][ T31] [ 696.714723][ T31] NMI backtrace for cpu 1 [ 696.714747][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 696.714786][ T31] Tainted: [L]=SOFTLOCKUP [ 696.714797][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.714813][ T31] Call Trace: [ 696.714822][ T31] [ 696.714843][ T31] dump_stack_lvl+0x116/0x1f0 [ 696.714880][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 696.714922][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 696.714953][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 696.714998][ T31] sys_info+0x133/0x180 [ 696.715034][ T31] watchdog+0xe66/0x1180 [ 696.715081][ T31] ? rcu_is_watching+0x12/0xc0 [ 696.715119][ T31] ? __pfx_watchdog+0x10/0x10 [ 696.715156][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 696.715191][ T31] ? __kthread_parkme+0x19e/0x250 [ 696.715231][ T31] ? __pfx_watchdog+0x10/0x10 [ 696.715269][ T31] kthread+0x3c5/0x780 [ 696.715296][ T31] ? __pfx_kthread+0x10/0x10 [ 696.715324][ T31] ? rcu_is_watching+0x12/0xc0 [ 696.715360][ T31] ? __pfx_kthread+0x10/0x10 [ 696.715389][ T31] ret_from_fork+0x983/0xb10 [ 696.715418][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 696.715449][ T31] ? __switch_to+0x7af/0x10d0 [ 696.715483][ T31] ? __pfx_kthread+0x10/0x10 [ 696.715512][ T31] ret_from_fork_asm+0x1a/0x30 [ 696.715569][ T31] [ 696.715579][ T31] Sending NMI from CPU 1 to CPUs 0: [ 696.856560][ C0] NMI backtrace for cpu 0 [ 696.856593][ C0] CPU: 0 UID: 0 PID: 7318 Comm: kworker/u10:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.856631][ C0] Tainted: [L]=SOFTLOCKUP [ 696.856640][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.856658][ C0] Workqueue: bat_events batadv_tt_purge [ 696.856699][ C0] RIP: 0010:rcu_is_watching+0xd/0xc0 [ 696.856737][ C0] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 f3 37 0f 12 fe 36 d2 09 48 c7 c3 e8 f9 b2 93 89 c5 83 f8 07 0f 87 82 00 00 [ 696.856762][ C0] RSP: 0018:ffffc90000006ca0 EFLAGS: 00000282 [ 696.856781][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 000000009e246e69 [ 696.856797][ C0] RDX: ffffffff816c666d RSI: ffffffff8daa2024 RDI: ffffffff8bf2a700 [ 696.856815][ C0] RBP: ffffc90000006d70 R08: 00000000501fefef R09: 00000000f501fefe [ 696.856832][ C0] R10: 0000000000000002 R11: ffff88802df18b30 R12: ffffffff81a8d780 [ 696.856850][ C0] R13: ffffc90000006d28 R14: 0000000000000000 R15: ffff88802df18000 [ 696.856868][ C0] FS: 0000000000000000(0000) GS:ffff888124904000(0000) knlGS:0000000000000000 [ 696.856893][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.856910][ C0] CR2: 00005587bbfd3a38 CR3: 000000000e184000 CR4: 00000000003526f0 [ 696.856928][ C0] Call Trace: [ 696.856936][ C0] [ 696.856947][ C0] unwind_next_frame+0xa86/0x20a0 [ 696.856980][ C0] ? kthread+0x3c5/0x780 [ 696.857006][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 696.857047][ C0] arch_stack_walk+0x94/0x100 [ 696.857079][ C0] ? kthread+0x3c5/0x780 [ 696.857105][ C0] stack_trace_save+0x8e/0xc0 [ 696.857142][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 696.857182][ C0] ? lock_acquire+0x179/0x330 [ 696.857206][ C0] kasan_save_stack+0x33/0x60 [ 696.857239][ C0] ? kasan_save_stack+0x33/0x60 [ 696.857270][ C0] ? kasan_save_track+0x14/0x30 [ 696.857301][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 696.857333][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 696.857362][ C0] ? skb_ext_add+0xf8/0x7b0 [ 696.857394][ C0] ? br_nf_forward_ip.part.0+0x28/0x810 [ 696.857424][ C0] ? br_nf_forward+0xf0f/0x1be0 [ 696.857452][ C0] ? nf_hook_slow+0xbe/0x200 [ 696.857477][ C0] ? nf_hook+0x45e/0x780 [ 696.857499][ C0] ? __br_forward+0x1be/0x5b0 [ 696.857522][ C0] ? br_flood+0x39c/0x650 [ 696.857544][ C0] ? br_handle_frame_finish+0x1117/0x1f00 [ 696.857579][ C0] ? br_nf_hook_thresh+0x307/0x410 [ 696.857607][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 696.857638][ C0] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 696.857668][ C0] ? br_nf_pre_routing+0x860/0x15b0 [ 696.857697][ C0] ? br_handle_frame+0xb28/0x14e0 [ 696.857724][ C0] ? __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 696.857764][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 696.857803][ C0] ? __netif_receive_skb+0x1d/0x160 [ 696.857839][ C0] ? process_backlog+0x4a2/0x1650 [ 696.857876][ C0] ? __napi_poll.constprop.0+0xb3/0x540 [ 696.857913][ C0] ? net_rx_action+0x9f9/0xfa0 [ 696.857950][ C0] ? handle_softirqs+0x219/0x950 [ 696.857983][ C0] ? do_softirq+0xb2/0xf0 [ 696.858014][ C0] ? __local_bh_enable_ip+0x100/0x120 [ 696.858048][ C0] ? batadv_tt_local_purge+0x21c/0x3c0 [ 696.858084][ C0] ? batadv_tt_purge+0x8b/0xb80 [ 696.858119][ C0] ? process_one_work+0x9ba/0x1b20 [ 696.858146][ C0] ? worker_thread+0x6c8/0xf10 [ 696.858171][ C0] ? kthread+0x3c5/0x780 [ 696.858208][ C0] kasan_save_track+0x14/0x30 [ 696.858239][ C0] __kasan_slab_alloc+0x89/0x90 [ 696.858274][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 696.858304][ C0] ? skb_ext_add+0xf8/0x7b0 [ 696.858338][ C0] ? skb_ext_add+0xf8/0x7b0 [ 696.858369][ C0] skb_ext_add+0xf8/0x7b0 [ 696.858401][ C0] ? find_held_lock+0x2b/0x80 [ 696.858435][ C0] br_nf_forward_ip.part.0+0x28/0x810 [ 696.858468][ C0] br_nf_forward+0xf0f/0x1be0 [ 696.858498][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 696.858526][ C0] nf_hook_slow+0xbe/0x200 [ 696.858553][ C0] nf_hook+0x45e/0x780 [ 696.858580][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 696.858605][ C0] ? __pfx_nf_hook+0x10/0x10 [ 696.858630][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 696.858660][ C0] __br_forward+0x1be/0x5b0 [ 696.858683][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 696.858710][ C0] br_flood+0x39c/0x650 [ 696.858737][ C0] br_handle_frame_finish+0x1117/0x1f00 [ 696.858770][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 696.858806][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 696.858843][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 696.858878][ C0] ? nf_hook_slow+0x132/0x200 [ 696.858905][ C0] br_nf_hook_thresh+0x307/0x410 [ 696.858933][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 696.858966][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 696.858997][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 696.859028][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 696.859065][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 696.859101][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 696.859138][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 696.859170][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 696.859203][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 696.859235][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 696.859265][ C0] ? lock_acquire+0x179/0x330 [ 696.859290][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 696.859322][ C0] ? net_generic+0xea/0x2a0 [ 696.859352][ C0] br_nf_pre_routing+0x860/0x15b0 [ 696.859384][ C0] br_handle_frame+0xb28/0x14e0 [ 696.859415][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 696.859446][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 696.859479][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 696.859508][ C0] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 696.859553][ C0] ? kmem_cache_free+0x2d8/0x770 [ 696.859587][ C0] ? find_held_lock+0x2b/0x80 [ 696.859617][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 696.859651][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 696.859693][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 696.859724][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 696.859756][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 696.859785][ C0] ? ip6_mc_input+0x515/0xf60 [ 696.859809][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 696.859833][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 696.859858][ C0] ? __lock_acquire+0x436/0x2890 [ 696.859884][ C0] ? process_backlog+0x450/0x1650 [ 696.859921][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 696.859960][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 696.860000][ C0] ? lock_acquire+0x179/0x330 [ 696.860027][ C0] ? process_backlog+0x450/0x1650 [ 696.860064][ C0] __netif_receive_skb+0x1d/0x160 [ 696.860102][ C0] process_backlog+0x4a2/0x1650 [ 696.860143][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 696.860184][ C0] net_rx_action+0x9f9/0xfa0 [ 696.860226][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 696.860265][ C0] ? mark_held_locks+0x49/0x80 [ 696.860288][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 696.860319][ C0] ? tmigr_handle_remote+0x132/0x380 [ 696.860361][ C0] ? run_timer_base+0x121/0x190 [ 696.860385][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 696.860413][ C0] handle_softirqs+0x219/0x950 [ 696.860450][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 696.860485][ C0] ? batadv_tt_local_purge+0x21c/0x3c0 [ 696.860523][ C0] do_softirq+0xb2/0xf0 [ 696.860555][ C0] [ 696.860563][ C0] [ 696.860578][ C0] __local_bh_enable_ip+0x100/0x120 [ 696.860612][ C0] batadv_tt_local_purge+0x21c/0x3c0 [ 696.860652][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 696.860693][ C0] batadv_tt_purge+0x8b/0xb80 [ 696.860729][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 696.860758][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 696.860791][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 696.860832][ C0] ? rcu_is_watching+0x12/0xc0 [ 696.860868][ C0] process_one_work+0x9ba/0x1b20 [ 696.860900][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 696.860934][ C0] ? __pfx_process_one_work+0x10/0x10 [ 696.860966][ C0] ? assign_work+0x1a0/0x250 [ 696.860992][ C0] worker_thread+0x6c8/0xf10 [ 696.861024][ C0] ? __kthread_parkme+0x19e/0x250 [ 696.861060][ C0] ? __pfx_worker_thread+0x10/0x10 [ 696.861088][ C0] kthread+0x3c5/0x780 [ 696.861111][ C0] ? __pfx_kthread+0x10/0x10 [ 696.861136][ C0] ? rcu_is_watching+0x12/0xc0 [ 696.861170][ C0] ? __pfx_kthread+0x10/0x10 [ 696.861194][ C0] ret_from_fork+0x983/0xb10 [ 696.861219][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 696.861245][ C0] ? rcu_is_watching+0x12/0xc0 [ 696.861278][ C0] ? __switch_to+0x7af/0x10d0 [ 696.861310][ C0] ? __pfx_kthread+0x10/0x10 [ 696.861335][ C0] ret_from_fork_asm+0x1a/0x30 [ 696.861379][ C0] [ 697.505349][T15082] Bluetooth: hci3: command 0x0406 tx timeout [ 697.531449][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 697.531478][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 697.531518][ T31] Tainted: [L]=SOFTLOCKUP [ 697.531529][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.531547][ T31] Call Trace: [ 697.531557][ T31] [ 697.531569][ T31] dump_stack_lvl+0x3d/0x1f0 [ 697.531607][ T31] vpanic+0x640/0x6f0 [ 697.531638][ T31] panic+0xca/0xd0 [ 697.531664][ T31] ? __pfx_panic+0x10/0x10 [ 697.531689][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 697.531723][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 697.531775][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 697.531818][ T31] ? watchdog+0xe83/0x1180 [ 697.531856][ T31] ? watchdog+0xe76/0x1180 [ 697.531899][ T31] watchdog+0xe94/0x1180 [ 697.531944][ T31] ? rcu_is_watching+0x12/0xc0 [ 697.531982][ T31] ? __pfx_watchdog+0x10/0x10 [ 697.532018][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 697.532053][ T31] ? __kthread_parkme+0x19e/0x250 [ 697.532093][ T31] ? __pfx_watchdog+0x10/0x10 [ 697.532132][ T31] kthread+0x3c5/0x780 [ 697.532160][ T31] ? __pfx_kthread+0x10/0x10 [ 697.532189][ T31] ? rcu_is_watching+0x12/0xc0 [ 697.532233][ T31] ? __pfx_kthread+0x10/0x10 [ 697.532268][ T31] ret_from_fork+0x983/0xb10 [ 697.532297][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 697.532328][ T31] ? __switch_to+0x7af/0x10d0 [ 697.532362][ T31] ? __pfx_kthread+0x10/0x10 [ 697.532390][ T31] ret_from_fork_asm+0x1a/0x30 [ 697.532445][ T31] [ 697.535300][ T31] Kernel Offset: disabled