last executing test programs: 2m35.29393185s ago: executing program 1 (id=1859): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='net/dev_mcast\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m34.089467629s ago: executing program 1 (id=1861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfbaaf000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x17b) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/quota_mem_pressure_us\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='Y', 0x1) 2m33.680375819s ago: executing program 1 (id=1862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m32.722481329s ago: executing program 1 (id=1869): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)}}], 0x1, 0x4000800) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000400)={0xb, 0x0, 0x100000}, 0x20) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 2m31.383192552s ago: executing program 1 (id=1873): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000", 0x18}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a000100000000000000000002200000000000000000000008000160e00000", 0x23) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m29.927366225s ago: executing program 1 (id=1879): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x2000172d, 0x40, 0x8001002, 0x3c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m13.740425205s ago: executing program 3 (id=1923): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x2000172d, 0x40, 0x8001002, 0x3c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m11.68348894s ago: executing program 3 (id=1928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000) close(r0) 2m10.708985635s ago: executing program 3 (id=1929): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @loopback, 0x106}, 0x1c) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x1c}}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}}], 0x1, 0xc040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) io_uring_setup(0x1c79, &(0x7f0000000600)={0x0, 0xc8a1, 0xc000, 0xc, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m8.728302694s ago: executing program 3 (id=1939): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)}}], 0x1, 0x4000800) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000400)={0xb, 0x0, 0x100000}, 0x20) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 2m7.322918978s ago: executing program 3 (id=1941): bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)=0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x1, 0x3) write$binfmt_misc(r6, 0x0, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000001580)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f00000015c0)={0x2020}, 0x2020) 2m6.17589557s ago: executing program 0 (id=1947): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2m6.066561634s ago: executing program 3 (id=1948): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0xffff0000}], 0x1, 0x0, 0x0) 2m5.382501964s ago: executing program 0 (id=1949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b80)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000fc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000001100)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m0.590249917s ago: executing program 0 (id=1961): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000005c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m0.289661156s ago: executing program 0 (id=1962): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)}}], 0x1, 0x4000800) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000400)={0xb, 0x0, 0x100000}, 0x20) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 1m58.981578958s ago: executing program 0 (id=1964): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) write(r2, &(0x7f0000000080)='g', 0x1) 1m56.393504406s ago: executing program 0 (id=1969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43527aee38", 0xe6}, {&(0x7f0000000cc0)="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", 0x13c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001340)="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", 0x185}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001000)="00b47326", 0x4}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12.301581906s ago: executing program 2 (id=2165): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x20000005) 10.762405086s ago: executing program 4 (id=2166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000100), 0x29) 9.411483569s ago: executing program 2 (id=2167): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r1, 0x9, 0x1, 0x0, r1, 0x2) timer_gettime(r0, &(0x7f0000000200)) r2 = syz_create_resource$futex(&(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) futex(r1, 0x5, 0x0, 0x0, r2, 0x1) 9.028805232s ago: executing program 2 (id=2168): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_async', 0x1a1081, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') mkdirat(r3, &(0x7f00000003c0)='./file0\x00', 0x21) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000580)=0x1, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1c77c245997be8f3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) listen(r4, 0x5) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x8200, 0x200, 0xa, [0x40]}}}}, 0x17) accept4(r4, 0x0, 0x0, 0x800) 7.325649875s ago: executing program 4 (id=2169): mount(0x0, 0x0, 0x0, 0x4000, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a50000000060a0904001c000000000000020000000900020073797a32000000000900010073797a300000000024000480200001800700010063740000140002800800014000000013080002400000001014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) 7.032774823s ago: executing program 2 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listns(&(0x7f0000000200)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000240)=0x1, 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r7, @ANYBLOB='.'], 0x20) 4.819007691s ago: executing program 2 (id=2171): syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(0x0, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 4.818426258s ago: executing program 4 (id=2172): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)='2\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) 4.361983957s ago: executing program 4 (id=2173): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 2.576030346s ago: executing program 4 (id=2174): syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r0, 0x5452, &(0x7f0000000640)={0xffffffff, 0x100, 0xfffffffc, 0x4, 0x600e}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x5452, 0x0) 327.8431ms ago: executing program 4 (id=2175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 0s ago: executing program 2 (id=2176): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x9, 0x8, 0x9, 0x21120, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xf) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25df9bff, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x40) kernel console output (not intermixed with test programs): 249 > 9 [ 477.869505][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 477.871034][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.767341][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.767380][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.224807][ T8748] veth0_vlan: entered promiscuous mode [ 479.375267][ T8748] veth1_vlan: entered promiscuous mode [ 479.585579][ T8748] veth0_macvtap: entered promiscuous mode [ 479.636447][ T9151] FAULT_INJECTION: forcing a failure. [ 479.636447][ T9151] name fail_futex, interval 1, probability 0, space 0, times 0 [ 479.636485][ T9151] CPU: 0 UID: 0 PID: 9151 Comm: syz.0.788 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.636509][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 479.636527][ T9151] Call Trace: [ 479.636535][ T9151] [ 479.636545][ T9151] dump_stack_lvl+0xe8/0x150 [ 479.636584][ T9151] should_fail_ex+0x46b/0x600 [ 479.636635][ T9151] get_futex_key+0x1b4/0x1580 [ 479.636677][ T9151] ? __pfx_get_futex_key+0x10/0x10 [ 479.636710][ T9151] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 479.636753][ T9151] futex_wake+0x119/0x600 [ 479.636787][ T9151] ? __pfx_futex_wake+0x10/0x10 [ 479.636815][ T9151] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.636845][ T9151] ? __pfx_vfs_writev+0x10/0x10 [ 479.636874][ T9151] do_futex+0x458/0x4e0 [ 479.636903][ T9151] ? __pfx_do_futex+0x10/0x10 [ 479.636936][ T9151] __se_sys_futex+0x3a8/0x450 [ 479.636966][ T9151] ? do_writev+0x2b7/0x2e0 [ 479.636987][ T9151] ? __pfx___se_sys_futex+0x10/0x10 [ 479.637013][ T9151] ? __pfx_do_writev+0x10/0x10 [ 479.637041][ T9151] ? __x64_sys_futex+0x21/0xf0 [ 479.637069][ T9151] do_syscall_64+0x166/0x520 [ 479.637101][ T9151] ? trace_irq_disable+0x3b/0x140 [ 479.637132][ T9151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.637155][ T9151] ? clear_bhb_loop+0x70/0xc0 [ 479.637183][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.637218][ T9151] RIP: 0033:0x7f4184d1e559 [ 479.637241][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.637263][ T9151] RSP: 002b:00007f4182f760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 479.637288][ T9151] RAX: ffffffffffffffda RBX: 00007f4184fa5fa8 RCX: 00007f4184d1e559 [ 479.637305][ T9151] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4184fa5fac [ 479.637320][ T9151] RBP: 00007f4184fa5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 479.637336][ T9151] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 479.637351][ T9151] R13: 00007f4184fa6038 R14: 00007ffe09703ed0 R15: 00007ffe09703fb8 [ 479.637390][ T9151] [ 479.743736][ T8748] veth1_macvtap: entered promiscuous mode [ 480.009971][ T5603] Bluetooth: hci0: command tx timeout [ 480.309764][ T9158] netlink: 108 bytes leftover after parsing attributes in process `syz.0.790'. [ 480.350962][ T9127] rxe_eth0 speed is unknown, defaulting to 1000 [ 480.406727][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.477068][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.589991][ T1303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.590046][ T1303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.590087][ T1303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.673882][ T1514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.505255][ T5603] Bluetooth: hci0: command tx timeout [ 482.573172][ T9175] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.906935][ T8433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.906959][ T8433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.253260][ T9190] FAULT_INJECTION: forcing a failure. [ 483.253260][ T9190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.253299][ T9190] CPU: 1 UID: 0 PID: 9190 Comm: syz.1.800 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 483.253325][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 483.253349][ T9190] Call Trace: [ 483.253362][ T9190] [ 483.253373][ T9190] dump_stack_lvl+0xe8/0x150 [ 483.253413][ T9190] should_fail_ex+0x46b/0x600 [ 483.253454][ T9190] _copy_from_iter+0x1d3/0x1660 [ 483.253493][ T9190] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 483.253531][ T9190] ? __pfx__copy_from_iter+0x10/0x10 [ 483.253558][ T9190] ? lock_acquire+0x115/0x350 [ 483.253582][ T9190] ? futex_unqueue+0x22/0x240 [ 483.253615][ T9190] vhost_chr_write_iter+0xe1/0xb20 [ 483.253643][ T9190] ? __futex_wait+0x1e3/0x410 [ 483.253694][ T9190] ? __futex_wait+0x35a/0x410 [ 483.253725][ T9190] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 483.253751][ T9190] ? __pfx___futex_wait+0x10/0x10 [ 483.253780][ T9190] do_iter_readv_writev+0x624/0x8d0 [ 483.253807][ T9190] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 483.253835][ T9190] ? bpf_lsm_file_permission+0x9/0x20 [ 483.253858][ T9190] ? security_file_permission+0x75/0x260 [ 483.253885][ T9190] ? rw_verify_area+0x209/0x4d0 [ 483.253909][ T9190] vfs_writev+0x34c/0x990 [ 483.253932][ T9190] ? __pfx_vfs_writev+0x10/0x10 [ 483.253960][ T9190] ? __fget_files+0x2a/0x420 [ 483.253983][ T9190] ? __fget_files+0x3a8/0x420 [ 483.254002][ T9190] ? __fget_files+0x2a/0x420 [ 483.254028][ T9190] do_writev+0x15a/0x2e0 [ 483.254046][ T9190] ? __pfx_do_writev+0x10/0x10 [ 483.254071][ T9190] do_syscall_64+0x166/0x520 [ 483.254095][ T9190] ? trace_irq_disable+0x3b/0x140 [ 483.254118][ T9190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.254134][ T9190] ? clear_bhb_loop+0x70/0xc0 [ 483.254154][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.254171][ T9190] RIP: 0033:0x7f79a0a2e559 [ 483.254186][ T9190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.254201][ T9190] RSP: 002b:00007f799ec86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 483.254219][ T9190] RAX: ffffffffffffffda RBX: 00007f79a0cb5fa0 RCX: 00007f79a0a2e559 [ 483.254231][ T9190] RDX: 0000000000000001 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 483.254241][ T9190] RBP: 00007f79a0ac5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 483.254251][ T9190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.254261][ T9190] R13: 00007f79a0cb6038 R14: 00007f79a0cb5fa0 R15: 00007ffcad1001a8 [ 483.254287][ T9190] [ 483.930665][ T8433] IPVS: starting estimator thread 0... [ 484.010488][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.010513][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.068213][ T9195] IPVS: using max 7 ests per chain, 16800 per kthread [ 484.574542][ T5603] Bluetooth: hci0: command tx timeout [ 485.200250][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.234970][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.247367][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.281485][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.304485][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.395622][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.395840][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.396022][ T9127] bridge_slave_0: entered allmulticast mode [ 486.398978][ T9127] bridge_slave_0: entered promiscuous mode [ 486.441172][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.441423][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.441652][ T9127] bridge_slave_1: entered allmulticast mode [ 486.444603][ T9127] bridge_slave_1: entered promiscuous mode [ 486.594593][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.650757][ T5603] Bluetooth: hci0: command tx timeout [ 486.666274][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.836447][ T9236] FAULT_INJECTION: forcing a failure. [ 486.836447][ T9236] name failslab, interval 1, probability 0, space 0, times 0 [ 486.836489][ T9236] CPU: 1 UID: 0 PID: 9236 Comm: syz.1.809 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 486.836518][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 486.836534][ T9236] Call Trace: [ 486.836543][ T9236] [ 486.836553][ T9236] dump_stack_lvl+0xe8/0x150 [ 486.836596][ T9236] should_fail_ex+0x46b/0x600 [ 486.836651][ T9236] should_failslab+0xa8/0x100 [ 486.836685][ T9236] __kmalloc_node_noprof+0xfd/0x7b0 [ 486.836720][ T9236] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 486.836755][ T9236] ? pcpu_alloc_noprof+0xfd6/0x18d0 [ 486.836789][ T9236] ? __blk_mq_realloc_hw_ctxs+0xe6/0x660 [ 486.836821][ T9236] ? __blk_mq_realloc_hw_ctxs+0xe6/0x660 [ 486.836864][ T9236] __blk_mq_realloc_hw_ctxs+0xe6/0x660 [ 486.836912][ T9236] blk_mq_init_allocated_queue+0x35f/0x1400 [ 486.836951][ T9236] ? blk_alloc_queue+0x565/0x690 [ 486.836984][ T9236] __blk_mq_alloc_disk+0x1d2/0x390 [ 486.837020][ T9236] ? __pfx___blk_mq_alloc_disk+0x10/0x10 [ 486.837087][ T9236] loop_add+0x480/0xb50 [ 486.837126][ T9236] ? __pfx_loop_add+0x10/0x10 [ 486.837182][ T9236] ? __pfx_smack_file_ioctl+0x10/0x10 [ 486.837225][ T9236] loop_control_ioctl+0x12b/0x5b0 [ 486.837259][ T9236] ? __fget_files+0x2a/0x420 [ 486.837287][ T9236] ? __pfx_loop_control_ioctl+0x10/0x10 [ 486.837316][ T9236] ? __fget_files+0x2a/0x420 [ 486.837347][ T9236] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.837376][ T9236] ? __pfx_loop_control_ioctl+0x10/0x10 [ 486.837408][ T9236] __se_sys_ioctl+0xff/0x170 [ 486.837446][ T9236] do_syscall_64+0x166/0x520 [ 486.837479][ T9236] ? trace_irq_disable+0x3b/0x140 [ 486.837510][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.837533][ T9236] ? clear_bhb_loop+0x70/0xc0 [ 486.837561][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.837584][ T9236] RIP: 0033:0x7f79a0a2e559 [ 486.837616][ T9236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.837637][ T9236] RSP: 002b:00007f799ec86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.837662][ T9236] RAX: ffffffffffffffda RBX: 00007f79a0cb5fa0 RCX: 00007f79a0a2e559 [ 486.837680][ T9236] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 486.837695][ T9236] RBP: 00007f79a0ac5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 486.837710][ T9236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.837724][ T9236] R13: 00007f79a0cb6038 R14: 00007f79a0cb5fa0 R15: 00007ffcad1001a8 [ 486.837761][ T9236] [ 487.515759][ T9244] netlink: 108 bytes leftover after parsing attributes in process `syz.0.811'. [ 487.610875][ T5603] Bluetooth: hci4: command tx timeout [ 487.788589][ T9127] team0: Port device team_slave_0 added [ 487.817704][ T9252] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 488.614514][ T9254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.815'. [ 489.690072][ T5603] Bluetooth: hci4: command tx timeout [ 490.088626][ T9127] team0: Port device team_slave_1 added [ 490.119520][ T9255] veth0_virt_wifi: entered promiscuous mode [ 490.327311][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.327341][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.327372][ T9127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.416087][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.416102][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.416124][ T9127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.542422][ T9217] rxe_eth0 speed is unknown, defaulting to 1000 [ 492.369985][ T9127] hsr_slave_0: entered promiscuous mode [ 492.373041][ T9127] hsr_slave_1: entered promiscuous mode [ 494.538669][ T5603] Bluetooth: hci4: command tx timeout [ 495.450503][ T156] bridge_slave_1: left allmulticast mode [ 495.450541][ T156] bridge_slave_1: left promiscuous mode [ 495.450825][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.660705][ T156] bridge_slave_0: left allmulticast mode [ 495.660746][ T156] bridge_slave_0: left promiscuous mode [ 495.661002][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.199203][ T9318] netlink: 108 bytes leftover after parsing attributes in process `syz.0.830'. [ 496.572474][ T5603] Bluetooth: hci4: command tx timeout [ 496.940648][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.000808][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.022712][ T156] bond0 (unregistering): Released all slaves [ 497.090792][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 498.311459][ T156] hsr_slave_0: left promiscuous mode [ 498.333884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.373320][ T156] hsr_slave_1: left promiscuous mode [ 498.374974][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.379154][ T9352] FAULT_INJECTION: forcing a failure. [ 498.379154][ T9352] name failslab, interval 1, probability 0, space 0, times 0 [ 498.379209][ T9352] CPU: 0 UID: 0 PID: 9352 Comm: syz.1.837 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 498.379237][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 498.379251][ T9352] Call Trace: [ 498.379260][ T9352] [ 498.379270][ T9352] dump_stack_lvl+0xe8/0x150 [ 498.379310][ T9352] should_fail_ex+0x46b/0x600 [ 498.379354][ T9352] should_failslab+0xa8/0x100 [ 498.379382][ T9352] __kmalloc_cache_noprof+0xa1/0x680 [ 498.379420][ T9352] ? __se_sys_memfd_create+0x227/0x420 [ 498.379446][ T9352] ? __se_sys_memfd_create+0x227/0x420 [ 498.379478][ T9352] __se_sys_memfd_create+0x227/0x420 [ 498.379511][ T9352] do_syscall_64+0x166/0x520 [ 498.379550][ T9352] ? trace_irq_disable+0x3b/0x140 [ 498.379581][ T9352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.379606][ T9352] ? clear_bhb_loop+0x70/0xc0 [ 498.379636][ T9352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.379660][ T9352] RIP: 0033:0x7f79a0a2e559 [ 498.379681][ T9352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.379701][ T9352] RSP: 002b:00007f799ec86028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 498.379727][ T9352] RAX: ffffffffffffffda RBX: 00007f79a0cb5fa0 RCX: 00007f79a0a2e559 [ 498.379745][ T9352] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000980 [ 498.379760][ T9352] RBP: 00007f79a0ac5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 498.379775][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.379789][ T9352] R13: 00007f79a0cb6038 R14: 00007f79a0cb5fa0 R15: 00007ffcad1001a8 [ 498.379824][ T9352] [ 498.596088][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.985317][ T9361] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.839'. [ 501.369356][ T9370] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 503.441327][ T156] team0 (unregistering): Port device team_slave_1 removed [ 503.492831][ T156] team0 (unregistering): Port device team_slave_0 removed [ 503.766274][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 505.423976][ T3399] IPVS: starting estimator thread 0... [ 505.700486][ T9401] IPVS: using max 7 ests per chain, 16800 per kthread [ 505.816683][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.816918][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.817118][ T9217] bridge_slave_0: entered allmulticast mode [ 505.840724][ T9217] bridge_slave_0: entered promiscuous mode [ 505.844191][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.844449][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.844637][ T9217] bridge_slave_1: entered allmulticast mode [ 505.847562][ T9217] bridge_slave_1: entered promiscuous mode [ 506.786668][ T9415] netlink: 108 bytes leftover after parsing attributes in process `syz.2.851'. [ 506.850681][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.850759][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.268130][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.287162][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.467010][ T9217] team0: Port device team_slave_0 added [ 508.504288][ T9217] team0: Port device team_slave_1 added [ 508.731109][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.731131][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.731163][ T9217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.735375][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.735395][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.735428][ T9217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.256396][ T9217] hsr_slave_0: entered promiscuous mode [ 509.258981][ T9217] hsr_slave_1: entered promiscuous mode [ 509.273611][ T9217] debugfs: 'hsr0' already exists in 'hsr' [ 509.273638][ T9217] Cannot create hsr debugfs directory [ 510.045682][ T9473] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 510.443121][ T9483] 9p: Bad value for 'rfdno' [ 510.995164][ T9473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.236630][ T9480] bond1: (slave veth0_virt_wifi): making interface the new active one [ 511.276523][ T9480] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 511.733088][ T9493] 9p: Bad value for 'rfdno' [ 512.859225][ T156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.800620][ T9479] bond1: (slave veth0_virt_wifi): Releasing active interface [ 515.288518][ T156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.553529][ T9127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.544292][ T9127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.600564][ T9127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.953682][ T9127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.987876][ T9127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 518.127085][ T9127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 520.181830][ T156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.213869][ T9127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.212010][ T9127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.979039][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.018008][ T9127] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.035651][ T1303] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.035875][ T1303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.071140][ T1303] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.074585][ T1303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.068647][ T156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.968052][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 526.968093][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 527.011056][ T9617] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 527.015653][ T9617] geneve1: entered promiscuous mode [ 527.016681][ T9617] debugfs: 'hsr1' already exists in 'hsr' [ 527.016705][ T9617] Cannot create hsr debugfs directory [ 527.092017][ T9127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.229696][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.892'. [ 527.388422][ T9127] veth0_vlan: entered promiscuous mode [ 527.607912][ T9127] veth1_vlan: entered promiscuous mode [ 528.411093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.472770][ T9127] veth0_macvtap: entered promiscuous mode [ 528.510332][ T9127] veth1_macvtap: entered promiscuous mode [ 528.755129][ T156] bridge_slave_1: left allmulticast mode [ 528.755168][ T156] bridge_slave_1: left promiscuous mode [ 528.755569][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.966706][ T156] bridge_slave_0: left allmulticast mode [ 528.966745][ T156] bridge_slave_0: left promiscuous mode [ 528.966997][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.259180][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 530.523841][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.600750][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.654735][ T156] bond0 (unregistering): Released all slaves [ 530.869495][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 531.323024][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.965216][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.843456][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 538.863749][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 538.863811][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 538.878440][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 538.903156][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 538.916854][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 538.941085][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 539.401653][ T9755] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 539.439600][ T9755] geneve1: entered promiscuous mode [ 539.497319][ T9755] debugfs: 'hsr1' already exists in 'hsr' [ 539.497356][ T9755] Cannot create hsr debugfs directory [ 539.710130][ T8433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.710198][ T8433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.710240][ T8433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.710280][ T8433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.665157][ T9777] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 540.819086][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.926'. [ 541.139097][ T5603] Bluetooth: hci3: command tx timeout [ 541.250102][ T9777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.253435][ T9779] veth0_virt_wifi: entered promiscuous mode [ 541.320376][ T9792] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 541.466486][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.927'. [ 541.841551][ T156] hsr_slave_0: left promiscuous mode [ 541.870131][ T156] hsr_slave_1: left promiscuous mode [ 541.871802][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.871832][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.931418][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.931449][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.056793][ T156] veth1_macvtap: left promiscuous mode [ 542.056920][ T156] veth0_macvtap: left promiscuous mode [ 542.057190][ T156] veth1_vlan: left promiscuous mode [ 542.057387][ T156] veth0_vlan: left promiscuous mode [ 543.220064][ T5603] Bluetooth: hci3: command tx timeout [ 543.381565][ T156] team0 (unregistering): Port device team_slave_1 removed [ 543.484503][ T156] team0 (unregistering): Port device team_slave_0 removed [ 544.139040][ T9752] rxe_eth0 speed is unknown, defaulting to 1000 [ 544.500462][ T9217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 545.152894][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 545.290190][ T5603] Bluetooth: hci3: command tx timeout [ 545.586094][ T9217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.754869][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 546.862813][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 546.909738][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 546.943085][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 546.944725][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 547.178419][ T9880] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 547.337700][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'. [ 547.337736][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'. [ 547.380000][ T5608] Bluetooth: hci3: command tx timeout [ 547.507557][ T9880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.084557][ T5603] Bluetooth: hci0: command tx timeout [ 549.711420][ T5603] Bluetooth: hci7: command 0x0406 tx timeout [ 550.056559][ T9752] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.056748][ T9752] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.056930][ T9752] bridge_slave_0: entered allmulticast mode [ 550.062908][ T9752] bridge_slave_0: entered promiscuous mode [ 550.096290][ T9911] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.949'. [ 550.101652][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.103751][ T9752] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.105460][ T9752] bridge_slave_1: entered allmulticast mode [ 550.213915][ T9752] bridge_slave_1: entered promiscuous mode [ 550.326352][ T9752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.332602][ T9752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.900744][ T9916] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 551.198960][ T5608] Bluetooth: hci0: command tx timeout [ 551.277130][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.950'. [ 551.330908][ T9916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.331994][ T9922] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.951'. [ 552.281880][ T9752] team0: Port device team_slave_0 added [ 552.663779][ T9752] team0: Port device team_slave_1 added [ 553.175649][ T9752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.175670][ T9752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.175701][ T9752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.209963][ T5608] Bluetooth: hci0: command tx timeout [ 553.812228][ T9752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.812250][ T9752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.812284][ T9752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.813289][ T9870] rxe_eth0 speed is unknown, defaulting to 1000 [ 553.947224][ T9752] hsr_slave_0: entered promiscuous mode [ 553.948818][ T9752] hsr_slave_1: entered promiscuous mode [ 554.265648][ T9752] debugfs: 'hsr0' already exists in 'hsr' [ 554.265687][ T9752] Cannot create hsr debugfs directory [ 555.364211][ T5608] Bluetooth: hci0: command tx timeout [ 557.722563][ T9752] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.699980][ T9752] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.822838][ T9996] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.971'. [ 562.823734][ T9752] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.981169][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.981577][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.981762][ T9870] bridge_slave_0: entered allmulticast mode [ 562.984665][ T9870] bridge_slave_0: entered promiscuous mode [ 564.730470][ T9752] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.085222][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.085387][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.085654][ T9870] bridge_slave_1: entered allmulticast mode [ 565.113736][ T9870] bridge_slave_1: entered promiscuous mode [ 566.735102][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.786801][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.172238][ T9870] team0: Port device team_slave_0 added [ 567.179270][ T9870] team0: Port device team_slave_1 added [ 567.289290][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.984'. [ 567.289328][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.984'. [ 567.602171][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.602191][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.602223][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.751884][ T156] bridge_slave_1: left allmulticast mode [ 567.751923][ T156] bridge_slave_1: left promiscuous mode [ 567.752196][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.895220][T10068] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.986'. [ 567.913508][ T156] bridge_slave_0: left allmulticast mode [ 567.913547][ T156] bridge_slave_0: left promiscuous mode [ 568.227020][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.227097][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.281851][T10075] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 569.424176][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.437096][ T3408] IPVS: starting estimator thread 0... [ 570.783175][T10084] IPVS: using max 10 ests per chain, 24000 per kthread [ 571.560766][ T156] bridge_slave_1: left allmulticast mode [ 571.560805][ T156] bridge_slave_1: left promiscuous mode [ 571.561090][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.683318][ T156] bridge_slave_0: left allmulticast mode [ 571.683348][ T156] bridge_slave_0: left promiscuous mode [ 571.683567][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.230817][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.310627][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.394113][ T156] bond0 (unregistering): Released all slaves [ 574.130781][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.400802][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.390930][ T156] bond0 (unregistering): Released all slaves [ 575.463380][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.463402][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.463437][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.830804][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 579.215430][ T9870] hsr_slave_0: entered promiscuous mode [ 579.229135][ T9870] hsr_slave_1: entered promiscuous mode [ 579.236528][ T9870] debugfs: 'hsr0' already exists in 'hsr' [ 579.236559][ T9870] Cannot create hsr debugfs directory [ 579.829607][ T9752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 579.915076][ T9752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.942427][ T9752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 580.193994][ T9752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.241684][ T9752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 580.315498][ T9752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.385093][ T9752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 580.493206][ T9752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 582.439001][T10176] syzkaller0: entered promiscuous mode [ 582.439033][T10176] syzkaller0: entered allmulticast mode [ 582.459320][T10178] tipc: Started in network mode [ 582.459356][T10178] tipc: Node identity 3a1b1fffff3e, cluster identity 4711 [ 582.486622][T10178] tipc: Enabled bearer , priority 0 [ 582.546310][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 582.571311][T10181] syzkaller0: entered promiscuous mode [ 582.571339][T10181] syzkaller0: entered allmulticast mode [ 582.910673][T10175] tipc: Resetting bearer [ 582.951651][T10170] tipc: Resetting bearer [ 583.076897][T10170] tipc: Disabling bearer [ 583.370021][ T156] hsr_slave_0: left promiscuous mode [ 583.455874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.631715][ T156] hsr_slave_1: left promiscuous mode [ 583.637712][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.678719][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.882387][ T156] hsr_slave_0: left promiscuous mode [ 583.924186][ T156] hsr_slave_1: left promiscuous mode [ 583.926996][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.927025][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.988786][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.988810][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.642027][ T156] veth1_macvtap: left promiscuous mode [ 584.870770][ T156] veth0_macvtap: left promiscuous mode [ 585.027457][ T156] veth1_vlan: left promiscuous mode [ 585.070123][ T156] veth0_vlan: left promiscuous mode [ 587.630800][ T156] team0 (unregistering): Port device team_slave_1 removed [ 588.551038][ T156] team0 (unregistering): Port device team_slave_0 removed [ 588.571448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.572744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.916169][ T156] team0 (unregistering): Port device team_slave_1 removed [ 589.974968][ T156] team0 (unregistering): Port device team_slave_0 removed [ 590.441511][T10234] syzkaller0: entered promiscuous mode [ 590.441532][T10234] syzkaller0: entered allmulticast mode [ 590.785096][ T9752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.370250][ T9752] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.472093][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.472220][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.640702][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.640862][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.670110][T10343] syzkaller0: entered promiscuous mode [ 595.670142][T10343] syzkaller0: entered allmulticast mode [ 596.376155][ T9752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.520012][ T9870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 596.604561][ T9870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.613940][ T9870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 596.727423][ T9870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.737049][ T9870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 596.776157][ T9870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.785119][ T9870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 596.850527][ T9870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.257169][ T9752] veth0_vlan: entered promiscuous mode [ 597.363046][ T9752] veth1_vlan: entered promiscuous mode [ 597.600434][ T9752] veth0_macvtap: entered promiscuous mode [ 597.679099][ T9752] veth1_macvtap: entered promiscuous mode [ 597.757355][ T37] audit: type=1326 audit(1792231842.819:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.757414][ T37] audit: type=1326 audit(1792231842.819:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.757848][ T37] audit: type=1326 audit(1792231842.819:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.758829][ T37] audit: type=1326 audit(1792231842.819:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.860845][ T37] audit: type=1326 audit(1792231842.819:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.860904][ T37] audit: type=1326 audit(1792231842.929:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.861354][ T37] audit: type=1326 audit(1792231842.929:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.862148][ T37] audit: type=1326 audit(1792231842.929:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.862200][ T37] audit: type=1326 audit(1792231842.929:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.862687][ T37] audit: type=1326 audit(1792231842.929:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.1.1050" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a0a2e559 code=0x7ffc0000 [ 597.865860][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.994032][ T9752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.063404][T10384] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1051'. [ 598.388786][ T9752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.428084][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.005876][ T1514] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.008070][ T1514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.054447][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.056089][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.292656][ T989] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.294828][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.294952][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.295701][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.564641][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.624172][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.629397][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.650777][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.656935][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 602.353171][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.841068][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.133374][ T5603] Bluetooth: hci4: command tx timeout [ 603.188303][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.306388][T10435] syzkaller0: entered promiscuous mode [ 603.306414][T10435] syzkaller0: entered allmulticast mode [ 603.344987][T10398] rxe_eth0 speed is unknown, defaulting to 1000 [ 604.355640][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.997542][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.214352][ T5608] Bluetooth: hci4: command tx timeout [ 605.394601][ T9870] veth0_vlan: entered promiscuous mode [ 605.771529][ T9870] veth1_vlan: entered promiscuous mode [ 606.539091][T10464] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1065'. [ 607.741393][ T5603] Bluetooth: hci4: command tx timeout [ 607.814804][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 607.856981][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 607.858315][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 607.859384][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 607.902466][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 608.281870][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.281973][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.282160][T10398] bridge_slave_0: entered allmulticast mode [ 608.311697][T10398] bridge_slave_0: entered promiscuous mode [ 608.353825][T10481] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1067'. [ 609.727022][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.727214][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.727438][T10398] bridge_slave_1: entered allmulticast mode [ 609.751756][T10398] bridge_slave_1: entered promiscuous mode [ 609.770419][ T5608] Bluetooth: hci4: command tx timeout [ 609.871554][ T67] bridge_slave_1: left allmulticast mode [ 609.871593][ T67] bridge_slave_1: left promiscuous mode [ 609.900128][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.053513][T10505] device-mapper: ioctl: name not supplied when creating device [ 610.249970][ T5608] Bluetooth: hci3: command tx timeout [ 610.259155][T10503] syz.2.1070 (10503) used greatest stack depth: 16360 bytes left [ 610.277350][ T67] bridge_slave_0: left allmulticast mode [ 610.277387][ T67] bridge_slave_0: left promiscuous mode [ 610.277638][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.331561][ T5608] Bluetooth: hci3: command tx timeout [ 612.868149][T10541] device-mapper: ioctl: name not supplied when creating device [ 613.053296][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.178005][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.443374][ T67] bond0 (unregistering): Released all slaves [ 614.332295][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 614.517412][ T5608] Bluetooth: hci3: command tx timeout [ 614.683825][T10398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.764859][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 615.492499][T10398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.565302][T10398] team0: Port device team_slave_0 added [ 615.582428][T10398] team0: Port device team_slave_1 added [ 615.647909][T10398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.647928][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.647952][T10398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.694987][T10398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.695004][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.695029][T10398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.881618][T10582] device-mapper: ioctl: name not supplied when creating device [ 615.981192][T10398] hsr_slave_0: entered promiscuous mode [ 615.987873][T10398] hsr_slave_1: entered promiscuous mode [ 619.154171][ T5608] Bluetooth: hci3: command tx timeout [ 620.559138][ T67] hsr_slave_0: left promiscuous mode [ 620.610092][ T67] hsr_slave_1: left promiscuous mode [ 620.611459][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.611488][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.647735][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.647765][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.757637][ T67] veth1_macvtap: left promiscuous mode [ 620.757795][ T67] veth0_macvtap: left promiscuous mode [ 620.758060][ T67] veth1_vlan: left promiscuous mode [ 620.758237][ T67] veth0_vlan: left promiscuous mode [ 620.962528][T10635] device-mapper: ioctl: name not supplied when creating device [ 621.549708][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 621.549731][ T37] audit: type=1326 audit(1792231866.609:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 621.556312][ T37] audit: type=1326 audit(1792231866.609:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 622.044558][ T37] audit: type=1326 audit(1792231867.099:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 622.045944][ T37] audit: type=1326 audit(1792231867.109:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 622.738590][ T37] audit: type=1326 audit(1792231867.799:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 622.739130][ T37] audit: type=1326 audit(1792231867.799:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 622.764264][ T37] audit: type=1326 audit(1792231867.809:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 622.764325][ T37] audit: type=1326 audit(1792231867.809:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 622.764374][ T37] audit: type=1326 audit(1792231867.809:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 622.764422][ T37] audit: type=1326 audit(1792231867.819:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10640 comm="syz.2.1112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 623.543598][ T67] team0 (unregistering): Port device team_slave_1 removed [ 623.621189][ T67] team0 (unregistering): Port device team_slave_0 removed [ 624.382748][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 624.629475][T10471] rxe_eth0 speed is unknown, defaulting to 1000 [ 626.889527][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 627.882248][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 627.925309][T10688] device-mapper: ioctl: name not supplied when creating device [ 630.052079][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.052158][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.712677][T10746] device-mapper: ioctl: name not supplied when creating device [ 635.205555][T10471] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.205755][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.205949][T10471] bridge_slave_0: entered allmulticast mode [ 635.213002][T10471] bridge_slave_0: entered promiscuous mode [ 635.242090][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.242220][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.242406][T10471] bridge_slave_1: entered allmulticast mode [ 635.295475][T10471] bridge_slave_1: entered promiscuous mode [ 635.824455][T10802] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1143'. [ 635.931663][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 637.097907][T10816] device-mapper: ioctl: name not supplied when creating device [ 637.225545][T10398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 637.386636][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 637.392598][T10471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.394005][T10398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 637.583607][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.598433][T10471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.599651][T10398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 637.732559][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 637.844943][T10398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 638.007881][T10398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.123015][T10471] team0: Port device team_slave_0 added [ 638.150776][T10471] team0: Port device team_slave_1 added [ 638.544009][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'. [ 638.544048][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1148'. [ 638.636641][T10471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.636661][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.636689][T10471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.715148][T10471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.715168][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.715200][T10471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.989330][T10471] hsr_slave_0: entered promiscuous mode [ 641.062883][T10471] hsr_slave_1: entered promiscuous mode [ 641.063917][T10471] debugfs: 'hsr0' already exists in 'hsr' [ 641.063944][T10471] Cannot create hsr debugfs directory [ 641.221116][ T67] bridge_slave_1: left allmulticast mode [ 641.221153][ T67] bridge_slave_1: left promiscuous mode [ 641.221432][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.373903][ T67] bridge_slave_0: left allmulticast mode [ 641.373933][ T67] bridge_slave_0: left promiscuous mode [ 641.374132][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.923342][T10865] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 642.661262][T10875] device-mapper: ioctl: name not supplied when creating device [ 643.036059][T10880] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1159'. [ 643.162752][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.240883][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.289054][ T67] bond0 (unregistering): Released all slaves [ 645.323905][T10398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.446732][T10398] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.516332][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.516456][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.573668][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.573865][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.411570][ T67] hsr_slave_0: left promiscuous mode [ 646.412421][T10920] device-mapper: ioctl: name not supplied when creating device [ 646.445704][ T67] hsr_slave_1: left promiscuous mode [ 646.447008][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.483091][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.582187][ T67] veth1_vlan: left promiscuous mode [ 646.583960][ T67] veth0_vlan: left promiscuous mode [ 648.553698][ T67] team0 (unregistering): Port device team_slave_1 removed [ 648.630920][ T67] team0 (unregistering): Port device team_slave_0 removed [ 648.954774][ T37] kauditd_printk_skb: 116 callbacks suppressed [ 648.954794][ T37] audit: type=1326 audit(1792231894.019:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 648.957353][ T37] audit: type=1326 audit(1792231894.019:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 649.089372][ T37] audit: type=1326 audit(1792231894.139:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 649.089433][ T37] audit: type=1326 audit(1792231894.149:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 649.089482][ T37] audit: type=1326 audit(1792231894.149:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 649.164191][ T37] audit: type=1326 audit(1792231894.229:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 649.165866][ T37] audit: type=1326 audit(1792231894.229:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 649.169429][ T37] audit: type=1326 audit(1792231894.229:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 649.250846][ T37] audit: type=1326 audit(1792231894.229:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 649.251148][ T37] audit: type=1326 audit(1792231894.319:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.2.1175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 649.433696][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 649.647501][T10952] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1177'. [ 650.195264][T10960] device-mapper: ioctl: name not supplied when creating device [ 653.235312][T11017] device-mapper: ioctl: name not supplied when creating device [ 653.594686][T10398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.950786][T11029] tipc: Started in network mode [ 653.950819][T11029] tipc: Node identity 62065e0af3f5, cluster identity 4711 [ 653.951015][T11029] tipc: Enabled bearer , priority 0 [ 653.952198][T11031] syzkaller0: entered promiscuous mode [ 653.952222][T11031] syzkaller0: entered allmulticast mode [ 654.000069][T11029] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 654.096086][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 654.096108][ T37] audit: type=1326 audit(1792231899.159:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 654.099245][ T37] audit: type=1326 audit(1792231899.159:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 654.252281][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 654.286159][ T37] audit: type=1326 audit(1792231899.349:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 654.286220][ T37] audit: type=1326 audit(1792231899.349:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 654.286707][ T37] audit: type=1326 audit(1792231899.349:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f2c32fde559 code=0x7ffc0000 [ 654.363465][ T37] audit: type=1326 audit(1792231899.399:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 654.363527][ T37] audit: type=1326 audit(1792231899.429:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 654.364497][ T37] audit: type=1326 audit(1792231899.429:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 654.365994][ T37] audit: type=1326 audit(1792231899.429:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 654.367916][ T37] audit: type=1326 audit(1792231899.429:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11025 comm="syz.2.1193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c32f9ed8e code=0x7ffc0000 [ 654.516157][T10471] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 654.579650][T10471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 654.629714][T11032] tipc: Resetting bearer [ 654.660254][T11027] tipc: Resetting bearer [ 654.894992][T11027] tipc: Disabling bearer [ 655.087240][T10471] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 655.137253][T10471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.167874][T10471] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 655.223953][T10471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 655.228673][T10471] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 655.326970][T10471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.485735][T10398] veth0_vlan: entered promiscuous mode [ 655.524315][T10398] veth1_vlan: entered promiscuous mode [ 655.737717][T10398] veth0_macvtap: entered promiscuous mode [ 655.796106][T10398] veth1_macvtap: entered promiscuous mode [ 655.882042][T10398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.932615][T10398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.971726][T10471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.076459][T10471] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.325071][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.325218][ T8433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.480840][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.480947][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.846971][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.846995][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.231424][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.231447][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.321097][ T3408] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.365611][T11103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1208'. [ 657.600173][ T8433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.600235][ T8433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.600291][ T8433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.578488][T10471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.575764][T10471] veth0_vlan: entered promiscuous mode [ 659.649225][T10471] veth1_vlan: entered promiscuous mode [ 659.843348][T10471] veth0_macvtap: entered promiscuous mode [ 659.878758][T10471] veth1_macvtap: entered promiscuous mode [ 660.241655][T10471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.282661][T10471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.738797][ T3403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.760654][ T3403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.761498][ T3403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.761883][ T989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.521994][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.522019][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.807219][ T8433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.807259][ T8433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.506512][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 667.506538][T11226] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1248'. [ 671.889961][T11279] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 676.764959][T11323] fuse: Unknown parameter 'grou00000000000000000000' [ 677.557552][T11349] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1288'. [ 678.715312][T11360] fuse: Unknown parameter 'group_i00000000000000000000' [ 680.541321][T11391] fuse: Unknown parameter 'group_i00000000000000000000' [ 683.063237][T11432] fuse: Unknown parameter 'group_i00000000000000000000' [ 691.515424][T11553] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 692.645249][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.645329][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.288396][T11593] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 699.443865][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 699.621225][T11655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1391'. [ 702.120806][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'. [ 703.021558][T11720] netlink: 'syz.3.1417': attribute type 1 has an invalid length. [ 703.022926][T11720] veth0_virt_wifi: entered promiscuous mode [ 706.629515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 711.943562][T11822] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 716.920065][T11886] fuse: Bad value for 'fd' [ 719.352895][T11929] fuse: Bad value for 'fd' [ 720.624688][T11945] veth0_virt_wifi: entered promiscuous mode [ 721.202255][T11954] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 723.995946][T11977] fuse: Bad value for 'fd' [ 725.697207][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 726.155960][T12000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 726.261567][T12007] veth0_virt_wifi: entered promiscuous mode [ 726.475382][T12014] fuse: Bad value for 'fd' [ 734.336067][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 735.159064][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 739.415823][T12212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 739.892085][T12222] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 743.885883][T12237] tipc: Started in network mode [ 743.885920][T12237] tipc: Node identity 7a60a14e3a1e, cluster identity 4711 [ 743.886110][T12237] tipc: Enabled bearer , priority 0 [ 743.887773][T12237] syzkaller0: entered promiscuous mode [ 743.887800][T12237] syzkaller0: entered allmulticast mode [ 743.973380][T12237] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 744.089555][T12237] tipc: Resetting bearer [ 744.393946][T12236] tipc: Resetting bearer [ 745.634634][T12236] tipc: Disabling bearer [ 745.811676][ T36] tipc: Node number set to 1082040654 [ 755.850851][T12413] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 758.556953][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.557040][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 765.509228][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 765.509253][ T37] audit: type=1800 audit(1792232010.539:244): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1666" name="file2" dev="sda1" ino=2068 res=0 errno=0 [ 768.237610][T12555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 771.353731][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1689'. [ 774.719740][T12630] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 775.887050][ T37] audit: type=1800 audit(1792232020.949:245): pid=12625 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1702" name="file2" dev="sda1" ino=2068 res=0 errno=0 [ 777.457057][T12646] tipc: Started in network mode [ 777.457090][T12646] tipc: Node identity 8aebc6bd447b, cluster identity 4711 [ 777.457273][T12646] tipc: Enabled bearer , priority 0 [ 777.460735][T12646] syzkaller0: entered promiscuous mode [ 777.460800][T12646] syzkaller0: entered allmulticast mode [ 777.505570][T12646] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 777.759288][T12646] tipc: Resetting bearer [ 777.876451][T12645] tipc: Resetting bearer [ 778.141245][T12645] tipc: Disabling bearer [ 786.859888][T12760] kernel read not supported for file /eth0 (pid: 12760 comm: syz.1.1737) [ 786.927755][ T37] audit: type=1800 audit(1792232031.929:246): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1737" name="eth0" dev="mqueue" ino=49890 res=0 errno=0 [ 787.044229][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 793.312199][ T37] audit: type=1800 audit(1792232038.319:247): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1759" name="file2" dev="sda1" ino=2068 res=0 errno=0 [ 796.389884][ T37] audit: type=1800 audit(1792232041.449:248): pid=12861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1765" name="file2" dev="sda1" ino=2068 res=0 errno=0 [ 796.726516][T12863] tipc: Enabled bearer , priority 0 [ 796.730449][T12863] syzkaller0: entered promiscuous mode [ 796.730522][T12863] syzkaller0: entered allmulticast mode [ 796.754247][T12863] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 798.015409][T12868] tipc: Resetting bearer [ 798.100560][T12862] tipc: Resetting bearer [ 798.283565][T12862] tipc: Disabling bearer [ 798.440140][ T5325] tipc: Node number set to 2448645642 [ 804.894383][T12940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.621740][T12940] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 805.800901][T12945] bond1: (slave veth0_virt_wifi): Releasing backup interface [ 806.353532][T12960] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 810.882093][T12995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.915041][T12997] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 811.182180][T12995] bond3: (slave veth0_virt_wifi): Releasing backup interface [ 814.970899][T13028] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 816.802978][T13063] tipc: Enabled bearer , priority 0 [ 816.805470][T13063] syzkaller0: entered promiscuous mode [ 816.805498][T13063] syzkaller0: entered allmulticast mode [ 816.846315][T13063] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 817.110549][T13066] tipc: Resetting bearer [ 817.193257][T13062] tipc: Resetting bearer [ 817.453363][T13062] tipc: Disabling bearer [ 817.717397][T13080] syz.2.1826(13080): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 818.465441][T13102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 818.477865][T13102] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 818.894100][T13102] bond4: (slave veth0_virt_wifi): Releasing backup interface [ 818.972025][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.972101][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.234263][T13132] tipc: Enabled bearer , priority 0 [ 821.235437][T13132] syzkaller0: entered promiscuous mode [ 821.235463][T13132] syzkaller0: entered allmulticast mode [ 821.264221][T13132] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 821.513396][T13135] tipc: Resetting bearer [ 821.597479][T13125] tipc: Resetting bearer [ 822.154022][T13125] tipc: Disabling bearer [ 823.873960][T13171] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 824.180421][T13183] syzkaller0: entered promiscuous mode [ 824.180473][T13183] syzkaller0: entered allmulticast mode [ 828.673243][T13236] syzkaller0: entered promiscuous mode [ 828.673278][T13236] syzkaller0: entered allmulticast mode [ 830.576321][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 830.643262][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 830.648784][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 830.656125][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 830.668838][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 830.939409][ T989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.128299][ T5603] Bluetooth: hci0: command tx timeout [ 833.589484][ T989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.848153][T13303] kvm: emulating exchange as write [ 834.169109][ T989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.744772][ T989] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 834.774593][ T989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.217064][ T5603] Bluetooth: hci0: command tx timeout [ 836.036609][T13265] rxe_eth0 speed is unknown, defaulting to 1000 [ 837.362762][ T5603] Bluetooth: hci0: command tx timeout [ 837.503059][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1901'. [ 837.653394][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1901'. [ 839.452088][ T5603] Bluetooth: hci0: command tx timeout [ 841.160884][ T989] bridge_slave_1: left allmulticast mode [ 841.160929][ T989] bridge_slave_1: left promiscuous mode [ 841.161315][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.320129][ T989] bridge_slave_0: left allmulticast mode [ 841.320175][ T989] bridge_slave_0: left promiscuous mode [ 841.320575][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.144900][ T989] geneve1 (unregistering): left promiscuous mode [ 844.165146][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1918'. [ 844.621909][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.892202][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.967398][ T989] bond0 (unregistering): Released all slaves [ 845.101101][ T989] bond1 (unregistering): Released all slaves [ 845.206874][ T989] bond2 (unregistering): Released all slaves [ 845.338254][ T989] bond3 (unregistering): Released all slaves [ 845.460239][ T989] bond4 (unregistering): Released all slaves [ 845.837922][T13265] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.838168][T13265] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.838404][T13265] bridge_slave_0: entered allmulticast mode [ 845.875502][T13265] bridge_slave_0: entered promiscuous mode [ 845.957026][T13265] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.957198][T13265] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.957396][T13265] bridge_slave_1: entered allmulticast mode [ 845.987533][T13265] bridge_slave_1: entered promiscuous mode [ 846.124246][ T989] tipc: Left network mode [ 846.169332][T13265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.206376][T13265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.967454][T13265] team0: Port device team_slave_0 added [ 847.736160][T13265] team0: Port device team_slave_1 added [ 848.434144][T13265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.434166][T13265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.434197][T13265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.494362][T13265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.494381][T13265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.494410][T13265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.233301][T13470] fuse: Unknown parameter '00000000000000000003' [ 849.301489][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 849.727460][T13265] hsr_slave_0: entered promiscuous mode [ 849.732984][T13265] hsr_slave_1: entered promiscuous mode [ 849.757148][T13265] debugfs: 'hsr0' already exists in 'hsr' [ 849.757180][T13265] Cannot create hsr debugfs directory [ 849.808378][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 852.876555][T13517] fuse: Unknown parameter 'fd00000000000000000003' [ 853.981174][ T989] hsr_slave_0: left promiscuous mode [ 854.022474][ T989] hsr_slave_1: left promiscuous mode [ 854.025835][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.025876][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.077404][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.077455][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.298125][ T989] veth1_macvtap: left promiscuous mode [ 854.298240][ T989] veth0_macvtap: left promiscuous mode [ 854.298517][ T989] veth1_vlan: left promiscuous mode [ 854.298744][ T989] veth0_vlan: left promiscuous mode [ 854.708356][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 854.748441][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 854.763765][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 854.777195][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 854.793151][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 856.362112][ T989] team0 (unregistering): Port device team_slave_1 removed [ 856.448102][ T989] team0 (unregistering): Port device team_slave_0 removed [ 857.788984][ T5608] Bluetooth: hci1: command tx timeout [ 857.841676][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 857.869217][T13538] tipc: Enabled bearer , priority 0 [ 857.872380][T13540] syzkaller0: entered promiscuous mode [ 857.872452][T13540] syzkaller0: entered allmulticast mode [ 858.430901][T13540] tipc: Resetting bearer [ 858.563349][T13540] tipc: Disabling bearer [ 859.085126][T13606] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1960'. [ 859.859137][ T5608] Bluetooth: hci1: command tx timeout [ 860.263008][T13545] rxe_eth0 speed is unknown, defaulting to 1000 [ 861.932253][ T5608] Bluetooth: hci1: command tx timeout [ 864.009056][ T989] IPVS: stop unused estimator thread 0... [ 864.010226][ T5603] Bluetooth: hci1: command tx timeout [ 864.061655][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 864.092166][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 864.113014][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 864.115134][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 864.115910][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 866.112792][T13685] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1976'. [ 866.297028][ T989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.610099][ T5608] Bluetooth: hci2: command tx timeout [ 867.246503][T13545] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.248308][T13545] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.248502][T13545] bridge_slave_0: entered allmulticast mode [ 867.277274][T13545] bridge_slave_0: entered promiscuous mode [ 867.656261][ T989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.720953][T13545] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.721090][T13545] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.721296][T13545] bridge_slave_1: entered allmulticast mode [ 867.724650][T13545] bridge_slave_1: entered promiscuous mode [ 868.408465][ T989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.532272][T13545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.661377][ T5608] Bluetooth: hci2: command tx timeout [ 868.661639][T13545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.661710][T13651] rxe_eth0 speed is unknown, defaulting to 1000 [ 868.758040][T13265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 868.774185][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.219793][ T989] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 869.223458][ T989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.328999][T13265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 869.362302][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.460921][T13545] team0: Port device team_slave_0 added [ 869.463403][T13265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 869.552481][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.565264][T13545] team0: Port device team_slave_1 added [ 869.576007][T13265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 869.616920][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.715437][T13545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.715458][T13545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.715488][T13545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.776299][T13545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.776316][T13545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.776339][T13545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.254523][T13545] hsr_slave_0: entered promiscuous mode [ 870.256197][T13545] hsr_slave_1: entered promiscuous mode [ 870.257400][T13545] debugfs: 'hsr0' already exists in 'hsr' [ 870.257430][T13545] Cannot create hsr debugfs directory [ 870.730100][ T5608] Bluetooth: hci2: command tx timeout [ 871.771475][ T989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.283972][T13795] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1991'. [ 872.516066][ T989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.809828][ T5608] Bluetooth: hci2: command tx timeout [ 872.964162][ T989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.163188][T13651] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.163420][T13651] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.163607][T13651] bridge_slave_0: entered allmulticast mode [ 873.169956][T13651] bridge_slave_0: entered promiscuous mode [ 873.210228][T13651] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.210376][T13651] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.210559][T13651] bridge_slave_1: entered allmulticast mode [ 873.222217][T13651] bridge_slave_1: entered promiscuous mode [ 873.252544][T13821] tipc: Enabled bearer , priority 0 [ 873.318501][T13821] syzkaller0: entered promiscuous mode [ 873.318532][T13821] syzkaller0: entered allmulticast mode [ 873.367520][T13822] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 873.479323][T13651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.541688][T13826] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 873.589344][T13651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.608894][T13822] tipc: Resetting bearer [ 873.777033][ T989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.824849][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 873.870207][T13819] tipc: Resetting bearer [ 874.040860][T13819] tipc: Disabling bearer [ 874.243561][T13651] team0: Port device team_slave_0 added [ 874.278007][T13651] team0: Port device team_slave_1 added [ 874.345813][T13265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.413815][T13651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.413830][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.413851][T13651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.425294][T13651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.425344][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.425418][T13651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.629909][T13265] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.828179][T13651] hsr_slave_0: entered promiscuous mode [ 874.839430][T13651] hsr_slave_1: entered promiscuous mode [ 874.855345][T13651] debugfs: 'hsr0' already exists in 'hsr' [ 874.855378][T13651] Cannot create hsr debugfs directory [ 875.102619][ T3403] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.102912][ T3403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.134400][T13848] tipc: Enabled bearer , priority 0 [ 875.253380][T13843] syzkaller0: entered promiscuous mode [ 875.253409][T13843] syzkaller0: entered allmulticast mode [ 875.407500][T13845] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 875.624000][ T3403] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.624168][ T3403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.631813][T13857] tipc: Resetting bearer [ 875.665883][T13862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2002'. [ 875.729421][T13860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 875.738776][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 875.753405][T13861] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 875.851755][T13842] tipc: Resetting bearer [ 875.982300][T13842] tipc: Disabling bearer [ 876.100035][T13862] bond1: entered promiscuous mode [ 876.100244][T13862] bond1: entered allmulticast mode [ 876.100257][T13862] veth0_virt_wifi: entered allmulticast mode [ 876.150789][T13864] bond1: (slave veth0_virt_wifi): Releasing backup interface [ 876.191852][T13864] veth0_virt_wifi: left allmulticast mode [ 876.507569][ T989] bridge_slave_1: left allmulticast mode [ 876.507615][ T989] bridge_slave_1: left promiscuous mode [ 876.507977][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.690129][ T989] bridge_slave_0: left allmulticast mode [ 876.690169][ T989] bridge_slave_0: left promiscuous mode [ 876.690431][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.000421][ T989] bridge_slave_1: left allmulticast mode [ 877.000462][ T989] bridge_slave_1: left promiscuous mode [ 877.000734][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.147085][ T989] bridge_slave_0: left allmulticast mode [ 877.147125][ T989] bridge_slave_0: left promiscuous mode [ 877.147382][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.811114][ T989] geneve1 (unregistering): left promiscuous mode [ 879.993595][T13902] netlink: 'syz.4.2013': attribute type 4 has an invalid length. [ 880.150721][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.220917][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.253714][ T989] bond0 (unregistering): Released all slaves [ 880.428398][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.428475][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.120970][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.202403][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.253770][ T989] bond0 (unregistering): Released all slaves [ 881.268522][ T989] bond1 (unregistering): Released all slaves [ 881.632147][ T989] tipc: Left network mode [ 881.955628][T13910] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 882.023799][T13910] 8021q: adding VLAN 0 to HW filter on device bond3 [ 882.107402][T13912] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 882.162610][T13910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2015'. [ 882.165959][T13910] bond3: entered promiscuous mode [ 882.166131][T13910] bond3: entered allmulticast mode [ 882.166143][T13910] veth0_virt_wifi: entered allmulticast mode [ 882.420508][T13910] bond3: (slave veth0_virt_wifi): Releasing backup interface [ 882.461449][T13910] veth0_virt_wifi: left allmulticast mode [ 885.415443][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 885.489121][T13958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 885.513585][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2023'. [ 885.655370][T13961] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 885.802387][T13958] bond4: entered promiscuous mode [ 885.802671][T13958] bond4: entered allmulticast mode [ 885.802688][T13958] veth0_virt_wifi: entered allmulticast mode [ 885.844379][T13963] bond4: (slave veth0_virt_wifi): Releasing backup interface [ 885.870735][T13963] veth0_virt_wifi: left allmulticast mode [ 885.977896][T13265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.048803][T13265] veth0_vlan: entered promiscuous mode [ 888.150181][T13265] veth1_vlan: entered promiscuous mode [ 888.319577][T13265] veth0_macvtap: entered promiscuous mode [ 888.409188][T13265] veth1_macvtap: entered promiscuous mode [ 889.943343][ T989] hsr_slave_0: left promiscuous mode [ 890.001333][ T989] hsr_slave_1: left promiscuous mode [ 890.002482][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.002504][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.052943][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.052974][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.156048][T13994] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.2031'. [ 892.412195][ T989] hsr_slave_0: left promiscuous mode [ 892.449910][ T989] hsr_slave_1: left promiscuous mode [ 892.451266][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.451294][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.492324][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.492354][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.696939][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 892.736785][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 892.753438][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 892.754994][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 892.757959][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 892.986755][ T989] veth1_macvtap: left promiscuous mode [ 892.989051][ T989] veth0_macvtap: left promiscuous mode [ 892.989344][ T989] veth1_vlan: left promiscuous mode [ 892.989541][ T989] veth0_vlan: left promiscuous mode [ 893.166541][T14017] CUSE: unknown device info "" [ 893.166559][T14017] CUSE: unknown device info "" [ 893.166568][T14017] CUSE: unknown device info "€" [ 893.166577][T14017] CUSE: unknown device info "" [ 893.166586][T14017] CUSE: unknown device info "ý" [ 893.166595][T14017] CUSE: unknown device info "`" [ 893.166604][T14017] CUSE: unknown device info "" [ 893.166613][T14017] CUSE: unknown device info "" [ 893.166622][T14017] CUSE: DEVNAME unspecified [ 893.240398][ T989] veth1_macvtap: left promiscuous mode [ 893.240614][ T989] veth0_macvtap: left promiscuous mode [ 893.240889][ T989] veth1_vlan: left promiscuous mode [ 893.241087][ T989] veth0_vlan: left promiscuous mode [ 894.889994][ T5608] Bluetooth: hci4: command tx timeout [ 894.960743][ T989] team0 (unregistering): Port device team_slave_1 removed [ 895.030727][ T989] team0 (unregistering): Port device team_slave_0 removed [ 895.556363][T14036] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.2043'. [ 896.969811][ T5608] Bluetooth: hci4: command tx timeout [ 897.161765][ T989] team0 (unregistering): Port device team_slave_1 removed [ 897.163304][T14051] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.2047'. [ 897.430919][ T989] team0 (unregistering): Port device team_slave_0 removed [ 899.049762][ T5608] Bluetooth: hci4: command tx timeout [ 901.120526][T14007] rxe_eth0 speed is unknown, defaulting to 1000 [ 901.129756][ T5608] Bluetooth: hci4: command tx timeout [ 902.302892][T14103] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.2056'. [ 903.992072][ T989] IPVS: stop unused estimator thread 0... [ 904.346437][T13545] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 904.455035][T13545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.487289][T13545] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 904.548566][T13545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.629435][T13545] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 904.712478][T13545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 904.766390][T13545] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 904.816562][T13545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.947776][T14153] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 906.915861][T13651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 907.698560][T13651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 908.250731][T13651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 909.296870][T13651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.332974][T13651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 909.364401][T13651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.427391][T13651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 909.467528][T13651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.681929][T14007] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.682080][T14007] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.682268][T14007] bridge_slave_0: entered allmulticast mode [ 909.685568][T14007] bridge_slave_0: entered promiscuous mode [ 909.734638][T14007] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.734765][T14007] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.735089][T14007] bridge_slave_1: entered allmulticast mode [ 909.737355][T14007] bridge_slave_1: entered promiscuous mode [ 909.824629][T14007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.848828][T14007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.968690][T14007] team0: Port device team_slave_0 added [ 909.989049][T14007] team0: Port device team_slave_1 added [ 910.291815][T14007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.291838][T14007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.291871][T14007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.299510][T14007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.299530][T14007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.299562][T14007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.715015][T14007] hsr_slave_0: entered promiscuous mode [ 911.716495][T14007] hsr_slave_1: entered promiscuous mode [ 912.111231][T13545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.340682][ T989] bridge_slave_1: left allmulticast mode [ 914.340721][ T989] bridge_slave_1: left promiscuous mode [ 914.341009][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.462141][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 914.499127][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 914.521991][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 914.526254][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 914.565233][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 914.611327][ T989] bridge_slave_0: left allmulticast mode [ 914.611366][ T989] bridge_slave_0: left promiscuous mode [ 914.611660][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.821226][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.901352][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.944801][ T989] bond0 (unregistering): Released all slaves [ 916.033772][T14292] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 916.075188][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 916.495590][T13651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.617152][T13651] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.809988][ T5608] Bluetooth: hci0: command tx timeout [ 917.403111][ T3399] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.403373][ T3399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.432734][T14321] 9p: Bad value for 'wfdno' [ 918.069967][ T989] hsr_slave_0: left promiscuous mode [ 918.121188][ T989] hsr_slave_1: left promiscuous mode [ 918.123366][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.161420][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.381463][ T989] veth1_macvtap: left promiscuous mode [ 918.381551][ T989] veth0_macvtap: left promiscuous mode [ 918.381730][ T989] veth1_vlan: left promiscuous mode [ 918.381859][ T989] veth0_vlan: left promiscuous mode [ 918.899892][ T5608] Bluetooth: hci0: command tx timeout [ 919.341125][ T989] team0 (unregistering): Port device team_slave_1 removed [ 919.380605][ T989] team0 (unregistering): Port device team_slave_0 removed [ 919.511203][T14356] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 920.450081][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 920.496133][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.496949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.979804][ T5608] Bluetooth: hci0: command tx timeout [ 921.697458][T14362] FAULT_INJECTION: forcing a failure. [ 921.697458][T14362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.697491][T14362] CPU: 0 UID: 0 PID: 14362 Comm: syz.2.2097 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 921.697514][T14362] Tainted: [L]=SOFTLOCKUP [ 921.697521][T14362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 921.697531][T14362] Call Trace: [ 921.697538][T14362] [ 921.697545][T14362] dump_stack_lvl+0xe8/0x150 [ 921.697576][T14362] should_fail_ex+0x46b/0x600 [ 921.697637][T14362] _copy_to_user+0x31/0xb0 [ 921.697676][T14362] bpf_log_attr_finalize+0x124/0x1e0 [ 921.697714][T14362] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 921.697757][T14362] ? btf_parse_hdr+0x5f2/0x810 [ 921.697774][T14362] ? btf_parse_str_sec+0x244/0x2f0 [ 921.697796][T14362] btf_new_fd+0x6a0/0x8f0 [ 921.697815][T14362] __sys_bpf+0xd2e/0xd90 [ 921.697847][T14362] ? __pfx___sys_bpf+0x10/0x10 [ 921.697876][T14362] ? do_futex+0x3e7/0x4e0 [ 921.697911][T14362] ? ksys_write+0x248/0x270 [ 921.697934][T14362] ? __pfx___se_sys_futex+0x10/0x10 [ 921.697952][T14362] ? __pfx_ksys_write+0x10/0x10 [ 921.697978][T14362] __x64_sys_bpf+0xba/0xd0 [ 921.698003][T14362] do_syscall_64+0x166/0x520 [ 921.698028][T14362] ? trace_irq_disable+0x3b/0x140 [ 921.698051][T14362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.698068][T14362] ? clear_bhb_loop+0x70/0xc0 [ 921.698088][T14362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.698105][T14362] RIP: 0033:0x7f2c32fde559 [ 921.698120][T14362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.698134][T14362] RSP: 002b:00007f2c31236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 921.698155][T14362] RAX: ffffffffffffffda RBX: 00007f2c33265fa0 RCX: 00007f2c32fde559 [ 921.698167][T14362] RDX: 0000000000000028 RSI: 0000200000000400 RDI: 0000000000000012 [ 921.698178][T14362] RBP: 00007f2c33075ab8 R08: 0000000000000000 R09: 0000000000000000 [ 921.698189][T14362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.698199][T14362] R13: 00007f2c33266038 R14: 00007f2c33265fa0 R15: 00007fff994530a8 [ 921.698224][T14362] [ 921.961133][T14263] rxe_eth0 speed is unknown, defaulting to 1000 [ 923.050003][ T5608] Bluetooth: hci0: command tx timeout [ 924.802243][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 924.852570][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 924.855310][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 924.859365][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 924.894538][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 925.438817][T14424] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 927.179714][ T5608] Bluetooth: hci1: command tx timeout [ 928.601296][T14447] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 929.211330][ T5608] Bluetooth: hci1: command tx timeout [ 931.291014][ T5608] Bluetooth: hci1: command tx timeout [ 931.345479][T14447] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 931.610564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 932.563674][T14007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 932.598560][T14007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 932.910942][T14007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 932.969238][T14007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 933.017807][T14007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 933.052403][T14007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 933.094801][T14007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 933.128869][T14007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 933.343566][T14263] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.343778][T14263] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.343947][T14263] bridge_slave_0: entered allmulticast mode [ 933.347392][T14263] bridge_slave_0: entered promiscuous mode [ 933.371015][ T5608] Bluetooth: hci1: command tx timeout [ 933.393548][T14263] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.393655][T14263] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.393810][T14263] bridge_slave_1: entered allmulticast mode [ 933.397245][T14263] bridge_slave_1: entered promiscuous mode [ 933.522948][T14413] rxe_eth0 speed is unknown, defaulting to 1000 [ 933.732723][T14263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.784390][T14263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.036018][T14263] team0: Port device team_slave_0 added [ 934.065566][T14263] team0: Port device team_slave_1 added [ 934.276121][T14501] netlink: 'syz.4.2117': attribute type 1 has an invalid length. [ 934.638994][T14501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 934.966591][T14503] gretap1: entered promiscuous mode [ 934.993637][T14503] bond2: (slave gretap1): making interface the new active one [ 935.011483][T14503] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 935.037906][T14263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.037926][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.037955][T14263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.111227][T14263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.111247][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.111278][T14263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.531659][T14263] hsr_slave_0: entered promiscuous mode [ 935.535167][T14263] hsr_slave_1: entered promiscuous mode [ 935.536184][T14263] debugfs: 'hsr0' already exists in 'hsr' [ 935.536211][T14263] Cannot create hsr debugfs directory [ 935.861632][ T989] bridge_slave_1: left allmulticast mode [ 935.861672][ T989] bridge_slave_1: left promiscuous mode [ 935.861963][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.026167][ T989] bridge_slave_0: left allmulticast mode [ 936.026306][ T989] bridge_slave_0: left promiscuous mode [ 936.026709][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.450012][ T9926] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 938.557978][ T9926] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 938.580817][ T9926] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.580866][ T9926] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 938.580974][ T9926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.882756][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.931714][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.150991][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.158319][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.207357][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.225842][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.243152][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.268749][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.491853][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.622692][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.738845][ T989] bond0 (unregistering): Released all slaves [ 940.491143][ T9926] usb 5-1: NFC: Reader power on cmd error -71 [ 940.491172][ T9926] pn533_usb 5-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 940.491393][ T9926] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -71 [ 940.564279][ T9926] usb 5-1: USB disconnect, device number 3 [ 941.265977][T14007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.413562][ T5842] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 941.570619][ T5842] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 941.575664][ T5842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.575724][ T5842] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 941.575752][ T5842] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.579190][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 941.579213][ T5842] usb 5-1: Product: syz [ 941.579228][ T5842] usb 5-1: Manufacturer: syz [ 941.676417][T14541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 941.725480][ T5842] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 941.779864][ T989] hsr_slave_0: left promiscuous mode [ 941.876169][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.877390][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.925322][ T989] hsr_slave_1: left promiscuous mode [ 941.939112][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.967110][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.150194][ T5842] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 942.220043][ T5842] usb 5-1: USB disconnect, device number 4 [ 942.364902][ T5842] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 942.385705][ T5842] garmin_gps 5-1:1.0: device disconnected [ 945.902841][ T989] team0 (unregistering): Port device team_slave_1 removed [ 945.954548][ T989] team0 (unregistering): Port device team_slave_0 removed [ 946.081197][ T5842] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 946.270459][ T5842] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 946.275349][ T5842] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 946.275384][ T5842] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 946.275413][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.343007][T14560] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 946.393975][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 946.564532][ T5842] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 946.640060][T14564] ftl_cs: FTL header not found. [ 946.847109][T14007] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.235696][T14413] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.235806][T14413] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.235985][T14413] bridge_slave_0: entered allmulticast mode [ 947.238922][T14413] bridge_slave_0: entered promiscuous mode [ 947.329400][T14413] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.329514][T14413] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.332831][T14413] bridge_slave_1: entered allmulticast mode [ 947.343523][T14413] bridge_slave_1: entered promiscuous mode [ 947.361381][ T3408] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.361526][ T3408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.724610][T14413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.726586][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.726716][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.805956][T14564] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 947.870068][ T37] audit: type=1326 audit(1792232192.929:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14573 comm="syz.2.2132" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c32fde559 code=0x0 [ 948.046574][ T5842] usb 3-1: USB disconnect, device number 2 [ 948.139192][T14577] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 948.496339][T14413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.590583][T14413] team0: Port device team_slave_0 added [ 948.618713][T14413] team0: Port device team_slave_1 added [ 948.829396][T14413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.829417][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.829437][T14413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.883113][T14413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.883134][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.883165][T14413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.302468][T14413] hsr_slave_0: entered promiscuous mode [ 949.303996][T14413] hsr_slave_1: entered promiscuous mode [ 949.305020][T14413] debugfs: 'hsr0' already exists in 'hsr' [ 949.305056][T14413] Cannot create hsr debugfs directory [ 949.502235][T14588] loop1: detected capacity change from 0 to 4095 [ 949.590162][ T5842] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 949.811651][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 949.813427][ T5842] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 949.866112][ T5842] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.866146][ T5842] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.866169][ T5842] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 949.866196][ T5842] usb 3-1: config 0 interface 0 has no altsetting 0 [ 949.866228][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.005132][ T5842] usb 3-1: config 0 descriptor?? [ 950.374114][T14561] Buffer I/O error on dev loop1, logical block 511, async page read [ 951.554444][ T5842] usbhid 3-1:0.0: can't add hid device: -71 [ 951.554557][ T5842] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 951.637058][ T5842] usb 3-1: USB disconnect, device number 3 [ 951.867888][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 951.905551][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 951.907903][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 951.909085][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 951.925946][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 953.810930][T14603] ovs-dp0: entered promiscuous mode [ 954.092907][ T5608] Bluetooth: hci2: command tx timeout [ 954.361993][T14263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 954.368628][T14638] binder: Binderfs stats mode cannot be changed during a remount [ 954.441749][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 954.750800][T14263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 954.793907][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 955.189404][T14644] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.200443][T14644] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.492782][T14644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.499114][T14644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.169813][ T5608] Bluetooth: hci2: command tx timeout [ 956.646013][T14263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 956.694481][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.217171][T14263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 957.272832][T14263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 958.619675][ T5608] Bluetooth: hci2: command tx timeout [ 959.702811][T14600] rxe_eth0 speed is unknown, defaulting to 1000 [ 959.951029][ T1161] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.650112][ T5608] Bluetooth: hci2: command tx timeout [ 961.015522][T14688] 0x000000000000-0x000000010000 : "" [ 962.830481][T14688] ftl_cs: FTL header not found. [ 963.261733][T14707] atomic_op ffff888064ceaa60 conn xmit_atomic 0000000000000000 [ 964.072103][ T989] bridge_slave_1: left allmulticast mode [ 964.072143][ T989] bridge_slave_1: left promiscuous mode [ 964.072425][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.242106][ T989] bridge_slave_0: left allmulticast mode [ 964.246336][ T989] bridge_slave_0: left promiscuous mode [ 964.246680][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.871983][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.944766][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.981115][ T989] bond0 (unregistering): Released all slaves [ 966.066591][T14263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.165364][T14720] bond0: (slave bond_slave_1): Releasing backup interface [ 966.256488][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 967.848164][T14730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.384958][T14263] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.591578][ T989] hsr_slave_0: left promiscuous mode [ 969.631472][ T989] hsr_slave_1: left promiscuous mode [ 969.655946][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.680886][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.711742][ T989] team0 (unregistering): Port device team_slave_1 removed [ 971.841617][ T989] team0 (unregistering): Port device team_slave_0 removed [ 974.056714][T14748] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 974.471964][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.472200][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.648460][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.828731][T14758] Bluetooth: MGMT ver 1.23 [ 975.655008][T13549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 975.689576][T13549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 975.695079][T13549] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 975.697164][T13549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 975.697842][T13549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 975.895004][T14767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2173'. [ 976.180352][ T1303] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.184015][ T1303] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.368399][ T5608] Bluetooth: hci0: Opcode 0x1407 failed: -19 [ 977.499792][ T5837] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 977.653703][ T5837] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 977.653764][ T5837] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 977.657490][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 977.657561][ T5837] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 977.657595][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 977.658983][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 977.659030][ T5837] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 977.659057][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 977.740706][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 977.740756][ T5837] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 977.740775][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 977.741935][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 977.741989][ T5837] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 977.742035][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 977.743155][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 977.743209][ T5837] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 977.743243][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 977.744367][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 977.744420][ T5837] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 977.744448][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 977.745590][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 977.745644][ T5837] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 977.745689][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 977.748686][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 977.748741][ T5837] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 977.748770][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 977.872779][ T5608] Bluetooth: hci4: command tx timeout [ 977.964735][ T5837] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 977.964768][ T5837] usb 5-1: Product: syz [ 977.964785][ T5837] usb 5-1: Manufacturer: syz [ 977.964801][ T5837] usb 5-1: SerialNumber: syz [ 978.003123][ T5837] usb 5-1: config 0 descriptor?? [ 978.117306][ T5837] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 978.240075][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 978.332388][ T5837] usb 5-1: USB disconnect, device number 5 [ 978.412691][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 978.415258][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 978.415293][ T10] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 978.415355][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.502415][ T5837] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 978.791321][ T10] usb 3-1: USB disconnect, device number 4 [ 979.094653][T14600] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.094890][T14600] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.095090][T14600] bridge_slave_0: entered allmulticast mode [ 979.123599][T14600] bridge_slave_0: entered promiscuous mode [ 979.481070][T14798] smpboot: CPU 1 is now offline [ 984.056154][ C0] ------------[ cut here ]------------ [ 984.056168][ C0] cpu_t != t [ 984.056182][ C0] WARNING: arch/x86/kernel/cpu/mce/core.c:1770 at mce_timer_fn+0x23f/0x280, CPU#0: ktimers/0/16 [ 984.082376][ C0] Modules linked in: [ 984.086281][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 984.097421][ C0] Tainted: [L]=SOFTLOCKUP [ 984.101766][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 984.111861][ C0] RIP: 0010:mce_timer_fn+0x23f/0x280 [ 984.117156][ C0] Code: 00 75 0a e8 63 b3 55 00 e9 16 ff ff ff e8 59 b3 55 00 4c 8b 1d b2 f4 8e 0d 2e 2e 2e 41 ff d3 e9 ff fe ff ff e8 42 b3 55 00 90 <0f> 0b 90 e9 33 fe ff ff e8 34 b3 55 00 48 c7 c7 a0 21 00 8f 4c 89 [ 984.136807][ C0] RSP: 0018:ffffc90000157a08 EFLAGS: 00010246 [ 984.142903][ C0] RAX: ffffffff817126be RBX: ffff8880b85234a0 RCX: ffff88801dab8000 [ 984.150901][ C0] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000100 [ 984.158872][ C0] RBP: 0000000000000000 R08: 0000000000000100 R09: 0000000000000100 [ 984.166869][ C0] R10: dffffc0000000000 R11: ffffffff81712480 R12: 0000000000000000 [ 984.174871][ C0] R13: dffffc0000000000 R14: ffffffff8db7b7d0 R15: ffff8880b85234a0 [ 984.182865][ C0] FS: 0000000000000000(0000) GS:ffff8881249bb000(0000) knlGS:0000000000000000 [ 984.191834][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 984.198419][ C0] CR2: 00007f2c3302bc40 CR3: 0000000040eda000 CR4: 00000000003526f0 [ 984.206419][ C0] Call Trace: [ 984.209756][ C0] [ 984.212692][ C0] call_timer_fn+0x18d/0x5f0 [ 984.217294][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 984.222345][ C0] ? call_timer_fn+0xd5/0x5f0 [ 984.227019][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 984.232166][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 984.237378][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 984.242430][ C0] __run_timer_base+0x67b/0x9b0 [ 984.247324][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 984.252737][ C0] ? lock_acquire+0x115/0x350 [ 984.257429][ C0] run_timer_softirq+0x67/0x170 [ 984.262309][ C0] handle_softirqs+0x1da/0x6d0 [ 984.267093][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 984.272151][ C0] run_ktimerd+0x6a/0x100 [ 984.276512][ C0] smpboot_thread_fn+0x565/0xa70 [ 984.281488][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 984.286530][ C0] kthread+0x38b/0x470 [ 984.290629][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 984.296100][ C0] ? __pfx_kthread+0x10/0x10 [ 984.300731][ C0] ret_from_fork+0x514/0xb70 [ 984.305330][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 984.310499][ C0] ? __switch_to+0xc89/0x1420 [ 984.315189][ C0] ? __pfx_kthread+0x10/0x10 [ 984.319812][ C0] ret_from_fork_asm+0x1a/0x30 [ 984.324597][ C0] [ 984.327616][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 984.334895][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 984.346001][ C0] Tainted: [L]=SOFTLOCKUP [ 984.350320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 984.360371][ C0] Call Trace: [ 984.363647][ C0] [ 984.366579][ C0] vpanic+0x56d/0xa60 [ 984.370564][ C0] ? __pfx__printk+0x10/0x10 [ 984.375174][ C0] ? __pfx_vpanic+0x10/0x10 [ 984.379675][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 984.384986][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 984.390210][ C0] panic+0xc5/0xd0 [ 984.393933][ C0] ? __pfx_panic+0x10/0x10 [ 984.398357][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 984.403314][ C0] __warn+0x315/0x4c0 [ 984.407294][ C0] ? mce_timer_fn+0x23f/0x280 [ 984.411978][ C0] ? mce_timer_fn+0x23f/0x280 [ 984.416656][ C0] __report_bug+0x276/0x570 [ 984.421177][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 984.426558][ C0] ? mce_timer_fn+0x23f/0x280 [ 984.431237][ C0] ? __pfx___report_bug+0x10/0x10 [ 984.436272][ C0] ? add_lock_to_list+0xc7/0x100 [ 984.441211][ C0] ? lockdep_unlock+0x5c/0xd0 [ 984.445890][ C0] ? __lock_acquire+0x1511/0x2de0 [ 984.450931][ C0] ? mce_timer_fn+0x23f/0x280 [ 984.455609][ C0] report_bug+0x16b/0x220 [ 984.459950][ C0] ? mce_timer_fn+0x23f/0x280 [ 984.464628][ C0] ? mce_timer_fn+0x241/0x280 [ 984.469303][ C0] handle_bug+0x9c/0x200 [ 984.473549][ C0] exc_invalid_op+0x1a/0x50 [ 984.478051][ C0] asm_exc_invalid_op+0x1a/0x20 [ 984.482914][ C0] RIP: 0010:mce_timer_fn+0x23f/0x280 [ 984.488205][ C0] Code: 00 75 0a e8 63 b3 55 00 e9 16 ff ff ff e8 59 b3 55 00 4c 8b 1d b2 f4 8e 0d 2e 2e 2e 41 ff d3 e9 ff fe ff ff e8 42 b3 55 00 90 <0f> 0b 90 e9 33 fe ff ff e8 34 b3 55 00 48 c7 c7 a0 21 00 8f 4c 89 [ 984.507810][ C0] RSP: 0018:ffffc90000157a08 EFLAGS: 00010246 [ 984.513881][ C0] RAX: ffffffff817126be RBX: ffff8880b85234a0 RCX: ffff88801dab8000 [ 984.521854][ C0] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000100 [ 984.529827][ C0] RBP: 0000000000000000 R08: 0000000000000100 R09: 0000000000000100 [ 984.537794][ C0] R10: dffffc0000000000 R11: ffffffff81712480 R12: 0000000000000000 [ 984.545764][ C0] R13: dffffc0000000000 R14: ffffffff8db7b7d0 R15: ffff8880b85234a0 [ 984.553743][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 984.558770][ C0] ? mce_timer_fn+0x23e/0x280 [ 984.563452][ C0] ? mce_timer_fn+0x23e/0x280 [ 984.568146][ C0] call_timer_fn+0x18d/0x5f0 [ 984.572740][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 984.577768][ C0] ? call_timer_fn+0xd5/0x5f0 [ 984.582446][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 984.587569][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 984.592778][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 984.597804][ C0] __run_timer_base+0x67b/0x9b0 [ 984.602676][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 984.608062][ C0] ? lock_acquire+0x115/0x350 [ 984.612753][ C0] run_timer_softirq+0x67/0x170 [ 984.617622][ C0] handle_softirqs+0x1da/0x6d0 [ 984.622405][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 984.627438][ C0] run_ktimerd+0x6a/0x100 [ 984.631776][ C0] smpboot_thread_fn+0x565/0xa70 [ 984.636723][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 984.641767][ C0] kthread+0x38b/0x470 [ 984.645837][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 984.651306][ C0] ? __pfx_kthread+0x10/0x10 [ 984.655902][ C0] ret_from_fork+0x514/0xb70 [ 984.660496][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 984.665607][ C0] ? __switch_to+0xc89/0x1420 [ 984.670309][ C0] ? __pfx_kthread+0x10/0x10 [ 984.674902][ C0] ret_from_fork_asm+0x1a/0x30 [ 984.679678][ C0] [ 984.682774][ C0] Kernel Offset: disabled [ 984.687101][ C0] Rebooting in 86400 seconds..