last executing test programs: 1m11.81480619s ago: executing program 1 (id=2099): mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines\x00', 0x4400, 0x0) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000280), 0x8200, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/event-fork\x00', 0x121082, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xbc, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000009, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x3, 0x8000000d, 0x9) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r1, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e29b11e2c41b25e95a0d677941ec8136ec921976149c1") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1, 0x1, 0x4, 0x7, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) 1m10.343396409s ago: executing program 1 (id=2106): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x1) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) r2 = fcntl$auto_F_DUPFD(r1, 0x0, r1) listxattrat$auto(r2, &(0x7f00000000c0)='\x00', 0x1000, 0x0, 0x0) getdents$auto(r0, 0x0, 0x62d4) close_range$auto(r0, r0, 0x9) unshare$auto(0x40000080) r3 = socket(0x27, 0x2, 0x8000) bpf$auto(0xff, 0x0, 0x3fc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r3, 0x0, 0x2004, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r4 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x40800, 0x0) bpf$auto(0x5, &(0x7f0000000200)=@batch={0x9, 0xa8b2, 0x40, 0x3, 0x101, r4, 0x6}, 0xd) r5 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x9) writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x9) statmount$auto(0x0, 0x0, 0x8, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x6, 0x4020009, 0x6, 0x15, 0x401, 0x8000) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x8) 1m9.965564252s ago: executing program 1 (id=2111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xc, 0x4, "ef20bbf0b6e731c5"}]}, 0x38}, 0x1, 0xf0ffffffffffff, 0x0, 0x80040}, 0x44000) 1m9.857426841s ago: executing program 1 (id=2113): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x1000000, 0x8000000000000000, 0x0, 0x8, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/scsi_mod/parameters/max_luns\x00', 0x121102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r1, 0x0, 0x2) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m8.76060036s ago: executing program 1 (id=2121): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), 0xffffffffffffffff) shmctl$auto_IPC_STAT(0x3ff, 0x2, &(0x7f0000000480)={{0x3ff, 0xee01, 0xee01, 0x7, 0x1ff, 0x9, 0x7}, 0x4, 0x7, 0x3, 0x6, @raw=0x101, @inferred, 0x7, 0x0, &(0x7f0000000280)="0fef11a8bba133ece4869eaadf64d98e295c1e5f1b53de94a21bc558579f22d4275938a807e3f57df6d5d398e5ea98c5494ac5e4078daca7da2e8160374757e84b938378899fb5bef9cf85e4dadd2b6453b504fea13751165cc7ea3377b64727fdd2bfa32e5a199fd17ad3bb0f588144baaae46ddc53b1b5ce45f6f562da6769e8b0298613cb435ac434a663cc1c59874f5711ea86eb5d7494db2a21691e62d97ea0704fc9b7", &(0x7f0000000440)="1520e0a71c503671ff3c42c7ccbb54410734fc0ed9c3f8ade63a6e1858e0141ba11ec89be672d4fba28182d7a6442bc31a2edf66caabd5b1bc0c2da3a9c34b"}) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="e58c1a3007c99c77747854366f219162", @ANYRES16=r2, @ANYBLOB="08002abd7000fbdbdf252a00000008000d00000000000800210004000000050029000100000008000100040000009403188008002700", @ANYRES32=r3, @ANYBLOB="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", @ANYRES16=0x0, @ANYRES8=r0, @ANYRES32, @ANYBLOB="a265b59835208e4298f1bedd7f64b216e777cb4dec54efac9453d2211ead870640cffe87626fa5dc26ba3482369cc527b4bbdc0955fcf62726feb693fe1a7338d05b22db44d1d00810a9d6775d04eb8b3dfcad7907609c65e568683667309146c1d3829d2cfe78c32c245ea6fc28db9e884b77db82f60dd9d83b5a52e2ac502d08002bc00400028004001d00000008000d0007000000725da51f24918a158db67ff1618fdaeb9e50da8f886e2d787c214457cb6a78004de9422a23d5276bbdae440cfbee2cf41c018ef79c3de920ba3d1ebf99e52a9a3f04c67bfd04b7ad9c024348160360b923fc8ddb1600193820af33a0afe325763d1eabd0423d3032cbd8f01e2ff98dde14cc816d10eb5b54b96ad6c74aa04e7233cc953374a6f253a29146e51e3e7d90eec2018b8c9cf2837cbe56322fb370760b9412c4f6fd70"], 0x3d0}, 0x1, 0x0, 0x0, 0x802}, 0x880) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) r4 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) pread64$auto(r4, 0x0, 0x1, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f00000000c0)="d9ac406ce86663f63431db5ebe9d42ca95dc422d42141e0a689b743507bd28aa98f5cbd49d2f5763c0b75c526f1bbf70efc84fb14f86a0f57fa6ba1f5372fdc2e6f036503f0e485d13a4268c04544177ff49dcba2cf50cfeb2249abfeea3229efb2b14193fefd0", 0x80000000) mmap$auto(0x0, 0xe982, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) socket(0xa, 0x2, 0x3a) socket(0x10, 0x2, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a080, 0x0) socket(0xa, 0x1, 0x84) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000080), 0x72fc00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) 1m6.041489094s ago: executing program 3 (id=2138): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x8048ae66, 0x10000000000402) prctl$auto(0x10, 0x6, 0x7, 0xffffffffffffff78, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ioctl$auto_EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000094) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) read$auto(r3, 0x0, 0x9) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) 1m5.76207924s ago: executing program 3 (id=2140): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x2) landlock_create_ruleset$auto(&(0x7f00000000c0)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf2502000000d6000a80695d72aca9e8b7a10ced20c41778335d218c80abefd5eca1ccb48d0d314e1e6f05eaba7616152196950aff1f1fc99e365f872d3c676cf5cee4ad70cc63551b3bdef8d8771dd8742ded998449b7d0da5f3e9536a4966ee075fc330fed492cc1b2d0eb80fc6148a3ebccbaf3c9e23a15fca55208003500", @ANYRES32=r1, @ANYBLOB="e30f4ee4fb952ff7f7abdc7a0666e1586b0fcf2d6e3e7a74100f43b4054097c803baa990b0f9497b296259990892f62256e0d1f4129d17373c8fc8ab219df8c8cf9987478d6ef08a34b84efca16482ec4f6257fcffffff360000"], 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x8001) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0xa, 0x801, 0x84) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = prctl$auto_PR_SCHED_CORE_CREATE(0x5892, 0x1, r2, 0x2, 0x1) mmap$auto(0x0, 0x8, 0x8, 0x8b72, r4, 0x8001) 1m5.62409305s ago: executing program 0 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r2, 0x1, 0x12, &(0x7f0000000200)='\x00', 0x269) ioctl$auto(r1, 0x6f2d, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) setsockopt$auto(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x6) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x5, 0x2) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) mprotect$auto(0x74, 0x9, 0x5) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0xa67}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x9}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x3ff}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8, 0x2, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r5, 0x0, 0x9) write$auto(0x3, 0x0, 0x100082) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf25010000000500060002000000050005000800000008000300ff0300000c000400ef20bbf0b6e731c5"], 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) 1m5.086528453s ago: executing program 2 (id=2142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xc, 0x4, "ef20bbf0b6e731c5"}]}, 0x38}, 0x1, 0xfffffffffffff000, 0x0, 0x80040}, 0x44000) 1m4.849540937s ago: executing program 2 (id=2143): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/dfscache\x00', 0xc2402, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) memfd_create$auto(0x0, 0x4) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x5, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) timerfd_create$auto(0x9, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0x3, 0xb3, 0x5) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0xebffffff) 1m4.747234927s ago: executing program 3 (id=2144): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) rt_sigsuspend$auto(&(0x7f0000000100)={0xffffffffffffffff}, 0x8) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 1m4.200783341s ago: executing program 0 (id=2145): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x1000000, 0x8000000000000000, 0x0, 0x8, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/scsi_mod/parameters/max_luns\x00', 0x121102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r1, 0x0, 0x2) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m3.732343844s ago: executing program 2 (id=2146): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0) r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) read$auto(r1, &(0x7f0000000100)='\t\x00\x00\x00', 0x8) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = socketpair$auto(0x6, 0x8000, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f0000000500)="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") socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) io_uring_setup$auto(0x6, 0x0) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) ioctl$auto(r6, 0x64cc, 0x1e2) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x21, 0x2, 0x2) sendfile$auto(r7, r0, 0x0, 0x7ffff000) 1m3.7104771s ago: executing program 3 (id=2147): openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyed/uevent\x00', 0x343080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/147, 0x93) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) bind$auto(0x3, 0x0, 0xb) socket(0x1d, 0x1, 0x7) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x100000003, 0xeb1, 0xffffffffffffffff, 0x8002) unshare$auto(0x20000) unshare$auto(0x20000) mmap$auto(0x0, 0x202000d, 0x3, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) r3 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x2, 0x0) read$auto_fops_atomic_t_(r3, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r1) r4 = prctl$auto_PR_SET_MM_ARG_START(0x9, 0x8, 0x0, 0x3, 0x527) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000240)=@raw_tracepoint={0x5, r4, 0x0, 0x401}, 0x401) mmap$auto(0x0, 0x8, 0x2, 0x18, 0xfffffffffffffffa, 0x8fffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x7ffd) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x66e2, 0xb, 0xfffffffffffffff7, r5, 0x8000000000000) mincore$auto(0x1000, 0x8001, 0x0) timer_gettime$auto(0x1000, &(0x7f0000000080)={{0x0, 0xd0}, {0x1, 0x400000000000001}}) 1m3.547895574s ago: executing program 2 (id=2148): close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xa9242, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x900064b4, 0x2000000000000c37) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto(0x3, 0xae41, r0) 1m3.260527566s ago: executing program 3 (id=2149): mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000240), r1) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x35635add}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r1) sendmsg$auto_NL80211_CMD_GET_MPP(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0xdc, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SUPPORTED_SELECTORS={0x7c, 0x14e, "8378cd292afa19f5c520c23d36d0ee17528e256eaaeb19bb3daca92882bb5ef210c8b51d0dbd79ccc608a85364582b39314c818f931846f12add1596663f98363b11c614d6e091c2705e6542da11398c92bec3dca9714be16eb1e15a100811be93cbfed45450d572ae07cd5f447c277266b67d31a48c17e7"}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, 'nl80211\x00'}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}, @NL80211_ATTR_CSA_IES={0x28, 0xb9, 0x0, 0x1, [@nested={0x1c, 0xc9, 0x0, 0x1, [@typed={0x6, 0x155, 0x0, 0x0, @str='\'\x00'}, @nested={0x4, 0x3a}, @typed={0xc, 0x82, 0x0, 0x0, @u64=0x7f}]}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x21, 0x0}}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe45}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x83, 0x9) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/index\x00', 0x600, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/235, 0xeb) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fedbdf251b000000086c0000000500290006000000100043003a2f7a8bd53fd82eca524e4d00"/54], 0x3c}}, 0x4005) r7 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines\x00', 0x143000, 0x0) preadv$auto(r7, &(0x7f0000000140)={0x0, 0x3}, 0x5, 0x1ff, 0x81) 1m3.205454659s ago: executing program 2 (id=2150): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64) mmap$auto(0x400, 0x1000, 0xdf, 0x80000011, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3a) close$auto(r1) (async) io_uring_setup$auto(0xffffffff, 0x0) (async) io_uring_register$auto(r1, 0x8, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (rerun: 64) r2 = open(0x0, 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/veth1_to_bridge/regen_min_advance\x00', 0x8000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt/parameters/default_red\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) (async, rerun: 64) socket(0x2c, 0x3, 0x0) (async, rerun: 64) socket(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x10) (async, rerun: 64) socket(0x10, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x1e, 0x4, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x10f, 0x82, 0x0, 0x14) (async) socket(0x2, 0x801, 0x106) 1m3.170819636s ago: executing program 1 (id=2151): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000180)="1100d88715ce28b2b67772f2c8d2c6e10280e770d9d447956cb41fd4bea22413cbfcf95f13c96f1c38e5fc6b8e04000000bdc4bce9ea0700000000000000534abd54cc715280f402359ee1aa1f6639d6346ad4b46be9e103f5103f0000000000000000", 0xffffff40) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, r3, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r4 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r4, 0x11) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x9a8, 0x0) r7 = socket(0x2, 0x3, 0xa) setsockopt$auto(r7, 0x0, 0x19, 0x0, 0x9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) 1m3.128176248s ago: executing program 0 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xc, 0x4, "ef20bbf0b6e731c5"}]}, 0x38}, 0x1, 0x0, 0xf0, 0x80040}, 0x44000) 1m2.943562988s ago: executing program 0 (id=2153): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x2) landlock_create_ruleset$auto(&(0x7f00000000c0)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf2502000000d6000a80695d72aca9e8b7a10ced20c41778335d218c80abefd5eca1ccb48d0d314e1e6f05eaba7616152196950aff1f1fc99e365f872d3c676cf5cee4ad70cc63551b3bdef8d8771dd8742ded998449b7d0da5f3e9536a4966ee075fc330fed492cc1b2d0eb80fc6148a3ebccbaf3c9e23a15fca55208003500", @ANYRES32=r1, @ANYBLOB="e30f4ee4fb952ff7f7abdc7a0666e1586b0fcf2d6e3e7a74100f43b4054097c803baa990b0f9497b296259990892f62256e0d1f4129d17373c8fc8ab219df8c8cf9987478d6ef08a34b84efca16482ec4f6257fcffffff360000"], 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x8001) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0xa, 0x801, 0x84) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = prctl$auto_PR_SCHED_CORE_CREATE(0x5892, 0x1, r2, 0x2, 0x1) mmap$auto(0x0, 0x8, 0x8, 0x8b72, r4, 0x8001) 1m2.111041247s ago: executing program 3 (id=2154): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x6600, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x84) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x1a000, 0x80000948b, 0x0, 0x8, 0x400000006, 0x100000000003, 0xc, 0x9, 0x3, 0x6, 0x400005, 0x5]}, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000c80)="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", 0x300) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040141}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) bind$auto(0x3, 0x0, 0xb) socket(0x1d, 0x2, 0x7) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) 1m1.411812281s ago: executing program 0 (id=2155): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000001340)=@sco, 0x5b) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/022/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x8, 0x5, 0x7ff, 0x7fb, &(0x7f0000000100)}) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/4096, 0x1000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) ioctl$auto_FS_IOC_GET_ENCRYPTION_KEY_STATUS2(r2, 0xc080661a, &(0x7f0000001180)={{0xff, 0x0, @descriptor="b233a03b668588b2"}, '\x00', 0x31f, 0x3, 0xd}) rseq$auto(0x0, 0xf1, 0x0, 0xa) clock_nanosleep$auto(0x1, 0x200, &(0x7f0000000140)={0x0, 0x2800000a}, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000001200)={0x9, 0xfff, 0x3ff, 0x6, "d0b5e9742783bed89b6be52b58b0063615e565f7cad9c6697b568081594847026c814f659db07c04e8577a4f403ae6cab4e6f041d1f2ed3d9e1819156154c517", "93b1aedaeb445ff30f58aaad5478af4c6d9ad70a17ecfd21718b009d7adb70d1e951f08c80f08cec162d15ee328b172a02e064ed033af95c0683c38e04ec0b0ef7df8784aa475e46afe24ea064e8cd7d", "05520fce609f945404e368d0a8a5a69c913a8d984960cd95866bf6a9a26b88b1", 0x5, 0x8000, 0x7, 0x8, '\x00', "a034bcc3c3a10b3e5c43308211ff20245bfd61dd50b36c76475bff2a84759105fea989c4d001c8d3cfb61e63ab866d361b908f304c2df5c4ccfa72cdff4e877f"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, 0x200) close_range$auto(0x0, 0xfffffffffffff001, 0x2) kcmp$auto_KCMP_SIGHAND(0x0, 0x0, 0x4, 0xa, 0x7) r4 = socket(0x1e, 0x1, 0x0) socketpair$auto(0x8, 0x2, 0x3, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r5, 0xc0045627, r4) fcntl$auto_F_GETPIPE_SZ(r0, 0x408, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_USB_RAW_IOCTL_EP0_READ(0xffffffffffffffff, 0xc0085504, &(0x7f0000001100)={0x0, 0x1, 0x0, "1dd856a19ef964bc601a2f7134246fa5c038b621d8d73387f8159f52d0f8f88b6125271c9995b5637e095302bfca39993337a32745379d723e1d830e5a7eddbd01d57bc1aa0c2789572357355d2dd18fd3177e748589cf5f8111c282a5532931a72cb855e0417deceaaf6f0d"}) 1m1.167427915s ago: executing program 2 (id=2156): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) rt_sigsuspend$auto(&(0x7f0000000100)={0xffffffffffffffff}, 0x8) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 50.930675845s ago: executing program 0 (id=2157): openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000000), 0x4101, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c000e"], 0x28}}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000000), 0x4101, 0x0) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c000e"], 0x28}}, 0x4) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) 20.801837335s ago: executing program 32 (id=2151): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000180)="1100d88715ce28b2b67772f2c8d2c6e10280e770d9d447956cb41fd4bea22413cbfcf95f13c96f1c38e5fc6b8e04000000bdc4bce9ea0700000000000000534abd54cc715280f402359ee1aa1f6639d6346ad4b46be9e103f5103f0000000000000000", 0xffffff40) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, r3, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r4 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r4, 0x11) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x9a8, 0x0) r7 = socket(0x2, 0x3, 0xa) setsockopt$auto(r7, 0x0, 0x19, 0x0, 0x9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) 20.372167933s ago: executing program 33 (id=2156): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) rt_sigsuspend$auto(&(0x7f0000000100)={0xffffffffffffffff}, 0x8) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 13.982583014s ago: executing program 34 (id=2154): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x6600, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x84) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x1a000, 0x80000948b, 0x0, 0x8, 0x400000006, 0x100000000003, 0xc, 0x9, 0x3, 0x6, 0x400005, 0x5]}, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000c80)="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", 0x300) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040141}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) bind$auto(0x3, 0x0, 0xb) socket(0x1d, 0x2, 0x7) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) 12.829569876s ago: executing program 35 (id=2157): openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000000), 0x4101, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c000e"], 0x28}}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000000), 0x4101, 0x0) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c000e"], 0x28}}, 0x4) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) 0s ago: executing program 5 (id=2159): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x1c5082, 0x18) open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x30001, "b190a905237d4b53"}, 0x42) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@sco, 0x6b) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) socket(0x1d, 0xa, 0xff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x100000000, 0x6, 0x9b7a, r1, 0x80000028000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000040)=0xda81, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0xffffffffffffff95}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): resumed [ 367.108604][T12017] random: crng reseeded on system resumption [ 368.466151][T12071] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1327'. [ 368.553134][T12073] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1327'. [ 368.626439][T12066] bridge0: port 3(veth0_to_bridge) entered blocking state [ 368.747007][T12066] bridge0: port 3(veth0_to_bridge) entered disabled state [ 368.829198][T12066] veth0_to_bridge: entered allmulticast mode [ 368.881255][T12066] veth0_to_bridge: entered promiscuous mode [ 368.889342][T12066] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.909236][T12066] bridge0: port 3(veth0_to_bridge) entered blocking state [ 368.916619][T12066] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 369.242275][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 369.572428][T12085] zswap: compressor û not available [ 369.591572][T12091] Setting dangerous option i915.mitigations - tainting kernel [ 369.627018][T12089] Setting dangerous option i915.mitigations - tainting kernel [ 369.829880][T12095] zswap: compressor û not available [ 369.835238][T12098] Setting dangerous option i915.mitigations - tainting kernel [ 369.872015][T12094] Setting dangerous option i915.mitigations - tainting kernel [ 370.404660][T12101] zswap: compressor 000 not available [ 371.810976][ T7426] Bluetooth: hci2: unexpected event 0x18 length: 440 > 23 [ 371.852815][ T30] audit: type=1800 audit(4295033020.919:31): pid=12144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1341" name="version" dev="configfs" ino=40784 res=0 errno=0 [ 372.174278][T12163] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1347'. [ 372.328454][ T7426] block nbd0: Receive control failed (result -32) [ 372.671825][T12182] futex_wake_op: syz.2.1352 tries to shift op by -2048; fix this program [ 372.731728][T12182] futex_wake_op: syz.2.1352 tries to shift op by -2048; fix this program [ 373.960217][T12195] random: crng reseeded on system resumption [ 378.538631][T12285] bond0: Unable to set down delay as MII monitoring is disabled [ 378.857198][T12299] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 378.911056][T12299] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 378.945855][T12299] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 378.981151][T12299] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 379.149148][T12303] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 379.229135][T12303] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 379.280496][T12303] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 379.329215][T12303] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 379.363340][T12312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1377'. [ 379.446066][T12318] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 379.482507][T12318] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 379.500389][T12309] vhci_hcd vhci_hcd.0: invalid port number 16 [ 379.517386][T12318] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 379.635635][T12318] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 380.307883][T12331] zswap: compressor û not available [ 380.313293][T12333] Setting dangerous option i915.mitigations - tainting kernel [ 380.326988][T12334] Setting dangerous option i915.mitigations - tainting kernel [ 383.818136][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.824589][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.005470][ T30] audit: type=1800 audit(4295033035.049:32): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1399" name="lu_gp_id" dev="configfs" ino=42677 res=0 errno=0 [ 386.303621][T12471] random: crng reseeded on system resumption [ 392.722394][T12612] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 392.728975][T12612] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 392.969458][T12612] zswap: compressor û not available [ 392.997229][T12614] Setting dangerous option i915.mitigations - tainting kernel [ 396.223185][ T7426] Bluetooth: hci0: unexpected event 0x16 length: 435 > 6 [ 397.184022][T12680] zswap: compressor not available [ 398.468457][T12721] FAULT_INJECTION: forcing a failure. [ 398.468457][T12721] name fail_futex, interval 1, probability 0, space 0, times 0 [ 398.496490][T12721] CPU: 1 UID: 0 PID: 12721 Comm: syz.1.1458 Tainted: G U L syzkaller #0 PREEMPT(full) [ 398.496544][T12721] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 398.496556][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 398.496575][T12721] Call Trace: [ 398.496584][T12721] [ 398.496596][T12721] dump_stack_lvl+0x100/0x190 [ 398.496637][T12721] should_fail_ex.cold+0x5/0xa [ 398.496683][T12721] get_futex_key+0x1d2/0x1620 [ 398.496724][T12721] ? __pfx_get_futex_key+0x10/0x10 [ 398.496773][T12721] futex_wait_setup+0x81/0x500 [ 398.496806][T12721] __futex_wait+0x19f/0x300 [ 398.496833][T12721] ? __pfx___futex_wait+0x10/0x10 [ 398.496855][T12721] ? ex_handler_uaccess.isra.0+0xfa/0x200 [ 398.496897][T12721] ? __pfx_futex_wake_mark+0x10/0x10 [ 398.496945][T12721] ? futex_hash+0x2c5/0x380 [ 398.496988][T12721] futex_wait+0xed/0x380 [ 398.497013][T12721] ? __pfx_futex_wait+0x10/0x10 [ 398.497058][T12721] do_futex+0x1ef/0x350 [ 398.497097][T12721] ? __pfx_do_futex+0x10/0x10 [ 398.497134][T12721] ? do_fcntl+0x811/0x1670 [ 398.497179][T12721] __x64_sys_futex+0x34f/0x4d0 [ 398.497231][T12721] ? __pfx___x64_sys_futex+0x10/0x10 [ 398.497269][T12721] ? xfd_validate_state+0x129/0x190 [ 398.497313][T12721] ? tomoyo_file_fcntl+0x6c/0xc0 [ 398.497358][T12721] do_syscall_64+0xc9/0xf80 [ 398.497396][T12721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.497426][T12721] RIP: 0033:0x7fb4b6f9acb9 [ 398.497451][T12721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.497478][T12721] RSP: 002b:00007fb4b7f140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 398.497506][T12721] RAX: ffffffffffffffda RBX: 00007fb4b7215fa8 RCX: 00007fb4b6f9acb9 [ 398.497525][T12721] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb4b7215fa8 [ 398.497558][T12721] RBP: 00007fb4b7215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 398.497575][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.497593][T12721] R13: 00007fb4b7216038 R14: 00007ffc079e5570 R15: 00007ffc079e5658 [ 398.497631][T12721] [ 398.921900][T12721] zswap: compressor û not available [ 400.007280][ T7426] Bluetooth: hci2: unexpected event 0x18 length: 440 > 23 [ 403.013155][T12784] zswap: compressor û not available [ 403.210740][T12815] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1475'. [ 403.225652][T12784] Setting dangerous option i915.mitigations - tainting kernel [ 406.248869][T12881] zswap: compressor not available [ 409.050951][ T7426] Bluetooth: hci0: unexpected event 0x18 length: 440 > 23 [ 410.817149][ T7426] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 410.855815][T12948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1503'. [ 411.431690][T12969] can: request_module (can-proto-5) failed. [ 411.498169][T12983] FAULT_INJECTION: forcing a failure. [ 411.498169][T12983] name failslab, interval 1, probability 0, space 0, times 0 [ 411.525653][T12983] CPU: 0 UID: 0 PID: 12983 Comm: syz.2.1511 Tainted: G U L syzkaller #0 PREEMPT(full) [ 411.525702][T12983] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 411.525712][T12983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 411.525726][T12983] Call Trace: [ 411.525736][T12983] [ 411.525746][T12983] dump_stack_lvl+0x100/0x190 [ 411.525789][T12983] should_fail_ex.cold+0x5/0xa [ 411.525839][T12983] should_failslab+0xc2/0x120 [ 411.525880][T12983] __kmalloc_cache_noprof+0x80/0x810 [ 411.525919][T12983] ? rcu_is_watching+0x12/0xc0 [ 411.525948][T12983] ? single_open+0x4d/0x1d0 [ 411.525998][T12983] ? __pfx_filesystems_proc_show+0x10/0x10 [ 411.526037][T12983] ? single_open+0x4d/0x1d0 [ 411.526078][T12983] single_open+0x4d/0x1d0 [ 411.526119][T12983] ? __pfx_proc_single_open+0x10/0x10 [ 411.526164][T12983] proc_reg_open+0x2ab/0x5f0 [ 411.526208][T12983] do_dentry_open+0x73e/0x1570 [ 411.526242][T12983] ? __pfx_proc_reg_open+0x10/0x10 [ 411.526285][T12983] ? security_inode_permission+0xbf/0x250 [ 411.526335][T12983] vfs_open+0x82/0x3f0 [ 411.526381][T12983] path_openat+0x21dc/0x3120 [ 411.526427][T12983] ? __pfx_path_openat+0x10/0x10 [ 411.526475][T12983] do_filp_open+0x1f7/0x420 [ 411.526512][T12983] ? __pfx_do_filp_open+0x10/0x10 [ 411.526572][T12983] ? _raw_spin_unlock+0x28/0x50 [ 411.526600][T12983] ? alloc_fd+0x476/0x790 [ 411.526642][T12983] do_sys_openat2+0x12e/0x220 [ 411.526685][T12983] ? __pfx_do_sys_openat2+0x10/0x10 [ 411.526728][T12983] ? __fget_files+0x21f/0x3d0 [ 411.526765][T12983] __x64_sys_openat+0x12d/0x210 [ 411.526806][T12983] ? __pfx___x64_sys_openat+0x10/0x10 [ 411.526844][T12983] ? xfd_validate_state+0x129/0x190 [ 411.526899][T12983] do_syscall_64+0xc9/0xf80 [ 411.526945][T12983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.526975][T12983] RIP: 0033:0x7f77f759acb9 [ 411.527000][T12983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.527029][T12983] RSP: 002b:00007f77f836e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 411.527058][T12983] RAX: ffffffffffffffda RBX: 00007f77f7815fa0 RCX: 00007f77f759acb9 [ 411.527078][T12983] RDX: 00000000001a1442 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 411.527098][T12983] RBP: 00007f77f7608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 411.527116][T12983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.527134][T12983] R13: 00007f77f7816038 R14: 00007f77f7815fa0 R15: 00007ffcfffe8238 [ 411.527174][T12983] [ 411.798762][T12985] loop6: detected capacity change from 0 to 8192 [ 415.120064][T13066] FAULT_INJECTION: forcing a failure. [ 415.120064][T13066] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 415.185732][T13062] zswap: compressor not available [ 415.219096][T13066] CPU: 1 UID: 0 PID: 13066 Comm: syz.2.1528 Tainted: G U L syzkaller #0 PREEMPT(full) [ 415.219126][T13066] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 415.219132][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 415.219141][T13066] Call Trace: [ 415.219147][T13066] [ 415.219153][T13066] dump_stack_lvl+0x100/0x190 [ 415.219176][T13066] should_fail_ex.cold+0x5/0xa [ 415.219197][T13066] ? prepare_alloc_pages+0x16d/0x5f0 [ 415.219221][T13066] should_fail_alloc_page+0xeb/0x140 [ 415.219243][T13066] prepare_alloc_pages+0x1f0/0x5f0 [ 415.219267][T13066] __alloc_frozen_pages_noprof+0x193/0x2410 [ 415.219287][T13066] ? stack_trace_save+0x8e/0xc0 [ 415.219303][T13066] ? __pfx_stack_trace_save+0x10/0x10 [ 415.219318][T13066] ? do_raw_spin_lock+0x128/0x260 [ 415.219350][T13066] ? stack_depot_save_flags+0x27/0x9c0 [ 415.219374][T13066] ? find_held_lock+0x2b/0x80 [ 415.219388][T13066] ? debug_check_no_obj_freed+0x31f/0x630 [ 415.219409][T13066] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 415.219426][T13066] ? kasan_save_track+0x14/0x30 [ 415.219444][T13066] ? __kmalloc_noprof+0x347/0x9c0 [ 415.219459][T13066] ? do_splice_read+0x285/0x370 [ 415.219477][T13066] ? splice_direct_to_actor+0x2a1/0xa30 [ 415.219492][T13066] ? do_splice_direct+0x174/0x240 [ 415.219508][T13066] ? do_sendfile+0xadc/0xe20 [ 415.219524][T13066] ? __x64_sys_sendfile64+0x1d8/0x220 [ 415.219542][T13066] ? do_syscall_64+0xc9/0xf80 [ 415.219558][T13066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.219589][T13066] alloc_pages_bulk_noprof+0x777/0x1500 [ 415.219614][T13066] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 415.219631][T13066] ? copy_splice_read+0x1a3/0xb90 [ 415.219647][T13066] ? copy_splice_read+0x1a3/0xb90 [ 415.219669][T13066] copy_splice_read+0x1e1/0xb90 [ 415.219688][T13066] ? __pfx_copy_splice_read+0x10/0x10 [ 415.219708][T13066] ? __pfx_splice_from_pipe+0x10/0x10 [ 415.219728][T13066] ? aa_file_perm+0x268/0x1540 [ 415.219742][T13066] ? aa_file_perm+0x268/0x1540 [ 415.219758][T13066] ? __pfx_copy_splice_read+0x10/0x10 [ 415.219773][T13066] do_splice_read+0x285/0x370 [ 415.219791][T13066] splice_direct_to_actor+0x2a1/0xa30 [ 415.219808][T13066] ? __pfx_direct_splice_actor+0x10/0x10 [ 415.219828][T13066] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 415.219850][T13066] do_splice_direct+0x174/0x240 [ 415.219866][T13066] ? __pfx_do_splice_direct+0x10/0x10 [ 415.219881][T13066] ? common_file_perm+0x1ab/0x4f0 [ 415.219902][T13066] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 415.219919][T13066] ? bpf_lsm_file_permission+0x9/0x10 [ 415.219939][T13066] ? security_file_permission+0x76/0x210 [ 415.219962][T13066] ? rw_verify_area+0xce/0x6d0 [ 415.219977][T13066] do_sendfile+0xadc/0xe20 [ 415.219996][T13066] ? __pfx_do_sendfile+0x10/0x10 [ 415.220018][T13066] ? __x64_sys_futex+0x34f/0x4d0 [ 415.220037][T13066] ? __x64_sys_futex+0x358/0x4d0 [ 415.220059][T13066] __x64_sys_sendfile64+0x1d8/0x220 [ 415.220081][T13066] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 415.220106][T13066] do_syscall_64+0xc9/0xf80 [ 415.220126][T13066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.220141][T13066] RIP: 0033:0x7f77f759acb9 [ 415.220154][T13066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.220168][T13066] RSP: 002b:00007f77f57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 415.220184][T13066] RAX: ffffffffffffffda RBX: 00007f77f7816090 RCX: 00007f77f759acb9 [ 415.220195][T13066] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 415.220204][T13066] RBP: 00007f77f7608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 415.220213][T13066] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 415.220223][T13066] R13: 00007f77f7816128 R14: 00007f77f7816090 R15: 00007ffcfffe8238 [ 415.220243][T13066] [ 415.842904][T13075] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 416.197239][T13091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1536'. [ 416.272181][T13093] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 416.366175][T13091] team0: Port device team_slave_1 removed [ 417.072005][T13109] input: 00 [ 417.072005][T13109] as /devices/virtual/input/input19 [ 418.287236][T13131] block nbd0: shutting down sockets [ 420.365842][T13179] hub 1-0:1.0: USB hub found [ 420.383018][T13179] hub 1-0:1.0: 1 port detected [ 420.942225][T13192] Invalid ELF header magic: != ELF [ 420.942854][T13194] zswap: compressor û not available [ 420.999575][T13191] Invalid ELF header magic: != ELF [ 421.338580][T13196] zswap: compressor cover enable write trace failed, mode=0 not available [ 421.576515][T13196] zswap: compressor (errno 9) not available [ 421.593700][T13186] zswap: compressor cover mmap failed not available [ 421.968649][T13225] input: jJǸ-¶š9ã%vŽžû¨lÐQ  J86Ö‘ as /devices/virtual/input/input20 [ 423.581061][T13266] zswap: compressor off not available [ 425.157827][T13304] FAULT_INJECTION: forcing a failure. [ 425.157827][T13304] name failslab, interval 1, probability 0, space 0, times 0 [ 425.176920][T13304] CPU: 1 UID: 0 PID: 13304 Comm: syz.1.1581 Tainted: G U L syzkaller #0 PREEMPT(full) [ 425.176970][T13304] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 425.176982][T13304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 425.176998][T13304] Call Trace: [ 425.177006][T13304] [ 425.177015][T13304] dump_stack_lvl+0x100/0x190 [ 425.177052][T13304] should_fail_ex.cold+0x5/0xa [ 425.177094][T13304] should_failslab+0xc2/0x120 [ 425.177131][T13304] kmem_cache_alloc_noprof+0x83/0x780 [ 425.177175][T13304] ? __pmd_alloc+0xbf/0x9c0 [ 425.177223][T13304] ? __pmd_alloc+0xbf/0x9c0 [ 425.177262][T13304] __pmd_alloc+0xbf/0x9c0 [ 425.177310][T13304] ? __pfx_down_read_trylock+0x10/0x10 [ 425.177356][T13304] walk_to_pmd+0x3a3/0x4c0 [ 425.177411][T13304] vm_insert_pages+0x1e0/0xa00 [ 425.177449][T13304] ? __pfx_vm_insert_pages+0x10/0x10 [ 425.177492][T13304] io_uring_mmap+0x4e6/0x559 [ 425.177537][T13304] ? __pfx_io_uring_mmap+0x10/0x10 [ 425.177580][T13304] ? lockdep_init_map_type+0x5c/0x250 [ 425.177623][T13304] __mmap_region+0x13a0/0x2820 [ 425.177661][T13304] ? __pfx___mmap_region+0x10/0x10 [ 425.177727][T13304] ? __lock_acquire+0x4a5/0x2630 [ 425.177779][T13304] ? lock_acquire+0x17c/0x330 [ 425.177865][T13304] ? rcu_is_watching+0x12/0xc0 [ 425.177911][T13304] mmap_region+0x180/0x3e0 [ 425.177952][T13304] do_mmap+0xc63/0x12f0 [ 425.178001][T13304] ? __pfx_do_mmap+0x10/0x10 [ 425.178042][T13304] ? __pfx_down_write_killable+0x10/0x10 [ 425.178089][T13304] vm_mmap_pgoff+0x29e/0x470 [ 425.178137][T13304] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 425.178176][T13304] ? __fget_files+0x215/0x3d0 [ 425.178213][T13304] ? __fget_files+0x21f/0x3d0 [ 425.178250][T13304] ksys_mmap_pgoff+0x328/0x5b0 [ 425.178297][T13304] __x64_sys_mmap+0x125/0x190 [ 425.178329][T13304] do_syscall_64+0xc9/0xf80 [ 425.178365][T13304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.178401][T13304] RIP: 0033:0x7fb4b6f9acb9 [ 425.178424][T13304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.178449][T13304] RSP: 002b:00007fb4b7f14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 425.178472][T13304] RAX: ffffffffffffffda RBX: 00007fb4b7215fa0 RCX: 00007fb4b6f9acb9 [ 425.178483][T13304] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000 [ 425.178492][T13304] RBP: 00007fb4b7008bf7 R08: 0000000000000003 R09: 0000000000008000 [ 425.178502][T13304] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 425.178512][T13304] R13: 00007fb4b7216038 R14: 00007fb4b7215fa0 R15: 00007ffc079e5658 [ 425.178533][T13304] [ 426.058630][T13308] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1582'. [ 426.442421][T13331] Setting dangerous option i915.mitigations - tainting kernel [ 426.596033][T13324] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 427.783597][T13348] random: crng reseeded on system resumption [ 427.804821][T13348] Restarting kernel threads ... [ 427.844644][T13348] Done restarting kernel threads. [ 428.273500][T13358] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1595'. [ 428.291579][T13358] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l9ý¤ôy–ú„ [ 428.390635][T13360] zswap: compressor not available [ 429.336155][T13380] sp0: Synchronizing with TNC [ 429.358035][T13383] sp0: Found TNC [ 430.084158][T13396] netlink: 'syz.2.1602': attribute type 11 has an invalid length. [ 430.445554][ T7426] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 430.445596][ T7426] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 430.460882][ T7426] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 430.460953][ T7426] Bluetooth: hci3: adv larger than maximum supported [ 430.468469][ T7426] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 430.476407][ T7426] Bluetooth: hci3: adv larger than maximum supported [ 430.483557][ T7426] Bluetooth: hci3: adv larger than maximum supported [ 430.490700][ T7426] Bluetooth: hci3: Malformed LE Event: 0x0d [ 431.268725][T13412] zswap: compressor not available [ 431.556683][T13421] zswap: compressor û not available [ 431.566631][T13425] Setting dangerous option i915.mitigations - tainting kernel [ 431.598775][T13404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 431.607745][T13404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.629043][T13423] Setting dangerous option i915.mitigations - tainting kernel [ 431.642062][T13404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.667170][T13404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 431.685738][T13404] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 432.936961][ T7426] Bluetooth: hci0: command 0x0c1a tx timeout [ 433.187743][T13446] random: crng reseeded on system resumption [ 433.434808][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 433.649327][ T7426] Bluetooth: hci3: command 0x0c1a tx timeout [ 433.669646][ T9422] Bluetooth: hci2: command 0x0c1a tx timeout [ 433.727303][ T7426] Bluetooth: hci1: command 0x0c1a tx timeout [ 434.426859][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1617'. [ 435.816840][ T7426] Bluetooth: hci1: command 0x0c1a tx timeout [ 436.153851][T13509] random: crng reseeded on system resumption [ 437.375024][T13536] FAULT_INJECTION: forcing a failure. [ 437.375024][T13536] name failslab, interval 1, probability 0, space 0, times 0 [ 437.430179][T13536] CPU: 0 UID: 0 PID: 13536 Comm: syz.1.1633 Tainted: G U L syzkaller #0 PREEMPT(full) [ 437.430215][T13536] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 437.430221][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 437.430230][T13536] Call Trace: [ 437.430237][T13536] [ 437.430243][T13536] dump_stack_lvl+0x100/0x190 [ 437.430268][T13536] should_fail_ex.cold+0x5/0xa [ 437.430294][T13536] should_failslab+0xc2/0x120 [ 437.430314][T13536] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 437.430334][T13536] ? __fget_files+0x215/0x3d0 [ 437.430350][T13536] ? sock_alloc_inode+0x25/0x1c0 [ 437.430368][T13536] ? __pfx_sock_alloc_inode+0x10/0x10 [ 437.430382][T13536] ? sock_alloc_inode+0x25/0x1c0 [ 437.430395][T13536] sock_alloc_inode+0x25/0x1c0 [ 437.430409][T13536] alloc_inode+0x68/0x250 [ 437.430431][T13536] sock_alloc+0x44/0x280 [ 437.430443][T13536] ? security_socket_create+0x7f/0x250 [ 437.430463][T13536] __sock_create+0xc2/0x860 [ 437.430484][T13536] __sys_socket+0x14d/0x260 [ 437.430508][T13536] ? __pfx___sys_socket+0x10/0x10 [ 437.430532][T13536] __x64_sys_socket+0x72/0xb0 [ 437.430550][T13536] ? lockdep_hardirqs_on+0x78/0x100 [ 437.430569][T13536] do_syscall_64+0xc9/0xf80 [ 437.430588][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.430604][T13536] RIP: 0033:0x7fb4b6f9acb9 [ 437.430618][T13536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.430632][T13536] RSP: 002b:00007fb4b7f14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 437.430647][T13536] RAX: ffffffffffffffda RBX: 00007fb4b7215fa0 RCX: 00007fb4b6f9acb9 [ 437.430657][T13536] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 437.430667][T13536] RBP: 00007fb4b7008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 437.430676][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.430684][T13536] R13: 00007fb4b7216038 R14: 00007fb4b7215fa0 R15: 00007ffc079e5658 [ 437.430705][T13536] [ 437.430722][T13536] socket: no more sockets [ 437.645035][ T7426] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 438.745449][T13554] zswap: compressor û not available [ 438.777244][T13560] block2mtd: device name too long [ 438.790873][T13563] Setting dangerous option i915.mitigations - tainting kernel [ 438.854848][T13554] block2mtd: error: cannot open device [ 438.903046][T13572] random: crng reseeded on system resumption [ 441.390437][T13625] zswap: compressor û not available [ 441.395887][T13631] Setting dangerous option i915.mitigations - tainting kernel [ 441.403749][T13633] Setting dangerous option i915.mitigations - tainting kernel [ 442.183251][T13648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1655'. [ 444.571370][T13676] zswap: compressor û not available [ 444.576726][T13684] Setting dangerous option i915.mitigations - tainting kernel [ 444.585255][T13674] Setting dangerous option i915.mitigations - tainting kernel [ 444.647674][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fbc0400: rx timeout, send abort [ 444.658308][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c699c00: rx timeout, send abort [ 444.666866][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804fbc0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 444.683030][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c699c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 444.938740][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 444.968307][T13695] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1667'. [ 445.252253][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.258955][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.541644][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.558719][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.744928][T13731] Invalid ELF header magic: != ELF [ 447.452622][T13739] Setting dangerous option i915.mitigations - tainting kernel [ 447.784940][ T7426] Bluetooth: hci1: unexpected event 0x33 length: 124 > 10 [ 450.102095][T13769] zswap: compressor û not available [ 452.020495][T13817] zswap: compressor û not available [ 452.049610][T13819] Setting dangerous option i915.mitigations - tainting kernel [ 452.193287][T13808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 452.207897][T13808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 452.217038][T13808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 452.223341][T13808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 452.372680][T13830] netlink: 'syz.1.1697': attribute type 5 has an invalid length. [ 452.399381][T13830] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1697'. [ 453.733487][ T7426] Bluetooth: hci0: command 0x0c1a tx timeout [ 453.789527][T13860] random: crng reseeded on system resumption [ 454.007121][T13866] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input22 [ 454.286920][ T7426] Bluetooth: hci1: command 0x0c1a tx timeout [ 454.293008][ T9422] Bluetooth: hci3: command 0x0c1a tx timeout [ 454.299467][ T7436] Bluetooth: hci2: command 0x0c1a tx timeout [ 454.576319][T13881] zswap: compressor û not available [ 454.590252][T13885] Setting dangerous option i915.mitigations - tainting kernel [ 456.328821][T13938] random: crng reseeded on system resumption [ 456.627305][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1721'. [ 456.653246][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.858677][T13946] bridge_slave_1 (unregistering): left allmulticast mode [ 456.917120][T13946] bridge_slave_1 (unregistering): left promiscuous mode [ 456.924322][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.175469][T13952] zswap: compressor û not available [ 457.191156][T13955] Setting dangerous option i915.mitigations - tainting kernel [ 457.217045][T13956] Setting dangerous option i915.mitigations - tainting kernel [ 458.011032][ T7436] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 458.366549][T13988] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 458.438454][T13988] CIFS mount error: No usable UNC path provided in device string! [ 458.438454][T13988] [ 458.449607][T13988] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 459.315200][T14016] random: crng reseeded on system resumption [ 460.223986][T14040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'. [ 460.398662][T14039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 460.404867][T14039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 460.418712][T14039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 460.425257][T14039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.189267][T14081] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1754'. [ 461.245931][T14071] zswap: compressor û not available [ 461.262103][T14073] Setting dangerous option i915.mitigations - tainting kernel [ 461.279876][T14079] Setting dangerous option i915.mitigations - tainting kernel [ 461.788983][T14107] random: crng reseeded on system resumption [ 462.418353][T14114] usb usb36: usbfs: process 14114 (syz.3.1761) did not claim interface 0 before use [ 462.447757][ T7436] Bluetooth: hci1: command 0x0c1a tx timeout [ 462.453865][ T7426] Bluetooth: hci3: command 0x0c1a tx timeout [ 462.459985][ T9422] Bluetooth: hci2: command 0x0c1a tx timeout [ 462.466026][ T9422] Bluetooth: hci0: command 0x0c1a tx timeout [ 462.498451][T14125] Invalid ELF header magic: != ELF [ 463.913127][T14163] FAULT_INJECTION: forcing a failure. [ 463.913127][T14163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.943571][T14163] CPU: 0 UID: 0 PID: 14163 Comm: syz.1.1768 Tainted: G U L syzkaller #0 PREEMPT(full) [ 463.943604][T14163] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 463.943610][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 463.943619][T14163] Call Trace: [ 463.943624][T14163] [ 463.943630][T14163] dump_stack_lvl+0x100/0x190 [ 463.943662][T14163] should_fail_ex.cold+0x5/0xa [ 463.943691][T14163] _copy_from_user+0x2e/0xd0 [ 463.943732][T14163] get_timespec64+0x8b/0x1b0 [ 463.943756][T14163] ? __pfx_get_timespec64+0x10/0x10 [ 463.943778][T14163] __x64_sys_futex+0x21a/0x4d0 [ 463.943806][T14163] ? __pfx___x64_sys_futex+0x10/0x10 [ 463.943838][T14163] do_syscall_64+0xc9/0xf80 [ 463.943862][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.943877][T14163] RIP: 0033:0x7fb4b6f9acb9 [ 463.943895][T14163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.943914][T14163] RSP: 002b:00007ffc079e57b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 463.943929][T14163] RAX: ffffffffffffffda RBX: 0000000000071404 RCX: 00007fb4b6f9acb9 [ 463.943938][T14163] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb4b7215fac [ 463.943950][T14163] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 463.943959][T14163] R10: 00007ffc079e58c0 R11: 0000000000000246 R12: 00007ffc079e58e0 [ 463.943968][T14163] R13: 00007fb4b7215fac R14: 0000000000071436 R15: 00007ffc079e58c0 [ 463.943997][T14163] [ 464.454369][T14180] random: crng reseeded on system resumption [ 464.862814][T14186] blkio.reset_stats is deprecated [ 465.286099][T14203] zswap: compressor not available [ 466.283548][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 466.383475][T14230] zswap: compressor û not available [ 466.389347][T14239] Setting dangerous option i915.mitigations - tainting kernel [ 466.397665][T14235] Setting dangerous option i915.mitigations - tainting kernel [ 466.821327][T14247] zswap: compressor not available [ 466.854803][T14253] random: crng reseeded on system resumption [ 467.486040][T14267] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.1790'. [ 468.559844][T14287] zswap: compressor û not available [ 468.568635][T14292] Setting dangerous option i915.mitigations - tainting kernel [ 468.612990][T14295] Setting dangerous option i915.mitigations - tainting kernel [ 469.245410][T14308] WARNING! power/level is deprecated; use power/control instead [ 470.161286][T14334] random: crng reseeded on system resumption [ 470.610920][T14338] zswap: compressor û not available [ 470.643915][T14340] Setting dangerous option i915.mitigations - tainting kernel [ 470.692796][T14342] Setting dangerous option i915.mitigations - tainting kernel [ 472.048922][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 472.998259][T14394] Setting dangerous option i915.mitigations - tainting kernel [ 473.014303][T14394] Setting dangerous option i915.mitigations - tainting kernel [ 473.394556][T14402] random: crng reseeded on system resumption [ 474.955742][T14431] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1827'. [ 475.152575][T14440] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1829'. [ 475.314481][T14436] zswap: compressor û not available [ 475.320476][T14440] Setting dangerous option i915.mitigations - tainting kernel [ 475.470363][T14449] random: crng reseeded on system resumption [ 477.569689][T14479] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 477.851853][T14482] MTRR 1 not used [ 478.503726][T14499] random: crng reseeded on system resumption [ 478.943144][ T30] audit: type=1800 audit(4295033127.999:33): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1846" name="members" dev="configfs" ino=54712 res=0 errno=0 [ 479.633373][T14511] program syz.2.1847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.558291][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 481.188115][T14548] 0x001c00000000-0x100002c00000200 : "" [ 481.247649][T14548] mtd: partition "" is out of reach -- disabled [ 481.355360][T14548] ftl_cs: FTL header not found. [ 482.227837][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 482.609397][T14582] random: crng reseeded on system resumption [ 483.464666][T14122] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 485.350433][T14618] usb usb36: usbfs: process 14618 (syz.1.1868) did not claim interface 0 before use [ 486.204980][T14635] vhci_hcd: not connected 4 [ 486.669771][T14639] netlink: 222 bytes leftover after parsing attributes in process `syz.1.1873'. [ 487.244365][T14695] random: crng reseeded on system resumption [ 487.662679][ T30] audit: type=1800 audit(4295033136.729:34): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1878" name="dbroot" dev="configfs" ino=55614 res=0 errno=0 [ 487.748176][T14727] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 487.772931][T14727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 487.819247][T14727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 489.604756][T14777] random: crng reseeded on system resumption [ 490.609736][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 492.099482][T14825] bridge_slave_1: left allmulticast mode [ 492.105170][T14825] bridge_slave_1: left promiscuous mode [ 492.113806][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.685467][T14833] random: crng reseeded on system resumption [ 493.939954][T14858] zswap: compressor not available [ 495.345938][T14886] __vm_enough_memory: pid: 14886, comm: syz.2.1917, bytes: 4398046511104 not enough memory for the allocation [ 495.484033][T14885] can: request_module (can-proto-0) failed. [ 495.751276][T14895] random: crng reseeded on system resumption [ 496.032428][T14898] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 496.136779][T14898] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 496.233093][T14898] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 496.306894][T14898] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 496.451870][T14901] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 496.471055][T14901] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 496.492012][T14901] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 496.513128][T14901] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 496.615038][T14906] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 496.631178][T14906] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 496.649069][T14906] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 496.665209][T14906] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 497.040650][T14917] scsi_dev_info_list_add_str: bad dev info string ')–õÒzD éú÷5fk+*X€©#åR8¾ð4*œýVs÷nîdv»ø¼qQWˆ}ûÄ~YrÈ€-8VGDƘ¹‹åLáBÍ%v—†õv‘}–Ypq|ƒí?ñºO¼ö[ŒÐ,!ä Ù7xWDr¾Ÿµ% [Û}†Eµ$3?ñGË™Î9–Ff=ŠÃlør«GH;2L<õ»=ÒÚ|èž¿®ô8ƒ -c¡„ FÕ¸šë"™ž£É[v9¯qôÂ4‚ MmËvq®ékñ¹¹ò[ÕãËú(i¨ýˆNDСÄMîËX PS­êq•èqX4‰X`VððŸ!;r¶Ö ±È)y]×W¨šzfIðH0êáÓ,àëí¬é¢vß{q8ÊìÛשU·Ü¹ä‘‰mØ›ŽH•ŽT´¸wí™C€Ïzø-óŠÊnR%§2]ÌÎx0Òéª5oùÐëâòÕ•|3>ÕlñS*LŒõÝ/«CdgÓ‘àŠ[C=Cw‹e•Äm)«ÿòÕl#È' '‹ï'“Sž‰¡.ÍsHgi-à»ÛTY%ܹF§…*8úÒnFTÿH‡—ýæ¿?“ÿ–Þi{' '' [ 497.961620][T14939] random: crng reseeded on system resumption [ 498.439572][T14950] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 498.475929][T14950] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 498.492897][T14950] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 498.549552][T14950] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 498.717401][T14957] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 498.773672][T14957] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 498.801094][T14957] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 498.836800][T14957] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 500.248320][T14990] random: crng reseeded on system resumption [ 500.785417][T15004] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1952'. [ 501.820822][T15030] program syz.3.1957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.882244][T15030] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 502.017262][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.024581][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.214808][T15041] usb usb13: check_ctrlrecip: process 15041 (syz.2.1962) requesting ep 01 but needs 81 [ 502.233341][T15041] usb usb13: usbfs: process 15041 (syz.2.1962) did not claim interface 0 before use [ 502.246520][ T30] audit: type=1804 audit(4295033151.309:35): pid=15046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1960" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=142 res=1 errno=0 [ 502.636952][T15064] random: crng reseeded on system resumption [ 504.847936][T15115] random: crng reseeded on system resumption [ 506.587348][T15153] EXT4-fs warning: 10 callbacks suppressed [ 506.587368][T15153] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 506.677445][T15153] EXT4-fs error: 10 callbacks suppressed [ 506.677467][T15153] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 506.700834][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.700933][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.737288][T15153] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 506.796829][T15153] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 506.914954][T15162] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 506.940738][T15162] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 506.978331][T15162] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 507.026416][T15162] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 507.166123][T15167] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 507.235206][T15167] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 507.290161][T15167] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 507.336918][T15167] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 507.811667][ T30] audit: type=1800 audit(4295033156.879:36): pid=15183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1993" name="lu_gp_id" dev="configfs" ino=57669 res=0 errno=0 [ 508.512203][T15201] random: crng reseeded on system resumption [ 508.613231][T15204] cifs: Unknown parameter 'Ź;B5èiÊrDðÖ°²p' [ 508.657145][T15204] CIFS mount error: No usable UNC path provided in device string! [ 508.657145][T15204] [ 508.771052][T15204] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 509.286930][T15209] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1999'. [ 510.712946][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2008'. [ 510.815093][T15240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.999718][T15240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.751900][T15256] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2012'. [ 512.007936][T15258] random: crng reseeded on system resumption [ 514.989924][T15316] random: crng reseeded on system resumption [ 515.299588][T15321] overlayfs: "check_copy_up" module option is obsolete [ 515.860733][T15346] bond0: invalid ARP target specified [ 515.865903][T15345] program syz.3.2038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.879598][T15345] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 516.930749][T15374] random: crng reseeded on system resumption [ 517.719090][T15386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.748014][T15386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.779401][T15386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.812560][T15386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 519.369774][T15424] vivid-007: ================= START STATUS ================= [ 519.389083][T15424] vivid-007: Generate PTS: true [ 519.433535][T15424] vivid-007: Generate SCR: true [ 519.443742][T15424] tpg source WxH: 320x240 (Y'CbCr) [ 519.483019][T15424] tpg field: 1 [ 519.498179][T15424] tpg crop: (0,0)/320x240 [ 519.502649][T15424] tpg compose: (0,0)/320x240 [ 519.527434][T15424] tpg colorspace: 8 [ 519.545564][T15424] tpg transfer function: 0/0 [ 519.564767][T15424] tpg Y'CbCr encoding: 0/0 [ 519.571848][T15424] tpg quantization: 0/0 [ 519.581920][T15424] tpg RGB range: 0/2 [ 519.586462][T15424] vivid-007: ================== END STATUS ================== [ 519.727435][T14122] Bluetooth: hci0: command 0x0c1a tx timeout [ 519.806818][T14122] Bluetooth: hci3: command 0x0c1a tx timeout [ 519.812912][ T7768] Bluetooth: hci2: command 0x0c1a tx timeout [ 519.887292][T14122] Bluetooth: hci1: command 0x0c1a tx timeout [ 520.477924][T15448] random: crng reseeded on system resumption [ 520.625517][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 520.937308][T15461] FAULT_INJECTION: forcing a failure. [ 520.937308][T15461] name failslab, interval 1, probability 0, space 0, times 0 [ 520.978320][T15461] CPU: 1 UID: 0 PID: 15461 Comm: syz.1.2070 Tainted: G U L syzkaller #0 PREEMPT(full) [ 520.978348][T15461] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 520.978354][T15461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 520.978385][T15461] Call Trace: [ 520.978390][T15461] [ 520.978396][T15461] dump_stack_lvl+0x100/0x190 [ 520.978420][T15461] should_fail_ex.cold+0x5/0xa [ 520.978450][T15461] should_failslab+0xc2/0x120 [ 520.978471][T15461] __kvmalloc_node_noprof+0x101/0xac0 [ 520.978489][T15461] ? __pfx___mutex_lock+0x10/0x10 [ 520.978509][T15461] ? traverse.part.0.constprop.0+0x397/0x650 [ 520.978528][T15461] ? traverse.part.0.constprop.0+0x397/0x650 [ 520.978543][T15461] traverse.part.0.constprop.0+0x397/0x650 [ 520.978564][T15461] seq_read_iter+0x93f/0x1270 [ 520.978579][T15461] ? __pfx__kstrtoull+0x10/0x10 [ 520.978602][T15461] seq_read+0x33b/0x4c0 [ 520.978616][T15461] ? __pfx_seq_read+0x10/0x10 [ 520.978630][T15461] ? iovec_from_user+0xbb/0x140 [ 520.978655][T15461] ? common_file_perm+0x1ab/0x4f0 [ 520.978682][T15461] ? rw_verify_area+0xce/0x6d0 [ 520.978700][T15461] ? __pfx_seq_read+0x10/0x10 [ 520.978713][T15461] vfs_readv+0x5d8/0x8d0 [ 520.978732][T15461] ? __pfx_vfs_readv+0x10/0x10 [ 520.978748][T15461] ? find_held_lock+0x2b/0x80 [ 520.978774][T15461] ? __fget_files+0x21f/0x3d0 [ 520.978795][T15461] ? do_preadv+0x1ac/0x270 [ 520.978808][T15461] do_preadv+0x1ac/0x270 [ 520.978824][T15461] ? __pfx_do_preadv+0x10/0x10 [ 520.978844][T15461] do_syscall_64+0xc9/0xf80 [ 520.978863][T15461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.978878][T15461] RIP: 0033:0x7fb4b6f9acb9 [ 520.978891][T15461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.978905][T15461] RSP: 002b:00007fb4b7ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 520.978920][T15461] RAX: ffffffffffffffda RBX: 00007fb4b7216090 RCX: 00007fb4b6f9acb9 [ 520.978930][T15461] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 520.978939][T15461] RBP: 00007fb4b7ef3090 R08: 0000000000000081 R09: 0000000000000000 [ 520.978948][T15461] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 520.978956][T15461] R13: 00007fb4b7216128 R14: 00007fb4b7216090 R15: 00007ffc079e5658 [ 520.978975][T15461] [ 523.126266][T15515] random: crng reseeded on system resumption [ 524.431349][T15553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 524.651083][T15547] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 524.701288][T15547] ep_00: uevent: failed to send synthetic uevent: -22 [ 524.899721][T15547] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2095'. [ 525.217049][T15585] random: crng reseeded on system resumption [ 525.888368][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 526.560512][T15605] input: f¬ as /devices/virtual/input/input24 [ 526.690165][T14122] Bluetooth: hci1: Malformed Event: 0x13 [ 526.773476][T15622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 526.795352][T15622] nbd: must specify a size in bytes for the device [ 527.413361][T15647] random: crng reseeded on system resumption [ 529.862182][T15709] random: crng reseeded on system resumption [ 531.262848][T15741] warn_alloc: 1 callbacks suppressed [ 531.262880][T15741] syz.0.2141: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 531.284548][T15741] CPU: 1 UID: 0 PID: 15741 Comm: syz.0.2141 Tainted: G U L syzkaller #0 PREEMPT(full) [ 531.284596][T15741] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 531.284607][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 531.284624][T15741] Call Trace: [ 531.284633][T15741] [ 531.284644][T15741] dump_stack_lvl+0x100/0x190 [ 531.284685][T15741] warn_alloc.cold+0x95/0x1c1 [ 531.284731][T15741] ? __pfx_warn_alloc+0x10/0x10 [ 531.284791][T15741] __vmalloc_node_range_noprof+0x1252/0x1530 [ 531.284820][T15741] ? __pfx___might_resched+0x10/0x10 [ 531.284866][T15741] ? rcu_is_watching+0x12/0xc0 [ 531.284894][T15741] ? trace_contention_end+0xd6/0x110 [ 531.284934][T15741] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 531.284974][T15741] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 531.285009][T15741] ? find_held_lock+0x2b/0x80 [ 531.285036][T15741] ? tomoyo_path_number_perm+0x28f/0x580 [ 531.285074][T15741] ? tomoyo_path_number_perm+0x28f/0x580 [ 531.285115][T15741] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.285144][T15741] ? tomoyo_path_number_perm+0x188/0x580 [ 531.285187][T15741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.285235][T15741] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 531.285273][T15741] __vmalloc_node_noprof+0xad/0xf0 [ 531.285300][T15741] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 531.285341][T15741] dvb_dvr_do_ioctl+0x15d/0x270 [ 531.285384][T15741] dvb_usercopy+0x167/0x340 [ 531.285419][T15741] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 531.285467][T15741] ? __pfx_dvb_usercopy+0x10/0x10 [ 531.285519][T15741] ? __fget_files+0x21f/0x3d0 [ 531.285560][T15741] dvb_dvr_ioctl+0x29/0x40 [ 531.285597][T15741] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 531.285635][T15741] __x64_sys_ioctl+0x18e/0x210 [ 531.285682][T15741] do_syscall_64+0xc9/0xf80 [ 531.285717][T15741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.285752][T15741] RIP: 0033:0x7f4f9719acb9 [ 531.285775][T15741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.285803][T15741] RSP: 002b:00007f4f97fb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.285830][T15741] RAX: ffffffffffffffda RBX: 00007f4f97415fa0 RCX: 00007f4f9719acb9 [ 531.285850][T15741] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 531.285868][T15741] RBP: 00007f4f97208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 531.285886][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.285907][T15741] R13: 00007f4f97416038 R14: 00007f4f97415fa0 R15: 00007ffea21d61b8 [ 531.285946][T15741] [ 531.556877][T15741] Mem-Info: [ 531.560653][T15741] active_anon:21900 inactive_anon:4 isolated_anon:0 [ 531.560653][T15741] active_file:11372 inactive_file:41584 isolated_file:0 [ 531.560653][T15741] unevictable:768 dirty:34 writeback:0 [ 531.560653][T15741] slab_reclaimable:13364 slab_unreclaimable:98384 [ 531.560653][T15741] mapped:26109 shmem:1405 pagetables:1429 [ 531.560653][T15741] sec_pagetables:0 bounce:0 [ 531.560653][T15741] kernel_misc_reclaimable:0 [ 531.560653][T15741] free:1301993 free_pcp:11115 free_cma:0 [ 531.682005][T15741] Node 0 active_anon:85552kB inactive_anon:16kB active_file:45488kB inactive_file:166200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104436kB dirty:136kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:59392kB kernel_stack:12232kB pagetables:5576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 531.847260][T15741] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 531.901455][T15741] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.951540][T15741] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 531.976775][T15741] Node 0 DMA32 free:1299588kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:83344kB inactive_anon:16kB active_file:45548kB inactive_file:166200kB unevictable:1536kB writepending:28kB zspages:0kB present:3129332kB managed:2539580kB mlocked:0kB bounce:0kB free_pcp:42796kB local_pcp:19356kB free_cma:0kB [ 532.057022][T15741] lowmem_reserve[]: 0 0 1 1 1 [ 532.061809][T15741] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 532.106787][T15748] __vm_enough_memory: pid: 15748, comm: syz.2.2143, bytes: 4398046511104 not enough memory for the allocation [ 532.170940][T15741] lowmem_reserve[]: 0 0 0 0 0 [ 532.200077][T15741] Node 1 Normal free:3892916kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6120kB local_pcp:1540kB free_cma:0kB [ 532.244167][T15741] lowmem_reserve[]: 0 0 0 0 0 [ 532.249529][T15741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 532.263094][T15741] Node 0 DMA32: 3119*4kB (UM) 4235*8kB (UM) 2839*16kB (UME) 1626*32kB (UME) 928*64kB (UME) 664*128kB (UME) 433*256kB (UME) 284*512kB (UME) 135*1024kB (UME) 17*2048kB (UM) 142*4096kB (UM) = 1299140kB [ 532.316952][T15741] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 532.328716][T15741] Node 1 Normal: 101*4kB (UME) 68*8kB (UME) 22*16kB (UE) 199*32kB (UE) 97*64kB (UE) 29*128kB (UE) 16*256kB (UME) 11*512kB (UME) 1*1024kB (M) 1*2048kB (E) 943*4096kB (UM) = 3892916kB [ 532.380556][T15741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.396870][T15741] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 532.415943][T15741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.436854][T15741] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 532.461066][T15741] 56124 total pagecache pages [ 532.471172][T15741] 14 pages in swap cache [ 532.482255][T15741] Free swap = 124612kB [ 532.492134][T15741] Total swap = 124996kB [ 532.501899][T15741] 2097051 pages RAM [ 532.510176][T15741] 0 pages HighMem/MovableOnly [ 532.520489][T15741] 430194 pages reserved [ 532.530375][T15741] 0 pages cma reserved [ 533.135644][T15757] random: crng reseeded on system resumption [ 533.331897][T15766] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 533.389776][T15766] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 533.405785][T15766] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 533.422665][T15766] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 533.717676][T15770] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 533.769549][T15770] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 533.817492][T15770] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 533.891879][T15770] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 534.163273][T15784] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 534.197689][T15784] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 534.219133][T15784] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 534.291184][T15784] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 534.919122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.931809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.944674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.956938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.969239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.981732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.994084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.006335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.018588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.030785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.926824][ C0] net_ratelimit: 33160 callbacks suppressed [ 539.926847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.944913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.957319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.969442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.981633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.993779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.005989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.018097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.030349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.042533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.936778][ C0] net_ratelimit: 36304 callbacks suppressed [ 544.936803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.955015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.967346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.979491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.991742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.003967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.016264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.028481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.040915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.053101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.656774][ C0] sched: DL replenish lagged too much [ 549.946738][ C0] net_ratelimit: 34802 callbacks suppressed [ 549.946764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.964856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.977076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.989189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.001418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.013518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.025818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.037961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.050157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.062322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.956860][ C0] net_ratelimit: 36639 callbacks suppressed [ 554.956877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.975252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.987396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.999630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.011767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.023980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.036092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.048397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.060516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.073269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.966757][ C0] net_ratelimit: 35912 callbacks suppressed [ 559.966783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.984962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.997132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.009460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.021626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.033873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.046036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.058482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.070613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.082894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.976787][ C0] net_ratelimit: 35440 callbacks suppressed [ 564.976803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.994828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.007044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.019171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.031384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.043727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.055899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.068185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.080541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.092686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.187447][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.193785][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.986910][ C0] net_ratelimit: 37329 callbacks suppressed [ 569.986928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.005192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.017335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.029484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.041689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.053824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.066082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.078340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.090617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.102773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.996777][ C0] net_ratelimit: 35512 callbacks suppressed [ 574.996800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.014830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.027039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.039244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.051397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.063625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.075791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.087943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.100157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.112332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.370414][T15819] netlink: 'syz.0.2157': attribute type 14 has an invalid length. [ 576.427838][T15819] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2157'. [ 580.006768][ C0] net_ratelimit: 35072 callbacks suppressed [ 580.006785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.024855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.037087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.049194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.061293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.073493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.085642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.097823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.110185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.122393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.016718][ C0] net_ratelimit: 32449 callbacks suppressed [ 585.016741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.034875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.047031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.059439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.071957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.084386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.090433][ T8513] ima: policy update failed [ 585.096897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.114013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.126467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.138875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.066886][ T30] audit: type=1802 audit(4295033235.099:37): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.540" res=0 errno=0 [ 590.026823][ C0] net_ratelimit: 34703 callbacks suppressed [ 590.026840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.044998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.057270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.069550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.081835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.094022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.106423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.118711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.131092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.143495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.820650][ T9422] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 593.836998][ T7436] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 594.158287][ T7768] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 594.255962][T14122] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 594.401440][ T7426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.422033][T15834] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 594.476074][T14122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 594.493397][T14122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 594.512640][T14122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.530867][ T7768] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 594.549027][ T7426] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 595.036788][ C0] net_ratelimit: 31949 callbacks suppressed [ 595.036810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.055298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.067528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.079929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.092090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.104706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.117090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.129338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.141508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.153885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.196212][T14122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 595.213978][T14122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 595.230935][T14122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 595.705118][T14122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 595.764295][ T7768] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 595.792812][ T7768] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 595.818373][T14122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 595.834337][ T7768] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 595.984580][ T7426] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 596.001405][ T7426] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 596.019009][T15840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.046821][ C0] net_ratelimit: 32997 callbacks suppressed [ 600.046837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.065159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.077614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.090009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.102329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.114684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.127018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.139191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.151621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.164145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.056722][ C0] net_ratelimit: 36072 callbacks suppressed [ 605.056745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.075041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.087211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.099462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.112018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.124299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.136884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.149167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.161466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.173681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.250573][ T7768] Bluetooth: hci6: command tx timeout [ 605.273809][ T7768] Bluetooth: hci4: command tx timeout [ 605.308605][ T7768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 605.534790][ T7768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 605.585482][T15840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 607.296361][T15840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 607.925714][T15840] Bluetooth: hci4: command tx timeout [ 607.951536][ T7768] Bluetooth: hci6: command tx timeout [ 607.984797][T14122] Bluetooth: hci7: command tx timeout [ 608.006014][ T7436] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 610.066843][ C0] net_ratelimit: 32925 callbacks suppressed [ 610.066860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.084925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.097102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.109317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.121503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.133670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.145899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.158048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.170192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.182406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.894554][ T7426] Bluetooth: hci4: command tx timeout [ 612.945113][ T7426] Bluetooth: hci7: command tx timeout [ 612.985477][ T7426] Bluetooth: hci6: command tx timeout [ 615.076816][ C0] net_ratelimit: 34014 callbacks suppressed [ 615.076832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.095053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.107467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.119762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.132226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.144538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.156801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.169012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.181303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.193533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.449677][T15840] Bluetooth: hci6: command tx timeout [ 617.455094][T15840] Bluetooth: hci7: command tx timeout [ 617.475571][ T7436] Bluetooth: hci4: command tx timeout [ 620.086739][ C0] net_ratelimit: 36531 callbacks suppressed [ 620.086757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.105020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.117334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.129578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.141810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.154051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.166380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.178528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.190886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.203076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.193765][ T7426] Bluetooth: hci7: command tx timeout [ 621.208364][ T7426] Bluetooth: hci3: command tx timeout [ 625.096772][ C0] net_ratelimit: 37161 callbacks suppressed [ 625.096797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.115060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.127480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.139818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.152296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.164670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 625.177107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.189412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.201704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.214008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.475151][ T7426] Bluetooth: hci3: command tx timeout [ 629.580269][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.586611][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.106716][ C0] net_ratelimit: 36290 callbacks suppressed [ 630.106739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.124874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.136966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 630.149212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 630.161432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.173660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.185929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.198065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.210273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.222376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 632.195610][ T7436] Bluetooth: hci3: command tx timeout [ 634.685490][ T7436] Bluetooth: hci3: command tx timeout [ 635.116829][ C0] net_ratelimit: 34878 callbacks suppressed [ 635.116846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 635.135206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 635.147475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.159777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.172034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.184425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.196625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.208939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.221177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 635.233404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 640.126760][ C0] net_ratelimit: 36368 callbacks suppressed [ 640.126777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.144971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.157231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.169475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.181681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.193989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.206349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 640.218729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 640.231015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.243351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.136731][ C0] net_ratelimit: 34727 callbacks suppressed [ 645.136755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.155580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.167986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.180369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.192856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.205135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 645.217499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 645.229885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.242148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.254528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.146865][ C0] net_ratelimit: 37881 callbacks suppressed [ 650.146881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.165076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.177367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 650.189752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 650.202146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.214457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.226867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.239155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.251469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.263849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.156708][ C0] net_ratelimit: 35362 callbacks suppressed [ 655.156733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.174905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.187319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.200297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.212630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.224951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.237186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 655.249476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 655.261700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.273943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.166742][ C0] net_ratelimit: 33820 callbacks suppressed [ 660.166766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 660.185000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 660.197396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.209720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.222218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.234618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.246915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.259126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.271345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 660.283588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 662.043382][ T7436] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 662.103371][T14122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 662.123741][ T7436] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 662.150441][ T9422] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 662.185953][ T7436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 662.225972][ T7436] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 662.245238][ T9422] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 662.262145][T14122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 662.331661][T15878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 662.358382][T15878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 662.385007][ T9422] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 662.420492][ T9422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 662.483651][ T7436] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 662.519064][ T9422] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 662.559463][T14122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 662.593852][T15879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 662.619237][ T9422] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 662.655300][ T7436] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 662.692112][T14122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 662.708536][ T9422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 662.715638][ T9422] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 662.844017][ T7436] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 665.176720][ C0] net_ratelimit: 34184 callbacks suppressed [ 665.176736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.194931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.207326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.219603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.231922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.244343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.256490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 665.268825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 665.281192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.293431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.186855][ C0] net_ratelimit: 38131 callbacks suppressed [ 670.186872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.205005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 670.217367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 670.229774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.242080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.254469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.266824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.279149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.291750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.304042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 673.434114][T15840] Bluetooth: hci0: command tx timeout [ 673.449811][T15840] Bluetooth: hci1: command tx timeout [ 673.455709][T15840] Bluetooth: hci5: command tx timeout [ 673.479247][ T7426] Bluetooth: hci2: command tx timeout [ 675.196718][ C0] net_ratelimit: 35965 callbacks suppressed [ 675.196741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.215036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.227413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 675.239895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 675.252252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.264503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.276810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.288953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.301185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.313405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.175099][ T7768] Bluetooth: hci5: command tx timeout [ 677.189668][ T7768] Bluetooth: hci2: command tx timeout [ 677.195069][ T7768] Bluetooth: hci0: command tx timeout [ 677.309952][ T7426] Bluetooth: hci1: command tx timeout [ 679.839835][ T7426] Bluetooth: hci1: command tx timeout [ 679.845251][ T7426] Bluetooth: hci0: command tx timeout [ 679.867608][T15840] Bluetooth: hci2: command tx timeout [ 679.891561][ T7768] Bluetooth: hci5: command tx timeout [ 680.206751][ C0] net_ratelimit: 35114 callbacks suppressed [ 680.206776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.224946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.237219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.249467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.261636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.273983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.286192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 680.298493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 680.310750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.323040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.012798][ T7426] Bluetooth: hci0: command tx timeout [ 682.027162][ T7426] Bluetooth: hci5: command tx timeout [ 682.032725][ T7426] Bluetooth: hci2: command tx timeout [ 682.086154][ T7768] Bluetooth: hci1: command tx timeout [ 685.216674][ C0] net_ratelimit: 36808 callbacks suppressed [ 685.216698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.234830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.247151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.259520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.271815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 685.284466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 685.296892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.309289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.321543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.333888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.226693][ C0] net_ratelimit: 37520 callbacks suppressed [ 690.226711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.244961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.257237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 690.269636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 690.282047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.294265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.306592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.318749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.330995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.343222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.011393][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.017797][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.236850][ C0] net_ratelimit: 36628 callbacks suppressed [ 695.236867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.255440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.267738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.280118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.292480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 695.305245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 695.317638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.329948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.342435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.354594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.246726][ C0] net_ratelimit: 34797 callbacks suppressed [ 700.246744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.265088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.277257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.289512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.301750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.313971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 700.326227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 700.338631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.350787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.363121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.256702][ C0] net_ratelimit: 34659 callbacks suppressed [ 705.256725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.274955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.287215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.299444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.311640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.323864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.336035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.348351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.360504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.372709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 710.266750][ C0] net_ratelimit: 33934 callbacks suppressed [ 710.266768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.285007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 710.297278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 710.309584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 710.321809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.334176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.346420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.358699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.370963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.383196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.276803][ C0] net_ratelimit: 37563 callbacks suppressed [ 715.276819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 715.295094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 715.307517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 715.319915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.332265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.344672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.356979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.369377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.381669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.393983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.286761][ C0] net_ratelimit: 38152 callbacks suppressed [ 720.286785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 720.305108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.317431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.329806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.342094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.354465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.366932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.379234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.391599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.403930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.763586][T14122] Bluetooth: hci6: command 0x0406 tx timeout [ 722.778701][ T7768] Bluetooth: hci4: command 0x0406 tx timeout [ 725.296793][ C0] net_ratelimit: 34668 callbacks suppressed [ 725.296810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 725.315113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 725.327593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 725.340170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.352524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.364957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.377294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.389601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.401916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.414108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.996431][ T7768] Bluetooth: hci7: command 0x0406 tx timeout [ 730.306705][ C0] net_ratelimit: 34101 callbacks suppressed [ 730.306722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.324867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.337035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.349313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.361449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.373819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 730.386090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 730.398379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 730.410808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.423099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.316766][ C0] net_ratelimit: 36029 callbacks suppressed [ 735.316783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.335045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.347349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 735.359749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 735.372142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 735.384410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.396705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.409070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.421412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.433685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.504742][T15879] Bluetooth: hci3: command 0x0406 tx timeout [ 740.326803][ C0] net_ratelimit: 34617 callbacks suppressed [ 740.326820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.345072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.357475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.369804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.382163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.394585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.406871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.419052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 740.431564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 740.443838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 745.336770][ C0] net_ratelimit: 34375 callbacks suppressed [ 745.336789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.354975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.367260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 745.379664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 745.391952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 745.404188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.416431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.428669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.440877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.454251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.346685][ C0] net_ratelimit: 33937 callbacks suppressed [ 750.346708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.364954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.377126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.389342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 750.401638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 750.413949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 750.426166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.438379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.450636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.462958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.451465][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.457887][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.356750][ C0] net_ratelimit: 36341 callbacks suppressed [ 755.356774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 755.375018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:80:4a:97:d6:f8, vlan:0) [ 755.387394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:10:e4:85:ae:f2, vlan:0) [ 755.399705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.411986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.424265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.436549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.448924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.461256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.473444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.926872][ T31] INFO: task syz.3.505:8349 blocked for more than 143 seconds. [ 756.934541][ T31] Tainted: G U L syzkaller #0 [ 756.946659][ T31] Blocked by coredump. [ 756.951277][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.976732][ T31] task:syz.3.505 state:D stack:26904 pid:8349 tgid:8349 ppid:5822 task_flags:0x40044c flags:0x00080003 [ 756.991986][ T31] Call Trace: [ 756.995296][ T31] [ 756.998740][ T31] ? __schedule+0xf65/0x5e10 [ 757.003369][ T31] __schedule+0xfe4/0x5e10 [ 757.008246][ T31] ? __lock_acquire+0x4a5/0x2630 [ 757.013231][ T31] ? kmem_cache_free+0x48f/0x720 [ 757.018714][ T31] ? __pfx___schedule+0x10/0x10 [ 757.023593][ T31] ? find_held_lock+0x2b/0x80 [ 757.028729][ T31] ? schedule+0x2bf/0x390 [ 757.033098][ T31] schedule+0xdd/0x390 [ 757.037739][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.043238][ T31] __mutex_lock+0xc9a/0x1b90 [ 757.049300][ T31] ? tun_chr_close+0x38/0x220 [ 757.054081][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.059829][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 757.065338][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 757.070954][ T31] ? tun_chr_close+0x38/0x220 [ 757.075675][ T31] tun_chr_close+0x38/0x220 [ 757.080678][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 757.085826][ T31] __fput+0x3ff/0xb40 [ 757.090263][ T31] task_work_run+0x150/0x240 [ 757.094899][ T31] ? __pfx_task_work_run+0x10/0x10 [ 757.100543][ T31] do_exit+0x829/0x2a30 [ 757.104751][ T31] ? __pfx_do_exit+0x10/0x10 [ 757.109853][ T31] ? cgroup_update_frozen_flag+0x107/0x210 [ 757.115709][ T31] ? find_held_lock+0x2b/0x80 [ 757.120862][ T31] ? get_signal+0x184f/0x21e0 [ 757.125669][ T31] do_group_exit+0xd5/0x2a0 [ 757.130649][ T31] get_signal+0x1ec7/0x21e0 [ 757.135189][ T31] ? __asan_memset+0x23/0x50 [ 757.140263][ T31] ? __pfx_get_signal+0x10/0x10 [ 757.145163][ T31] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 757.151783][ T31] arch_do_signal_or_restart+0x91/0x770 [ 757.157710][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 757.163913][ T31] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 757.170064][ T31] exit_to_user_mode_loop+0x86/0x4b0 [ 757.175388][ T31] ? rcu_is_watching+0x12/0xc0 [ 757.180683][ T31] do_syscall_64+0x4ea/0xf80 [ 757.185313][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.191662][ T31] RIP: 0033:0x7f5b5315b58e [ 757.196100][ T31] RSP: 002b:00007f5b54052f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 757.205091][ T31] RAX: fffffffffffffdfc RBX: 00007f5b540536c0 RCX: 00007f5b5315b58e [ 757.213398][ T31] RDX: 00007f5b54052fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.221753][ T31] RBP: 00007f5b53208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 757.230060][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.238402][ T31] R13: 00007f5b53416038 R14: 00007f5b53415fa0 R15: 00007ffe57168878 [ 757.246431][ T31] [ 757.251267][ T31] INFO: task kworker/u10:18:8772 blocked for more than 143 seconds. [ 757.264669][ T31] Tainted: G U L syzkaller #0 [ 757.271511][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.280540][ T31] task:kworker/u10:18 state:D stack:24056 pid:8772 tgid:8772 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 757.292981][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 757.299367][ T31] Call Trace: [ 757.302661][ T31] [ 757.305605][ T31] ? __schedule+0xf65/0x5e10 [ 757.310763][ T31] __schedule+0xfe4/0x5e10 [ 757.315256][ T31] ? __lock_acquire+0x4a5/0x2630 [ 757.320703][ T31] ? __pfx___schedule+0x10/0x10 [ 757.325585][ T31] ? find_held_lock+0x2b/0x80 [ 757.330754][ T31] ? schedule+0x2bf/0x390 [ 757.335125][ T31] schedule+0xdd/0x390 [ 757.345557][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.352511][ T31] __mutex_lock+0xc9a/0x1b90 [ 757.357485][ T31] ? update_se+0x93/0x700 [ 757.361848][ T31] ? addrconf_dad_work+0x11f/0x1360 [ 757.367487][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.372564][ T31] ? __lock_acquire+0x4a5/0x2630 [ 757.377973][ T31] ? addrconf_dad_work+0x11f/0x1360 [ 757.383201][ T31] ? rtnl_lock+0x9/0x20 [ 757.387836][ T31] addrconf_dad_work+0x11f/0x1360 [ 757.392998][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 757.399023][ T31] ? process_one_work+0x80b/0x1840 [ 757.404180][ T31] ? rcu_is_watching+0x12/0xc0 [ 757.409419][ T31] process_one_work+0x9c2/0x1840 [ 757.414424][ T31] ? __pfx_process_one_work+0x10/0x10 [ 757.420302][ T31] ? assign_work+0x19c/0x250 [ 757.424936][ T31] worker_thread+0x5da/0xe40 [ 757.429989][ T31] ? kthread+0x17d/0x730 [ 757.434268][ T31] ? __pfx_worker_thread+0x10/0x10 [ 757.439886][ T31] kthread+0x3b3/0x730 [ 757.443999][ T31] ? __pfx_kthread+0x10/0x10 [ 757.449015][ T31] ? ret_from_fork+0x79/0xaf0 [ 757.453720][ T31] ? ret_from_fork+0x79/0xaf0 [ 757.459888][ T31] ? rcu_is_watching+0x12/0xc0 [ 757.464692][ T31] ? __pfx_kthread+0x10/0x10 [ 757.469757][ T31] ret_from_fork+0x754/0xaf0 [ 757.474379][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 757.479976][ T31] ? __switch_to+0x7b9/0x10c0 [ 757.484779][ T31] ? __pfx_kthread+0x10/0x10 [ 757.489924][ T31] ret_from_fork_asm+0x1a/0x30 [ 757.494756][ T31] [ 757.498305][ T31] INFO: task syz-executor:15832 blocked for more than 143 seconds. [ 757.506237][ T31] Tainted: G U L syzkaller #0 [ 757.513237][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.522239][ T31] task:syz-executor state:D stack:24584 pid:15832 tgid:15832 ppid:1 task_flags:0x400140 flags:0x00080002 [ 757.534590][ T31] Call Trace: [ 757.538204][ T31] [ 757.541161][ T31] ? __schedule+0xf65/0x5e10 [ 757.545777][ T31] __schedule+0xfe4/0x5e10 [ 757.550764][ T31] ? __lock_acquire+0x4a5/0x2630 [ 757.555757][ T31] ? kasan_save_stack+0x3f/0x50 [ 757.566664][ T31] ? __pfx___schedule+0x10/0x10 [ 757.571556][ T31] ? find_held_lock+0x2b/0x80 [ 757.576271][ T31] ? schedule+0x2bf/0x390 [ 757.581991][ T31] schedule+0xdd/0x390 [ 757.586098][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.592002][ T31] __mutex_lock+0xc9a/0x1b90 [ 757.596865][ T31] ? __lock_acquire+0x4a5/0x2630 [ 757.601827][ T31] ? register_nexthop_notifier+0x1b/0x70 [ 757.609162][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.614260][ T31] ? net_generic+0xea/0x2a0 [ 757.619284][ T31] ? __pfx_vxlan_init_net+0x10/0x10 [ 757.624538][ T31] ? register_nexthop_notifier+0x1b/0x70 [ 757.630731][ T31] register_nexthop_notifier+0x1b/0x70 [ 757.636249][ T31] ops_init+0x1e2/0x5f0 [ 757.640904][ T31] setup_net+0x118/0x3a0 [ 757.645186][ T31] ? __pfx_setup_net+0x10/0x10 [ 757.650542][ T31] ? lockdep_init_map_type+0x5c/0x250 [ 757.656061][ T31] ? mutex_init_lockep+0x110/0x150 [ 757.662615][ T31] copy_net_ns+0x46f/0x7c0 [ 757.667410][ T31] create_new_namespaces+0x3ea/0xab0 [ 757.672739][ T31] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 757.678970][ T31] ksys_unshare+0x455/0xab0 [ 757.683528][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 757.689050][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 757.694390][ T31] __x64_sys_unshare+0x31/0x40 [ 757.699629][ T31] do_syscall_64+0xc9/0xf80 [ 757.704178][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.710649][ T31] RIP: 0033:0x7f1b8179bfa7 [ 757.715088][ T31] RSP: 002b:00007ffd2b135268 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 757.723992][ T31] RAX: ffffffffffffffda RBX: 00007f1b81a15f40 RCX: 00007f1b8179bfa7 [ 757.732633][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 757.741233][ T31] RBP: 00007f1b81a167b8 R08: 0000000000000000 R09: 0000000000000000 [ 757.749578][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 757.757875][ T31] R13: 0000000000000003 R14: 00007ffd2b1354a8 R15: 0000000000000000 [ 757.767277][ T31] [ 757.770541][ T31] INFO: task syz-executor:15838 blocked for more than 144 seconds. [ 757.778900][ T31] Tainted: G U L syzkaller #0 [ 757.785419][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.794578][ T31] task:syz-executor state:D stack:25768 pid:15838 tgid:15838 ppid:1 task_flags:0x400140 flags:0x00080002 [ 757.807062][ T31] Call Trace: [ 757.810364][ T31] [ 757.813321][ T31] ? __schedule+0xf65/0x5e10 [ 757.818521][ T31] __schedule+0xfe4/0x5e10 [ 757.822978][ T31] ? __lock_acquire+0x4a5/0x2630 [ 757.828703][ T31] ? __pfx___schedule+0x10/0x10 [ 757.833587][ T31] ? find_held_lock+0x2b/0x80 [ 757.838738][ T31] ? schedule+0x2bf/0x390 [ 757.843114][ T31] schedule+0xdd/0x390 [ 757.847686][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.853181][ T31] __mutex_lock+0xc9a/0x1b90 [ 757.865641][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 757.872337][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.877780][ T31] ? find_held_lock+0x2b/0x80 [ 757.882497][ T31] ? net_generic+0xea/0x2a0 [ 757.887503][ T31] ? net_generic+0xea/0x2a0 [ 757.892054][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 757.898682][ T31] register_netdevice_notifier_net+0x23/0xb0 [ 757.904705][ T31] ? __pfx_rtnl_net_debug_net_init+0x10/0x10 [ 757.911302][ T31] ops_init+0x1e2/0x5f0 [ 757.915513][ T31] setup_net+0x118/0x3a0 [ 757.920214][ T31] ? __pfx_setup_net+0x10/0x10 [ 757.925018][ T31] ? lockdep_init_map_type+0x5c/0x250 [ 757.930889][ T31] ? mutex_init_lockep+0x110/0x150 [ 757.936055][ T31] copy_net_ns+0x46f/0x7c0 [ 757.940957][ T31] create_new_namespaces+0x3ea/0xab0 [ 757.946290][ T31] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 757.952449][ T31] ksys_unshare+0x455/0xab0 [ 757.957285][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 757.962354][ T31] ? xfd_validate_state+0x129/0x190 [ 757.969044][ T31] __x64_sys_unshare+0x31/0x40 [ 757.973867][ T31] do_syscall_64+0xc9/0xf80 [ 757.978836][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.984760][ T31] RIP: 0033:0x7fa94899bfa7 [ 757.989661][ T31] RSP: 002b:00007ffdb6786258 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 757.998420][ T31] RAX: ffffffffffffffda RBX: 00007fa948c15f40 RCX: 00007fa94899bfa7 [ 758.006417][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 758.014982][ T31] RBP: 00007fa948c167b8 R08: 0000000000000000 R09: 0000000000000000 [ 758.023322][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 758.031648][ T31] R13: 0000000000000003 R14: 00007ffdb6786498 R15: 0000000000000000 [ 758.040077][ T31] [ 758.043132][ T31] INFO: task syz-executor:15845 blocked for more than 144 seconds. [ 758.051487][ T31] Tainted: G U L syzkaller #0 [ 758.058303][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.067401][ T31] task:syz-executor state:D stack:28200 pid:15845 tgid:15845 ppid:1 task_flags:0x400140 flags:0x00080002 [ 758.080657][ T31] Call Trace: [ 758.083966][ T31] [ 758.087358][ T31] ? __schedule+0xf65/0x5e10 [ 758.091980][ T31] __schedule+0xfe4/0x5e10 [ 758.096418][ T31] ? __lock_acquire+0x4a5/0x2630 [ 758.101966][ T31] ? __pfx___schedule+0x10/0x10 [ 758.107205][ T31] ? find_held_lock+0x2b/0x80 [ 758.111916][ T31] ? schedule+0x2bf/0x390 [ 758.116285][ T31] schedule+0xdd/0x390 [ 758.120940][ T31] schedule_preempt_disabled+0x13/0x30 [ 758.126434][ T31] __mutex_lock+0xc9a/0x1b90 [ 758.131543][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 758.137768][ T31] ? inet_rtm_newaddr+0x30c/0x18b0 [ 758.144454][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 758.150410][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 758.155480][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 758.166703][ T31] ? kernel_text_address+0x8d/0x100 [ 758.172932][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 758.179609][ T31] ? unwind_get_return_address+0x59/0xa0 [ 758.185294][ T31] ? inet_rtm_newaddr+0x30c/0x18b0 [ 758.190851][ T31] ? rtnl_lock+0x9/0x20 [ 758.195036][ T31] inet_rtm_newaddr+0x30c/0x18b0 [ 758.200384][ T31] ? __lock_acquire+0x4a5/0x2630 [ 758.205359][ T31] ? stack_trace_save+0x8e/0xc0 [ 758.210723][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 758.216142][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 758.221993][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 758.227445][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 758.232602][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 758.238409][ T31] rtnetlink_rcv_msg+0x95e/0xe90 [ 758.243396][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 758.249291][ T31] ? __lock_acquire+0x4a5/0x2630 [ 758.254276][ T31] netlink_rcv_skb+0x159/0x420 [ 758.259497][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 758.264999][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.270786][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 758.277380][ T31] netlink_unicast+0x5aa/0x870 [ 758.282201][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 758.287983][ T31] netlink_sendmsg+0x8b0/0xda0 [ 758.292798][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.298553][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 758.304233][ T31] __sys_sendto+0x4aa/0x520 [ 758.309283][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 758.314365][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 758.321330][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 758.326138][ T31] ? do_syscall_64+0x94/0xf80 [ 758.331315][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 758.336551][ T31] do_syscall_64+0xc9/0xf80 [ 758.341499][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.347743][ T31] RIP: 0033:0x7f15b4d5b58e [ 758.352182][ T31] RSP: 002b:00007fffe4bce858 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.361031][ T31] RAX: ffffffffffffffda RBX: 00005555649c4500 RCX: 00007f15b4d5b58e [ 758.369379][ T31] RDX: 0000000000000028 RSI: 00007f15b5b44670 RDI: 0000000000000003 [ 758.378622][ T31] RBP: 0000000000000001 R08: 00007fffe4bce8d4 R09: 000000000000000c [ 758.386942][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 758.394934][ T31] R13: 0000000000000000 R14: 00007f15b5b44670 R15: 0000000000000000 [ 758.403380][ T31] [ 758.406446][ T31] [ 758.406446][ T31] Showing all locks held in the system: [ 758.414822][ T31] 1 lock held by kworker/0:0/9: [ 758.420031][ T31] 2 locks held by kworker/0:1/10: [ 758.425072][ T31] 1 lock held by khungtaskd/31: [ 758.435378][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 758.445688][ T31] 4 locks held by kworker/1:1/43: [ 758.451044][ T31] #0: ffff88813fe16948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 758.463297][ T31] #1: ffffc90000b37c98 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 758.474169][ T31] #2: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x10e0 [ 758.485147][ T31] #3: ffff888022318788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x12c/0x10e0 [ 758.495842][ T31] 4 locks held by kworker/0:2/798: [ 758.501323][ T31] #0: ffff888143b99d48 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 758.512758][ T31] #1: ffffc90003647c98 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 758.554757][ T31] #2: ffff888035465308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 758.567647][ T31] #3: ffff888060ab5c60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 758.579695][ T31] 4 locks held by kworker/1:2/799: [ 758.585788][ T31] #0: ffff888061c7cd48 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 758.597336][ T31] #1: ffffc90003657c98 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 758.639422][ T31] #2: ffff888061d59308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22b/0x950 [ 758.652135][ T31] #3: ffff888060ab6648 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x2f8/0x950 [ 758.664111][ T31] 4 locks held by syz-executor/5811: [ 758.669724][ T31] #0: ffff8880790e5308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x5a0 [ 758.679377][ T31] #1: ffff8880339f6518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 758.690199][ T31] #2: ffff88807e9d3f40 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x36c/0x1980 [ 758.701435][ T31] #3: ffff88807e9d3c30 (&ei->i_data_sem){++++}-{4:4}, at: ext4_da_get_block_prep+0x738/0x1240 [ 758.716712][ T31] 4 locks held by kworker/1:4/5894: [ 758.721945][ T31] #0: ffff88814474e148 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 758.734188][ T31] #1: ffffc9000490fc98 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 758.776713][ T31] #2: ffff888035461308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 758.790516][ T31] #3: ffff888060ab1708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 758.803011][ T31] 3 locks held by kworker/0:6/5918: [ 758.808622][ T31] 4 locks held by kworker/u10:0/7425: [ 758.814017][ T31] 4 locks held by kworker/u10:1/7427: [ 758.819847][ T31] 4 locks held by kworker/u10:2/7428: [ 758.825235][ T31] 3 locks held by kworker/u10:3/7430: [ 758.831144][ T31] 4 locks held by kworker/u10:4/7488: [ 758.836534][ T31] 3 locks held by kworker/u10:5/7508: [ 758.842349][ T31] 3 locks held by kworker/u10:6/7509: [ 758.848306][ T31] 4 locks held by kworker/u10:7/7629: [ 758.853703][ T31] 3 locks held by kworker/u10:8/7631: [ 758.859882][ T31] 3 locks held by kworker/u10:9/7632: [ 758.865269][ T31] 3 locks held by kworker/u10:10/7633: [ 758.871097][ T31] 4 locks held by kworker/u10:11/7634: [ 758.876570][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 758.893827][ T31] #1: ffffc9000e74fc98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 758.904161][ T31] #2: ffffffff903dd070 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 758.913927][ T31] #3: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 [ 758.924021][ T31] 4 locks held by kworker/u10:12/7636: [ 758.929907][ T31] 3 locks held by kworker/u10:13/7637: [ 758.935384][ T31] 6 locks held by kworker/u10:14/7638: [ 758.941299][ T31] #0: ffff888141e9e948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 758.952461][ T31] #1: ffffc9000e71fc98 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 758.964834][ T31] #2: ffff8880339f60e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 758.975829][ T31] #3: ffff888033a08b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 758.992875][ T31] #4: ffff888033a0a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 759.002914][ T31] #5: ffff88807e9d3c30 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x469/0x13c0 [ 759.013034][ T31] 4 locks held by kworker/u10:15/7639: [ 759.018846][ T31] 4 locks held by kworker/u10:16/7640: [ 759.024320][ T31] 3 locks held by kworker/u10:17/7641: [ 759.030256][ T31] 1 lock held by syz.3.505/8349: [ 759.035562][ T31] #0: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 759.045094][ T31] 3 locks held by kworker/u10:18/8772: [ 759.050869][ T31] #0: ffff88814d715948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 759.062389][ T31] #1: ffffc90003c0fc98 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 759.075047][ T31] #2: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 759.084959][ T31] 2 locks held by kworker/u10:20/8774: [ 759.090734][ T31] #0: ffff88813fe29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 759.103311][ T31] #1: ffffc90003bbfc98 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 759.115233][ T31] 3 locks held by kworker/u10:21/8776: [ 759.121052][ T31] 1 lock held by syz.0.1549/13156: [ 759.126179][ T31] #0: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 759.135652][ T31] 3 locks held by kworker/u10:22/13247: [ 759.141545][ T31] 3 locks held by kworker/u10:23/13248: [ 759.147371][ T31] 4 locks held by kworker/u10:24/13249: [ 759.152933][ T31] 5 locks held by kworker/u10:26/13251: [ 759.158936][ T31] 3 locks held by kworker/u10:27/13254: [ 759.164503][ T31] 3 locks held by kworker/u10:28/14585: [ 759.171027][ T31] 2 locks held by kworker/u10:29/14586: [ 759.176929][ T31] 4 locks held by kworker/u10:30/14587: [ 759.182489][ T31] 4 locks held by kworker/u10:31/14588: [ 759.188476][ T31] 3 locks held by kworker/u10:32/14589: [ 759.194044][ T31] 1 lock held by syz.1.2151/15785: [ 759.200540][ T31] #0: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 759.209903][ T31] 3 locks held by kworker/0:3/15813: [ 759.215291][ T31] #0: ffff888061d55148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 759.226870][ T31] #1: ffffc900040afc98 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 759.269138][ T31] #2: ffff8880306caad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 759.285741][ T31] 2 locks held by syz-executor/15832: [ 759.291502][ T31] #0: ffffffff903dd070 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 759.302188][ T31] #1: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 759.312531][ T31] 1 lock held by syz-executor/15836: [ 759.318151][ T31] #0: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 759.328032][ T31] 2 locks held by syz-executor/15838: [ 759.333424][ T31] #0: ffffffff903dd070 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 759.343411][ T31] #1: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 759.354304][ T31] 1 lock held by syz-executor/15845: [ 759.359924][ T31] #0: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 759.369817][ T31] 2 locks held by modprobe/15857: [ 759.374867][ T31] 1 lock held by syz-executor/15869: [ 759.380655][ T31] #0: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 759.390493][ T31] 1 lock held by syz-executor/15872: [ 759.395799][ T31] #0: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 759.406743][ T31] 1 lock held by syz-executor/15874: [ 759.412051][ T31] #0: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 759.422036][ T31] 1 lock held by syz-executor/15876: [ 759.427625][ T31] #0: ffffffff903f59a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 759.437480][ T31] [ 759.439821][ T31] ============================================= [ 759.439821][ T31] [ 759.448745][ T31] NMI backtrace for cpu 1 [ 759.448766][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 759.448808][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 759.448818][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 759.448833][ T31] Call Trace: [ 759.448842][ T31] [ 759.448852][ T31] dump_stack_lvl+0x100/0x190 [ 759.448888][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 759.448924][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 759.448966][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 759.449020][ T31] sys_info+0x141/0x190 [ 759.449054][ T31] watchdog+0xcc3/0xfe0 [ 759.449093][ T31] ? __pfx_watchdog+0x10/0x10 [ 759.449122][ T31] ? __kthread_parkme+0x18c/0x230 [ 759.449154][ T31] ? __pfx_watchdog+0x10/0x10 [ 759.449184][ T31] ? __pfx_watchdog+0x10/0x10 [ 759.449209][ T31] kthread+0x3b3/0x730 [ 759.449247][ T31] ? __pfx_kthread+0x10/0x10 [ 759.449282][ T31] ? ret_from_fork+0x79/0xaf0 [ 759.449306][ T31] ? ret_from_fork+0x79/0xaf0 [ 759.449333][ T31] ? rcu_is_watching+0x12/0xc0 [ 759.449359][ T31] ? __pfx_kthread+0x10/0x10 [ 759.449397][ T31] ret_from_fork+0x754/0xaf0 [ 759.449424][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 759.449453][ T31] ? __switch_to+0x7b9/0x10c0 [ 759.449487][ T31] ? __pfx_kthread+0x10/0x10 [ 759.449526][ T31] ret_from_fork_asm+0x1a/0x30 [ 759.449582][ T31] [ 759.449592][ T31] Sending NMI from CPU 1 to CPUs 0: [ 759.597589][ C0] NMI backtrace for cpu 0 [ 759.597611][ C0] CPU: 0 UID: 0 PID: 13250 Comm: kworker/u10:25 Tainted: G U L syzkaller #0 PREEMPT(full) [ 759.597649][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 759.597658][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 759.597675][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 759.597710][ C0] RIP: 0010:__lock_acquire+0x319/0x2630 [ 759.597745][ C0] Code: dc 4c 89 f3 45 89 ce 49 89 c1 eb 42 48 8d 04 80 48 8d 04 80 48 8d 34 c5 60 aa ea 95 0f b6 86 c4 00 00 00 84 c0 74 12 41 38 c7 <44> 0f 47 f8 80 be c6 00 00 00 02 44 0f 44 f8 41 83 c6 01 48 83 c3 [ 759.597768][ C0] RSP: 0018:ffffc90000006968 EFLAGS: 00000046 [ 759.597785][ C0] RAX: 0000000000000003 RBX: ffff8880287f0bf8 RCX: 0000000000000007 [ 759.597801][ C0] RDX: 0000000000000001 RSI: ffffffff95eaafd8 RDI: 0000000000000020 [ 759.597816][ C0] RBP: ffff8880287f0000 R08: 0000000000000000 R09: 0000000000000007 [ 759.597830][ C0] R10: 0000000000000007 R11: 0000000000000000 R12: ffff8880287f0c48 [ 759.597845][ C0] R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000003 [ 759.597860][ C0] FS: 0000000000000000(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000 [ 759.597882][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.597898][ C0] CR2: 00007efec1cde440 CR3: 000000000e392000 CR4: 00000000003526f0 [ 759.597914][ C0] Call Trace: [ 759.597921][ C0] [ 759.597933][ C0] ? lock_acquire+0x17c/0x330 [ 759.597965][ C0] lock_acquire+0x17c/0x330 [ 759.597995][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 759.598033][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 759.598061][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 759.598091][ C0] unwind_next_frame+0xd1/0x1ea0 [ 759.598118][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 759.598145][ C0] ? __unwind_start+0x2fb/0x7f0 [ 759.598172][ C0] ? get_stack_info_noinstr+0x8c/0x130 [ 759.598215][ C0] __unwind_start+0x3d1/0x7f0 [ 759.598244][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 759.598274][ C0] arch_stack_walk+0x73/0xf0 [ 759.598303][ C0] ? __unwind_start+0x2fb/0x7f0 [ 759.598333][ C0] stack_trace_save+0x8e/0xc0 [ 759.598358][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 759.598385][ C0] ? __lock_acquire+0x4a5/0x2630 [ 759.598415][ C0] ? kmem_cache_free+0x143/0x720 [ 759.598440][ C0] ? __skb_ext_put+0x102/0x2d0 [ 759.598466][ C0] ? skb_release_head_state+0x2c8/0x400 [ 759.598501][ C0] kasan_save_stack+0x30/0x50 [ 759.598553][ C0] kasan_save_track+0x14/0x30 [ 759.598582][ C0] kasan_save_free_info+0x3b/0x70 [ 759.598605][ C0] __kasan_slab_free+0x5f/0x80 [ 759.598636][ C0] kmem_cache_free+0x143/0x720 [ 759.598661][ C0] ? kfree_skbmem+0x19a/0x210 [ 759.598688][ C0] ? kfree_skbmem+0x19a/0x210 [ 759.598713][ C0] kfree_skbmem+0x19a/0x210 [ 759.598738][ C0] sk_skb_reason_drop+0x10f/0x1b0 [ 759.598776][ C0] ip6_mc_input+0x832/0xf50 [ 759.598806][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 759.598834][ C0] ? __netif_receive_skb_core.constprop.0+0xd65/0x3460 [ 759.598872][ C0] ip6_rcv_finish+0x3b1/0x550 [ 759.598899][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 759.598926][ C0] ip_sabotage_in+0x21e/0x290 [ 759.598957][ C0] nf_hook_slow+0xbf/0x220 [ 759.598992][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 759.599018][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 759.599046][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 759.599075][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 759.599101][ C0] ? ip6_rcv_core+0xbaf/0x1c50 [ 759.599130][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 759.599155][ C0] ipv6_rcv+0xa4/0x610 [ 759.599180][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 759.599210][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 759.599242][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 759.599275][ C0] ? lock_acquire+0x17c/0x330 [ 759.599308][ C0] __netif_receive_skb+0x1f/0x120 [ 759.599338][ C0] netif_receive_skb+0x139/0x760 [ 759.599367][ C0] ? br_multicast_count+0x8d/0xbc0 [ 759.599399][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 759.599433][ C0] ? br_netif_receive_skb+0xff/0x1f0 [ 759.599466][ C0] br_pass_frame_up+0x346/0x490 [ 759.599499][ C0] br_handle_frame_finish+0x84f/0x1f00 [ 759.599534][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.599570][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 759.599602][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 759.599627][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 759.599651][ C0] ? nf_hook_slow+0x167/0x220 [ 759.599685][ C0] br_nf_hook_thresh+0x30d/0x420 [ 759.599717][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.599752][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 759.599787][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.599820][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 759.599849][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.599873][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.599899][ C0] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 759.599934][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.599971][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 759.600006][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 759.600040][ C0] ? lock_acquire+0x17c/0x330 [ 759.600071][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 759.600106][ C0] ? net_generic+0xea/0x2a0 [ 759.600139][ C0] br_nf_pre_routing+0x93b/0x1510 [ 759.600174][ C0] br_handle_frame+0xa68/0x1510 [ 759.600212][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 759.600243][ C0] ? __lock_acquire+0x4a5/0x2630 [ 759.600275][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.600311][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 759.600342][ C0] __netif_receive_skb_core.constprop.0+0x6d7/0x3460 [ 759.600376][ C0] ? find_held_lock+0x2b/0x80 [ 759.600398][ C0] ? debug_object_activate+0x331/0x490 [ 759.600431][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 759.600466][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 759.600493][ C0] ? debug_object_activate+0x331/0x490 [ 759.600522][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 759.600556][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 759.600589][ C0] ? mark_held_locks+0x40/0x70 [ 759.600619][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 759.600644][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 759.600671][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 759.600698][ C0] ? __lock_acquire+0x4a5/0x2630 [ 759.600728][ C0] ? __pfx___mod_timer+0x10/0x10 [ 759.600760][ C0] ? process_backlog+0x32a/0x1580 [ 759.600789][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 759.600821][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 759.600854][ C0] ? lock_acquire+0x17c/0x330 [ 759.600884][ C0] ? process_backlog+0x32a/0x1580 [ 759.600920][ C0] ? process_backlog+0x32a/0x1580 [ 759.600949][ C0] __netif_receive_skb+0x1f/0x120 [ 759.600979][ C0] process_backlog+0x37a/0x1580 [ 759.601013][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 759.601045][ C0] net_rx_action+0xa40/0xf20 [ 759.601080][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 759.601109][ C0] ? find_held_lock+0x2b/0x80 [ 759.601131][ C0] ? try_to_wake_up+0x154/0x1a60 [ 759.601156][ C0] ? try_to_wake_up+0x154/0x1a60 [ 759.601181][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 759.601211][ C0] ? sched_clock+0x38/0x60 [ 759.601244][ C0] ? sched_clock_cpu+0x6c/0x570 [ 759.601281][ C0] ? mark_held_locks+0x40/0x70 [ 759.601312][ C0] handle_softirqs+0x1ea/0x910 [ 759.601342][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 759.601372][ C0] ? nsim_dev_trap_report_work+0x8c7/0xd10 [ 759.601402][ C0] do_softirq+0xac/0xe0 [ 759.601429][ C0] [ 759.601436][ C0] [ 759.601443][ C0] __local_bh_enable_ip+0xf8/0x120 [ 759.601472][ C0] nsim_dev_trap_report_work+0x8c7/0xd10 [ 759.601509][ C0] process_one_work+0x9c2/0x1840 [ 759.601551][ C0] ? __pfx_process_one_work+0x10/0x10 [ 759.601591][ C0] ? assign_work+0x19c/0x250 [ 759.601625][ C0] worker_thread+0x5da/0xe40 [ 759.601665][ C0] ? kthread+0x17d/0x730 [ 759.601697][ C0] ? __pfx_worker_thread+0x10/0x10 [ 759.601731][ C0] kthread+0x3b3/0x730 [ 759.601764][ C0] ? __pfx_kthread+0x10/0x10 [ 759.601795][ C0] ? ret_from_fork+0x79/0xaf0 [ 759.601816][ C0] ? ret_from_fork+0x79/0xaf0 [ 759.601837][ C0] ? rcu_is_watching+0x12/0xc0 [ 759.601861][ C0] ? __pfx_kthread+0x10/0x10 [ 759.601894][ C0] ret_from_fork+0x754/0xaf0 [ 759.601916][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 759.601938][ C0] ? rcu_is_watching+0x12/0xc0 [ 759.601960][ C0] ? __switch_to+0x7b9/0x10c0 [ 759.601989][ C0] ? __pfx_kthread+0x10/0x10 [ 759.602022][ C0] ret_from_fork_asm+0x1a/0x30 [ 759.602064][ C0] [ 760.366716][ C0] net_ratelimit: 24553 callbacks suppressed [ 760.366738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.399190][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 760.399218][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 760.399260][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 760.399270][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 760.399287][ T31] Call Trace: [ 760.399296][ T31] [ 760.399307][ T31] dump_stack_lvl+0x100/0x190 [ 760.399346][ T31] vpanic+0x20d/0x630 [ 760.399374][ T31] panic+0xd1/0xd1 [ 760.399397][ T31] ? __pfx_panic+0x10/0x10 [ 760.399427][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 760.399469][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 760.399510][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 760.399550][ T31] ? watchdog.cold+0x198/0x1ca [ 760.399579][ T31] ? watchdog+0xcd3/0xfe0 [ 760.399610][ T31] watchdog.cold+0x1a9/0x1ca [ 760.399648][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.399677][ T31] ? __kthread_parkme+0x18c/0x230 [ 760.399711][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.399741][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.399768][ T31] kthread+0x3b3/0x730 [ 760.399807][ T31] ? __pfx_kthread+0x10/0x10 [ 760.399843][ T31] ? ret_from_fork+0x79/0xaf0 [ 760.399868][ T31] ? ret_from_fork+0x79/0xaf0 [ 760.399894][ T31] ? rcu_is_watching+0x12/0xc0 [ 760.399921][ T31] ? __pfx_kthread+0x10/0x10 [ 760.399959][ T31] ret_from_fork+0x754/0xaf0 [ 760.399986][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 760.400012][ T31] ? __switch_to+0x7b9/0x10c0 [ 760.611497][ T31] ? __pfx_kthread+0x10/0x10 [ 760.616128][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.620950][ T31] [ 760.624392][ T31] Kernel Offset: disabled [ 760.628724][ T31] Rebooting in 86400 seconds..