last executing test programs: 7m44.868984693s ago: executing program 0 (id=340): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44410}, 0x0) 7m44.532753042s ago: executing program 0 (id=342): io_uring_setup(0xdac, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m44.195180277s ago: executing program 0 (id=344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000ac0), &(0x7f0000000b00)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="e07b292fe079989cb9547ed387db", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m43.067098916s ago: executing program 0 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0/../file0\x00', 0x240) 7m42.681762078s ago: executing program 0 (id=349): pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x0, 0x1dd7}}, 0x28) 7m40.724522381s ago: executing program 0 (id=366): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4050000640000006910a40000000000bc0010000000000095"], 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000540), &(0x7f0000000700)=r1}, 0x3d) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) 7m39.778103781s ago: executing program 32 (id=366): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4050000640000006910a40000000000bc0010000000000095"], 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000540), &(0x7f0000000700)=r1}, 0x3d) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) 6m21.226596689s ago: executing program 5 (id=951): pipe2(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fcntl$setpipe(r1, 0x407, 0xb) creat(&(0x7f0000001100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x80, &(0x7f00000011c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 6m19.842078303s ago: executing program 5 (id=958): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x205}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) unshare(0x20040400) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb70}, 0x94) 6m18.199492062s ago: executing program 5 (id=968): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) close(0x4) 6m17.660659069s ago: executing program 5 (id=970): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8, 0x0, 0x1, 0xd0, 0x6, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1000, 0x1000, 0x7ffe, 0x0, 0x2a, 0x4, 0xe0}, 0x9c) 6m15.509470046s ago: executing program 5 (id=980): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000001600)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000001540)={0x0, 0x1, 0x0, 0xfffffffc, 0x255}, &(0x7f00000012c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x0, 0x1, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4b7, 0x0, 0x3, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff7, 0xe0f, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006d80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x11, 0x29, 0x37, 0x8}}], 0x18}}], 0x1, 0x0) 6m13.544401636s ago: executing program 5 (id=985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000280)=""/15, 0x13}], 0x1d) 6m12.035356979s ago: executing program 4 (id=990): r0 = gettid() r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r1, &(0x7f0000000b80)="eb67b6617c0ac0e0f32319996c82fb8df152e186a59b9ccf0dfdf4a5808a4286285890d91d56577b18c8d1da033f2d602e1ec2e43ab041cb5d7a2bb3b956971e96b983a2d73676f32945e25a174f25b95b9731c8e7686ad58fae8c22f7e0762b60efd870a45e7740a02b199cf4b82b3222c5ff2cd7ced4422b2df6e34ee52a1de48cab715abc351029d781", 0xffffffaa) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) close(r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 6m11.547898364s ago: executing program 4 (id=994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", "697e0100", "f02a681cb6f1bd06"}, 0x28) recvfrom$inet6(r0, &(0x7f00000006c0)=""/205, 0xfffffffffffffd95, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 6m10.641570898s ago: executing program 4 (id=997): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xf79, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x2, 0x32}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m9.537772497s ago: executing program 4 (id=1003): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x2, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2001}, 0x0) 6m7.989455302s ago: executing program 4 (id=1010): ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0x7, 0x450c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f0000000000)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6m6.108168666s ago: executing program 4 (id=1017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5m58.327169176s ago: executing program 33 (id=985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000280)=""/15, 0x13}], 0x1d) 5m50.495893539s ago: executing program 34 (id=1017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3m35.715511271s ago: executing program 1 (id=1267): syz_open_dev$radio(0x0, 0x0, 0x2) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x2d5, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x81}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20008000, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0x258}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x9, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 3m34.265423992s ago: executing program 1 (id=1270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) 3m33.508078755s ago: executing program 1 (id=1272): prlimit64(0x0, 0x1, &(0x7f0000000040)={0x6, 0x83}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x100000000000020, 0x2000, 0x2f93) 3m32.615008951s ago: executing program 1 (id=1274): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, {@loopback, 0x4e20, 0x1, 0x1}}, 0x44) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x1000) 3m31.537876084s ago: executing program 1 (id=1277): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ptrace(0x10, r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000b40), 0x0, 0x82000) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000b80)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) 3m27.922434328s ago: executing program 1 (id=1283): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x20000022, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0}]) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 3m22.451594782s ago: executing program 2 (id=1292): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4002080) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f0000000840)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3m21.936854392s ago: executing program 2 (id=1293): r0 = syz_ublk_setup_io_uring(0x57c, &(0x7f0000000500)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x200009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x43c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a0}}}, 0x0) 3m20.57211732s ago: executing program 2 (id=1294): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000001c0)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000240)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 3m13.172643162s ago: executing program 2 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000440)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000004c0)={0x2001}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000540)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file7/file5\x00', 0x0) 3m12.510120861s ago: executing program 35 (id=1283): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x20000022, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0}]) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 3m12.062775633s ago: executing program 2 (id=1299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001f40)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000001f80)={&(0x7f0000001fc0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000002040)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000002080)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000020c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) shutdown(r1, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002240)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 3m11.838683308s ago: executing program 2 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000b00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000c40)={'wlan0\x00', 0x1}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2m56.4059951s ago: executing program 36 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000b00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000c40)={'wlan0\x00', 0x1}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 26.236910405s ago: executing program 3 (id=1389): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x17b}) 24.558688731s ago: executing program 3 (id=1390): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x4) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x47b4, 0xc}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 22.655470231s ago: executing program 3 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r2, &(0x7f00000000c0)=[{0x1, 0xff80, 0x1400}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 22.253716065s ago: executing program 3 (id=1392): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) close(0x3) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xf05, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1020fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x183, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 18.104510693s ago: executing program 3 (id=1393): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000480)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000500)={0x1, 0x0, 0x3, 0x2000000000000000}) fcntl$lock(r2, 0x26, &(0x7f0000000540)={0x1, 0x0, 0x1, 0xffffffffffffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fcntl$lock(r1, 0x26, &(0x7f0000000600)={0x0, 0x0, 0x9, 0x9}) close_range(r3, 0xffffffffffffffff, 0x0) 15.87794076s ago: executing program 3 (id=1394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "afa397cd7dc38c1c", "c6aeb0e1b029650f8d6b62e2970eb03b471a9d883145143b8b92be1d8382c189", "bda4343c", "ffe37916596e91bd"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="c62ee5d6a8ec1dc4f4d714ffff87cb40ff", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 0s ago: executing program 37 (id=1394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "afa397cd7dc38c1c", "c6aeb0e1b029650f8d6b62e2970eb03b471a9d883145143b8b92be1d8382c189", "bda4343c", "ffe37916596e91bd"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="c62ee5d6a8ec1dc4f4d714ffff87cb40ff", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) kernel console output (not intermixed with test programs): 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.805939][ T6524] RSP: 002b:00007fe1e193dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.805960][ T6524] RAX: ffffffffffffffda RBX: 00007fe1e193e6c0 RCX: 00007fe1e36afd8e [ 135.805974][ T6524] RDX: 0000000000000002 RSI: 00007fe1e193df90 RDI: ffffffffffffff9c [ 135.805987][ T6524] RBP: 00007fe1e3786b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.805999][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.806010][ T6524] R13: 00007fe1e3976038 R14: 00007fe1e3975fa0 R15: 00007ffe0a13f548 [ 135.806041][ T6524] [ 136.507611][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 136.507637][ T36] audit: type=1326 audit(1792650887.202:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 136.507678][ T36] audit: type=1326 audit(1792650887.202:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 136.575950][ T36] audit: type=1326 audit(1792650887.262:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 136.576002][ T36] audit: type=1326 audit(1792650887.262:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 136.576038][ T36] audit: type=1326 audit(1792650887.262:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 136.593626][ T36] audit: type=1326 audit(1792650887.282:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 136.599130][ T36] audit: type=1326 audit(1792650887.292:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 136.602057][ T36] audit: type=1326 audit(1792650887.292:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 136.611006][ T36] audit: type=1326 audit(1792650887.302:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 136.622670][ T36] audit: type=1326 audit(1792650887.302:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.0.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808bbcf559 code=0x7ffc0000 [ 137.764902][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 137.765058][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 137.770169][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 137.770197][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 138.351284][ T6589] mmap: syz.1.231 (6589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.384209][ T6588] vcan0: tx address claim with dlc 0 [ 138.792886][ T6602] FAULT_INJECTION: forcing a failure. [ 138.792886][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.792922][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.792944][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.792955][ T6602] Call Trace: [ 138.792963][ T6602] [ 138.792972][ T6602] dump_stack_lvl+0xe8/0x150 [ 138.793005][ T6602] should_fail_ex+0x46b/0x600 [ 138.793033][ T6602] _copy_to_user+0x31/0xb0 [ 138.793058][ T6602] bpf_verifier_vlog+0x606/0x900 [ 138.793094][ T6602] btf_verifier_log+0x11d/0x1a0 [ 138.793119][ T6602] ? __pfx_btf_verifier_log+0x10/0x10 [ 138.793136][ T6602] ? __btf_verifier_log+0xe2/0x140 [ 138.793159][ T6602] ? __pfx___btf_verifier_log+0x10/0x10 [ 138.793182][ T6602] btf_func_proto_log+0x274/0x840 [ 138.793214][ T6602] __btf_verifier_log_type+0x45d/0x6a0 [ 138.793246][ T6602] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 138.793275][ T6602] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 138.793296][ T6602] btf_func_proto_check_meta+0xf4/0x160 [ 138.793322][ T6602] btf_check_all_metas+0x344/0xa30 [ 138.793351][ T6602] btf_parse_type_sec+0xfb/0x1950 [ 138.793374][ T6602] ? __pfx___btf_verifier_log+0x10/0x10 [ 138.793404][ T6602] ? __pfx_btf_check_sec_info+0x10/0x10 [ 138.793432][ T6602] ? btf_parse_hdr+0x5f2/0x810 [ 138.793447][ T6602] ? btf_parse_str_sec+0x244/0x2f0 [ 138.793470][ T6602] btf_new_fd+0x3e0/0x8f0 [ 138.793498][ T6602] __sys_bpf+0xd2e/0xd90 [ 138.793531][ T6602] ? __pfx___sys_bpf+0x10/0x10 [ 138.793558][ T6602] ? do_futex+0x3e7/0x4e0 [ 138.793611][ T6602] ? rcu_is_watching+0x16/0xb0 [ 138.793642][ T6602] __x64_sys_bpf+0xba/0xd0 [ 138.793667][ T6602] do_syscall_64+0x166/0x520 [ 138.793694][ T6602] ? trace_irq_disable+0x3b/0x140 [ 138.793716][ T6602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.793735][ T6602] ? clear_bhb_loop+0x70/0xc0 [ 138.793758][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.793776][ T6602] RIP: 0033:0x7fd3dc69f559 [ 138.793795][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.793810][ T6602] RSP: 002b:00007fd3da8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.793833][ T6602] RAX: ffffffffffffffda RBX: 00007fd3dc925fa0 RCX: 00007fd3dc69f559 [ 138.793847][ T6602] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 138.793859][ T6602] RBP: 00007fd3dc736b20 R08: 0000000000000000 R09: 0000000000000000 [ 138.793872][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.793883][ T6602] R13: 00007fd3dc926038 R14: 00007fd3dc925fa0 R15: 00007ffd0d3440d8 [ 138.793915][ T6602] [ 138.953292][ T6601] batadv_slave_1: entered promiscuous mode [ 139.038706][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 139.038887][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.210633][ T6601] batadv_slave_1 (unregistering): left promiscuous mode [ 139.210727][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.065672][ T6659] FAULT_INJECTION: forcing a failure. [ 141.065672][ T6659] name failslab, interval 1, probability 0, space 0, times 0 [ 141.065705][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.0.265 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.065726][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.065736][ T6659] Call Trace: [ 141.065744][ T6659] [ 141.065753][ T6659] dump_stack_lvl+0xe8/0x150 [ 141.065785][ T6659] should_fail_ex+0x46b/0x600 [ 141.065809][ T6659] should_failslab+0xa8/0x100 [ 141.065853][ T6659] __kmalloc_cache_noprof+0x9c/0x670 [ 141.065877][ T6659] ? device_create+0x13d/0x300 [ 141.065899][ T6659] ? device_create+0x13d/0x300 [ 141.065928][ T6659] device_create+0x13d/0x300 [ 141.065960][ T6659] ? __pfx_device_create+0x10/0x10 [ 141.065998][ T6659] bdi_register_va+0x9c/0x7d0 [ 141.066024][ T6659] super_setup_bdi_name+0xf8/0x210 [ 141.066047][ T6659] ? __pfx_afs_set_super+0x10/0x10 [ 141.066076][ T6659] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 141.066107][ T6659] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 141.066132][ T6659] ? afs_get_tree+0x3b9/0x12c0 [ 141.066161][ T6659] afs_get_tree+0xa40/0x12c0 [ 141.066184][ T6659] ? safesetid_security_capable+0xa9/0x1a0 [ 141.066216][ T6659] vfs_get_tree+0x92/0x2a0 [ 141.066240][ T6659] do_new_mount+0x325/0xb00 [ 141.066259][ T6659] ? cap_capable+0x123/0x460 [ 141.066289][ T6659] ? __pfx_do_new_mount+0x10/0x10 [ 141.066311][ T6659] ? ns_capable+0x84/0xe0 [ 141.066333][ T6659] ? path_mount+0x647/0x1050 [ 141.066355][ T6659] ? user_path_at+0xd4/0x160 [ 141.066378][ T6659] __se_sys_mount+0x31d/0x420 [ 141.066399][ T6659] ? preempt_schedule_thunk+0x16/0x40 [ 141.066422][ T6659] ? __pfx___se_sys_mount+0x10/0x10 [ 141.066448][ T6659] ? __x64_sys_mount+0x20/0xc0 [ 141.066470][ T6659] do_syscall_64+0x166/0x520 [ 141.066497][ T6659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.066517][ T6659] ? clear_bhb_loop+0x70/0xc0 [ 141.066542][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.066561][ T6659] RIP: 0033:0x7f808bbcf559 [ 141.066582][ T6659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.066597][ T6659] RSP: 002b:00007f8089e26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.066617][ T6659] RAX: ffffffffffffffda RBX: 00007f808be55fa0 RCX: 00007f808bbcf559 [ 141.066632][ T6659] RDX: 0000200000000280 RSI: 00002000000000c0 RDI: 0000000000000000 [ 141.066644][ T6659] RBP: 00007f808bc66b20 R08: 00002000000002c0 R09: 0000000000000000 [ 141.066657][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.066668][ T6659] R13: 00007f808be56038 R14: 00007f808be55fa0 R15: 00007ffd1ca2e638 [ 141.066700][ T6659] [ 141.501844][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 142.412957][ T6692] FAULT_INJECTION: forcing a failure. [ 142.412957][ T6692] name failslab, interval 1, probability 0, space 0, times 0 [ 142.412995][ T6692] CPU: 1 UID: 0 PID: 6692 Comm: syz.2.278 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.413018][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.413029][ T6692] Call Trace: [ 142.413037][ T6692] [ 142.413045][ T6692] dump_stack_lvl+0xe8/0x150 [ 142.413079][ T6692] should_fail_ex+0x46b/0x600 [ 142.413107][ T6692] should_failslab+0xa8/0x100 [ 142.413139][ T6692] __kmalloc_cache_noprof+0x9c/0x670 [ 142.413165][ T6692] ? kvm_set_irq_routing+0x18d/0xd10 [ 142.413190][ T6692] ? kvm_set_irq_routing+0x18d/0xd10 [ 142.413222][ T6692] kvm_set_irq_routing+0x18d/0xd10 [ 142.413270][ T6692] kvm_arch_vm_ioctl+0x175c/0x1a10 [ 142.413301][ T6692] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 142.413323][ T6692] ? __lock_acquire+0x747/0x2de0 [ 142.413354][ T6692] ? __lock_acquire+0x747/0x2de0 [ 142.413399][ T6692] ? lock_acquire+0x115/0x350 [ 142.413428][ T6692] ? lock_acquire+0x115/0x350 [ 142.413457][ T6692] ? is_bpf_text_address+0x26/0x2b0 [ 142.413487][ T6692] ? is_bpf_text_address+0x292/0x2b0 [ 142.413512][ T6692] ? is_bpf_text_address+0x26/0x2b0 [ 142.413541][ T6692] ? kernel_text_address+0xa5/0xe0 [ 142.413561][ T6692] ? __kernel_text_address+0xd/0x30 [ 142.413578][ T6692] ? unwind_get_return_address+0x4d/0x90 [ 142.413600][ T6692] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 142.413622][ T6692] ? arch_stack_walk+0xfb/0x150 [ 142.413656][ T6692] ? stack_trace_save+0xa9/0x100 [ 142.413676][ T6692] ? __pfx_stack_trace_save+0x10/0x10 [ 142.413694][ T6692] ? kasan_save_track+0x4f/0x80 [ 142.413721][ T6692] ? stack_depot_save_flags+0x33/0x7f0 [ 142.413741][ T6692] ? __lock_acquire+0x747/0x2de0 [ 142.413764][ T6692] ? kasan_save_track+0x4f/0x80 [ 142.413786][ T6692] ? kasan_save_track+0x3e/0x80 [ 142.413808][ T6692] ? kasan_save_free_info+0x40/0x50 [ 142.413827][ T6692] ? __kasan_slab_free+0x5c/0x80 [ 142.413849][ T6692] ? kfree+0x1c5/0x6d0 [ 142.413868][ T6692] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 142.413892][ T6692] ? security_file_ioctl+0xc3/0x2a0 [ 142.413917][ T6692] ? __se_sys_ioctl+0x47/0x170 [ 142.413939][ T6692] ? do_syscall_64+0x166/0x520 [ 142.413964][ T6692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.414001][ T6692] kvm_vm_ioctl+0x8fa/0xd30 [ 142.414023][ T6692] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 142.414061][ T6692] ? kasan_quarantine_put+0xbb/0x1f0 [ 142.414095][ T6692] ? tomoyo_path_number_perm+0x219/0x5f0 [ 142.414122][ T6692] ? tomoyo_path_number_perm+0x219/0x5f0 [ 142.414151][ T6692] ? do_vfs_ioctl+0x1184/0x1550 [ 142.414177][ T6692] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 142.414215][ T6692] ? do_futex+0x3e7/0x4e0 [ 142.414244][ T6692] ? __asan_memset+0x22/0x50 [ 142.414275][ T6692] ? smack_file_ioctl+0x335/0x370 [ 142.414304][ T6692] ? __pfx_smack_file_ioctl+0x10/0x10 [ 142.414339][ T6692] ? __fget_files+0x2a/0x420 [ 142.414360][ T6692] ? __fget_files+0x2a/0x420 [ 142.414382][ T6692] ? bpf_lsm_file_ioctl+0x9/0x20 [ 142.414402][ T6692] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 142.414420][ T6692] __se_sys_ioctl+0xff/0x170 [ 142.414447][ T6692] do_syscall_64+0x166/0x520 [ 142.414473][ T6692] ? trace_irq_disable+0x3b/0x140 [ 142.414494][ T6692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.414512][ T6692] ? clear_bhb_loop+0x70/0xc0 [ 142.414534][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.414553][ T6692] RIP: 0033:0x7fd3dc69f559 [ 142.414572][ T6692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.414587][ T6692] RSP: 002b:00007fd3da8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.414607][ T6692] RAX: ffffffffffffffda RBX: 00007fd3dc925fa0 RCX: 00007fd3dc69f559 [ 142.414621][ T6692] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 142.414632][ T6692] RBP: 00007fd3dc736b20 R08: 0000000000000000 R09: 0000000000000000 [ 142.414644][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.414655][ T6692] R13: 00007fd3dc926038 R14: 00007fd3dc925fa0 R15: 00007ffd0d3440d8 [ 142.414686][ T6692] [ 142.728636][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 146.162153][ T6773] veth2: entered promiscuous mode [ 146.162180][ T6773] veth2: entered allmulticast mode [ 146.572557][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 147.070532][ T6789] process 'syz.2.314' launched '/dev/fd/6' with NULL argv: empty string added [ 149.013877][ T6817] syz.1.325 (6817) used greatest stack depth: 16968 bytes left [ 149.946592][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 150.086212][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 152.157376][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 152.157395][ T36] audit: type=1326 audit(1792650902.842:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 152.157436][ T36] audit: type=1326 audit(1792650902.852:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 152.161736][ T36] audit: type=1326 audit(1792650902.852:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 152.161779][ T36] audit: type=1326 audit(1792650902.852:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 152.161810][ T36] audit: type=1326 audit(1792650902.852:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 152.162442][ T36] audit: type=1326 audit(1792650902.852:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 152.162479][ T36] audit: type=1326 audit(1792650902.852:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 152.164720][ T36] audit: type=1326 audit(1792650902.852:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 152.235362][ T36] audit: type=1326 audit(1792650902.922:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 152.235409][ T36] audit: type=1326 audit(1792650902.922:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.4.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e36ef559 code=0x7ffc0000 [ 155.583516][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 155.775243][ T6073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.882528][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.947352][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.957276][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.979297][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.981543][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.309290][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 156.309325][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 156.423629][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 156.423664][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 156.437418][ T1017] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.440152][ T68] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.440207][ T68] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.440239][ T68] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.802559][ T6073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.837950][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 157.263483][ T13] IPVS: starting estimator thread 0... [ 157.385742][ T6977] IPVS: using max 8 ests per chain, 19200 per kthread [ 157.414914][ T6073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.840515][ T35] kernel write not supported for file bpf-prog (pid: 35 comm: kworker/1:1) [ 158.111175][ T61] Bluetooth: hci4: command tx timeout [ 158.534798][ T6073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.763297][ T6943] rxe_eth0 speed is unknown, defaulting to 1000 [ 160.185699][ T61] Bluetooth: hci4: command tx timeout [ 160.317049][ T6073] bridge_slave_1: left allmulticast mode [ 160.317165][ T6073] bridge_slave_1: left promiscuous mode [ 160.343594][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.629244][ T6073] bridge_slave_0: left allmulticast mode [ 160.629279][ T6073] bridge_slave_0: left promiscuous mode [ 160.649511][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.680276][ T7047] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.408'. [ 160.892057][ T6073] batman_adv: batadv0: Interface deactivated: gretap1 [ 162.045020][ T6073] batman_adv: batadv0: Removing interface: gretap1 [ 162.265749][ T61] Bluetooth: hci4: command tx timeout [ 162.466244][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.546348][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.596456][ T6073] bond0 (unregistering): Released all slaves [ 162.630330][ T7072] FAULT_INJECTION: forcing a failure. [ 162.630330][ T7072] name failslab, interval 1, probability 0, space 0, times 0 [ 162.630352][ T7072] CPU: 0 UID: 60928 PID: 7072 Comm: syz.4.419 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.630364][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.630370][ T7072] Call Trace: [ 162.630375][ T7072] [ 162.630381][ T7072] dump_stack_lvl+0xe8/0x150 [ 162.630401][ T7072] should_fail_ex+0x46b/0x600 [ 162.630416][ T7072] should_failslab+0xa8/0x100 [ 162.630434][ T7072] __kmalloc_cache_noprof+0x9c/0x670 [ 162.630449][ T7072] ? key_user_lookup+0x143/0x460 [ 162.630459][ T7072] ? key_user_lookup+0x143/0x460 [ 162.630488][ T7072] key_user_lookup+0x143/0x460 [ 162.630501][ T7072] key_alloc+0x129/0xfe0 [ 162.630513][ T7072] ? __pfx_key_default_cmp+0x10/0x10 [ 162.630528][ T7072] keyring_alloc+0x45/0xb0 [ 162.630542][ T7072] look_up_user_keyrings+0x376/0x670 [ 162.630556][ T7072] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 162.630568][ T7072] ? futex_unqueue+0x22/0x240 [ 162.630583][ T7072] ? lookup_user_key+0xd4/0x12f0 [ 162.630595][ T7072] lookup_user_key+0x36d/0x12f0 [ 162.630610][ T7072] ? __pfx_lookup_user_key+0x10/0x10 [ 162.630621][ T7072] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 162.630636][ T7072] ? try_to_wake_up+0x854/0x1430 [ 162.630653][ T7072] keyctl_get_persistent+0x235/0x7b0 [ 162.630669][ T7072] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 162.630680][ T7072] ? futex_wait+0x2a2/0x390 [ 162.630691][ T7072] ? __pfx_futex_wait+0x10/0x10 [ 162.630707][ T7072] ? fput+0xa0/0xd0 [ 162.630723][ T7072] __se_sys_keyctl+0x83e/0xbc0 [ 162.630739][ T7072] ? __pfx___se_sys_keyctl+0x10/0x10 [ 162.630755][ T7072] ? __pfx_do_futex+0x10/0x10 [ 162.630773][ T7072] ? __se_sys_futex+0x3a8/0x450 [ 162.630790][ T7072] ? rcu_is_watching+0x16/0xb0 [ 162.630807][ T7072] ? __x64_sys_keyctl+0x20/0xc0 [ 162.630822][ T7072] do_syscall_64+0x166/0x520 [ 162.630836][ T7072] ? trace_irq_disable+0x3b/0x140 [ 162.630848][ T7072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.630859][ T7072] ? clear_bhb_loop+0x70/0xc0 [ 162.630872][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.630882][ T7072] RIP: 0033:0x7fe1e36ef559 [ 162.630893][ T7072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.630901][ T7072] RSP: 002b:00007fe1e193e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 162.630913][ T7072] RAX: ffffffffffffffda RBX: 00007fe1e3975fa0 RCX: 00007fe1e36ef559 [ 162.630920][ T7072] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 162.630926][ T7072] RBP: 00007fe1e3786b20 R08: 0000000000000000 R09: 0000000000000000 [ 162.630933][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.630938][ T7072] R13: 00007fe1e3976038 R14: 00007fe1e3975fa0 R15: 00007ffe0a13f548 [ 162.630956][ T7072] [ 163.770987][ T7097] netlink: 'syz.4.428': attribute type 5 has an invalid length. [ 164.346524][ T61] Bluetooth: hci4: command tx timeout [ 164.568612][ T36] kauditd_printk_skb: 176 callbacks suppressed [ 164.568631][ T36] audit: type=1326 audit(1792650915.262:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 164.568672][ T36] audit: type=1326 audit(1792650915.262:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 164.571657][ T36] audit: type=1326 audit(1792650915.262:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 164.572122][ T36] audit: type=1326 audit(1792650915.262:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 164.572162][ T36] audit: type=1326 audit(1792650915.262:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 164.661164][ T36] audit: type=1326 audit(1792650915.352:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 164.661692][ T36] audit: type=1326 audit(1792650915.352:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3dc69f2c2 code=0x7ffc0000 [ 165.001960][ T5245] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.209127][ T7145] syz.3.442 uses obsolete (PF_INET,SOCK_PACKET) [ 165.334438][ T36] audit: type=1326 audit(1792650916.022:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 165.334484][ T36] audit: type=1326 audit(1792650916.022:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd3dc69f357 code=0x7ffc0000 [ 165.334617][ T36] audit: type=1326 audit(1792650916.022:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.2.440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 165.505225][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 165.650457][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.650682][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.650892][ T6943] bridge_slave_0: entered allmulticast mode [ 165.669512][ T6943] bridge_slave_0: entered promiscuous mode [ 165.951662][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.951781][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.951974][ T6943] bridge_slave_1: entered allmulticast mode [ 165.953371][ T6943] bridge_slave_1: entered promiscuous mode [ 166.719907][ T6943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.814786][ T6943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.053336][ T6943] team0: Port device team_slave_0 added [ 167.170968][ T6943] team0: Port device team_slave_1 added [ 167.962926][ T7198] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 168.537944][ T7198] bond0 (unregistering): Released all slaves [ 168.679632][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.679649][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.679671][ T6943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.930053][ T5245] 8021q: adding VLAN 0 to HW filter on device eth2 [ 168.940622][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.940638][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.944408][ T6943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.364834][ T6073] hsr_slave_0: left promiscuous mode [ 169.409684][ T6073] hsr_slave_1: left promiscuous mode [ 169.416589][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.416616][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.495869][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.495896][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.873120][ T6073] veth1_macvtap: left promiscuous mode [ 169.873488][ T6073] veth0_macvtap: left promiscuous mode [ 169.884118][ T6073] veth1_vlan: left promiscuous mode [ 169.903170][ T6073] veth0_vlan: left promiscuous mode [ 171.476152][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 171.526169][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 171.759135][ T7279] syz_tun: entered allmulticast mode [ 171.775778][ T7277] syz_tun: left allmulticast mode [ 172.047594][ T6943] hsr_slave_0: entered promiscuous mode [ 172.050512][ T6943] hsr_slave_1: entered promiscuous mode [ 172.051841][ T6943] debugfs: 'hsr0' already exists in 'hsr' [ 172.051865][ T6943] Cannot create hsr debugfs directory [ 173.377555][ T7320] 9p: Bad value for 'wfdno' [ 173.420649][ T5245] 8021q: adding VLAN 0 to HW filter on device eth3 [ 174.449295][ T6943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.622357][ T6943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.636146][ T6943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.794433][ T6943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.008583][ T7372] bond0: (slave team0): Releasing backup interface [ 175.235298][ T7372] bridge_slave_0: left allmulticast mode [ 175.235332][ T7372] bridge_slave_0: left promiscuous mode [ 175.281829][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.413755][ T7372] bridge_slave_1: left allmulticast mode [ 176.413789][ T7372] bridge_slave_1: left promiscuous mode [ 176.414011][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.434356][ T7372] bond0: (slave bond_slave_0): Releasing backup interface [ 177.637893][ T7372] bond0: (slave bond_slave_1): Releasing backup interface [ 178.001517][ T7372] team0: Port device team_slave_0 removed [ 178.053043][ T7372] team0: Port device team_slave_1 removed [ 178.053570][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.053585][ T7372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.099603][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.099623][ T7372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.131542][ T7372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.133963][ T6943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.209490][ T6943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.238032][ T7373] team0: Port device xfrm0 added [ 178.243863][ T5245] 8021q: adding VLAN 0 to HW filter on device eth4 [ 178.457736][ T6943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.470795][ T7426] ======================================================= [ 178.470795][ T7426] WARNING: The mand mount option has been deprecated and [ 178.470795][ T7426] and is ignored by this kernel. Remove the mand [ 178.470795][ T7426] option from the mount to silence this warning. [ 178.470795][ T7426] ======================================================= [ 178.638905][ T6943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.467446][ T7447] fuse: Bad value for 'fd' [ 180.497706][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.642901][ T6943] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.690606][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.690737][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.734560][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.734639][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.113161][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.612184][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 184.156892][ T6943] veth0_vlan: entered promiscuous mode [ 184.214201][ T6943] veth1_vlan: entered promiscuous mode [ 184.318851][ T6943] veth0_macvtap: entered promiscuous mode [ 184.334287][ T6943] veth1_macvtap: entered promiscuous mode [ 184.364398][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.389402][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.576665][ T6069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.743119][ T6069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.962002][ T2941] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.962400][ T2941] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.502037][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.502059][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.575096][ T7584] netlink: 'syz.2.575': attribute type 4 has an invalid length. [ 185.627355][ T7584] netlink: 'syz.2.575': attribute type 4 has an invalid length. [ 185.632787][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 185.762461][ T7585] gretap0: entered promiscuous mode [ 185.775172][ T7585] macvtap1: entered promiscuous mode [ 185.775457][ T7585] macvtap1: entered allmulticast mode [ 185.775476][ T7585] gretap0: entered allmulticast mode [ 185.847631][ T7588] gretap0: left allmulticast mode [ 185.847948][ T7588] gretap0: left promiscuous mode [ 185.961176][ T7588] macvtap1: left promiscuous mode [ 185.961209][ T7588] macvtap1: left allmulticast mode [ 186.088978][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.089000][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.876025][ T7618] FAULT_INJECTION: forcing a failure. [ 186.876025][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 186.876059][ T7618] CPU: 1 UID: 0 PID: 7618 Comm: syz.5.367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.876080][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.876091][ T7618] Call Trace: [ 186.876100][ T7618] [ 186.876108][ T7618] dump_stack_lvl+0xe8/0x150 [ 186.876142][ T7618] should_fail_ex+0x46b/0x600 [ 186.876168][ T7618] should_failslab+0xa8/0x100 [ 186.876196][ T7618] ? security_inode_alloc+0x39/0x310 [ 186.876217][ T7618] kmem_cache_alloc_noprof+0x99/0x680 [ 186.876243][ T7618] ? security_inode_alloc+0x39/0x310 [ 186.876281][ T7618] security_inode_alloc+0x39/0x310 [ 186.876304][ T7618] inode_init_always_gfp+0x983/0xd40 [ 186.876328][ T7618] ? __pfx_proc_alloc_inode+0x10/0x10 [ 186.876349][ T7618] alloc_inode+0x82/0x1b0 [ 186.876368][ T7618] new_inode+0x1f/0x170 [ 186.876385][ T7618] ? proc_pid_make_inode+0x19/0x130 [ 186.876408][ T7618] proc_pid_make_inode+0x21/0x130 [ 186.876429][ T7618] proc_pident_instantiate+0x6d/0x2a0 [ 186.876451][ T7618] proc_pident_lookup+0x1b7/0x270 [ 186.876475][ T7618] __lookup_slow+0x1fb/0x2f0 [ 186.876497][ T7618] lookup_slow+0x59/0x80 [ 186.876518][ T7618] link_path_walk+0xd22/0x1910 [ 186.876556][ T7618] path_openat+0x1bc/0x2100 [ 186.876599][ T7618] do_file_open+0x23e/0x4a0 [ 186.876618][ T7618] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 186.876648][ T7618] ? __pfx_do_file_open+0x10/0x10 [ 186.876681][ T7618] ? __pfx_kfree_link+0x10/0x10 [ 186.876713][ T7618] ? alloc_fd+0x6b2/0x760 [ 186.876742][ T7618] do_sys_openat2+0x115/0x200 [ 186.876767][ T7618] ? __se_sys_futex+0x3a8/0x450 [ 186.876794][ T7618] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.876823][ T7618] ? __pfx___se_sys_futex+0x10/0x10 [ 186.876849][ T7618] ? rcu_is_watching+0x16/0xb0 [ 186.876880][ T7618] __x64_sys_openat+0x138/0x170 [ 186.876903][ T7618] do_syscall_64+0x166/0x520 [ 186.876929][ T7618] ? trace_irq_disable+0x3b/0x140 [ 186.876950][ T7618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.876968][ T7618] ? clear_bhb_loop+0x70/0xc0 [ 186.876991][ T7618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.877009][ T7618] RIP: 0033:0x7f661269fd8e [ 186.877028][ T7618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.877043][ T7618] RSP: 002b:00007f661092dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.877063][ T7618] RAX: ffffffffffffffda RBX: 00007f661092e6c0 RCX: 00007f661269fd8e [ 186.877077][ T7618] RDX: 0000000000000002 RSI: 00007f661092df90 RDI: ffffffffffffff9c [ 186.877089][ T7618] RBP: 00007f6612776b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.877101][ T7618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.877113][ T7618] R13: 00007f6612966038 R14: 00007f6612965fa0 R15: 00007ffc03238198 [ 186.877145][ T7618] [ 187.678761][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 187.678781][ T36] audit: type=1326 audit(1792650938.372:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 187.678825][ T36] audit: type=1326 audit(1792650938.372:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 187.679641][ T36] audit: type=1326 audit(1792650938.372:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 187.681534][ T36] audit: type=1326 audit(1792650938.372:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 187.681578][ T36] audit: type=1326 audit(1792650938.372:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 187.682803][ T36] audit: type=1326 audit(1792650938.372:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 187.685439][ T36] audit: type=1326 audit(1792650938.372:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 187.685482][ T36] audit: type=1326 audit(1792650938.372:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 187.699237][ T36] audit: type=1326 audit(1792650938.382:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 187.699297][ T36] audit: type=1326 audit(1792650938.382:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.598" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 188.141705][ T7672] Smack: duplicate mount options [ 188.256245][ T5595] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 188.456526][ T5595] usb 5-1: Using ep0 maxpacket: 8 [ 188.462375][ T5595] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.462434][ T5595] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 188.491001][ T5595] usb 5-1: string descriptor 0 read error: -22 [ 188.491147][ T5595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.553823][ T5595] snd-ua101 5-1:1.1: sample format descriptor not found [ 188.553851][ T5595] snd-ua101 5-1:1.0: invalid num_altsetting [ 190.487204][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 190.492755][ T7722] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 190.620249][ T7728] bridge0: port 3(syz_tun) entered blocking state [ 190.624222][ T7728] bridge0: port 3(syz_tun) entered disabled state [ 190.624445][ T7728] syz_tun: entered allmulticast mode [ 190.661858][ T7728] syz_tun: entered promiscuous mode [ 190.707120][ T7728] bridge0: port 3(syz_tun) entered blocking state [ 190.707242][ T7728] bridge0: port 3(syz_tun) entered forwarding state [ 191.191343][ T199] usb 5-1: USB disconnect, device number 3 [ 193.413332][ T7794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.640'. [ 193.421003][ T7794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.640'. [ 193.435727][ T7794] netlink: 'syz.4.640': attribute type 32 has an invalid length. [ 193.435751][ T7794] netlink: 500 bytes leftover after parsing attributes in process `syz.4.640'. [ 193.927376][ T7789] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 193.927411][ T7789] overlayfs: failed to set xattr on upper [ 193.927419][ T7789] overlayfs: ...falling back to redirect_dir=nofollow. [ 193.927427][ T7789] overlayfs: ...falling back to index=off. [ 193.927434][ T7789] overlayfs: ...falling back to uuid=null. [ 194.032034][ T7789] overlayfs: failed to clone lowerpath [ 194.446155][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.446216][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.765914][ T7820] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 195.744215][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 195.780903][ T7852] gre1: entered promiscuous mode [ 198.670672][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 198.670690][ T36] audit: type=1326 audit(1792650949.362:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7953 comm="syz.4.687" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e36ef559 code=0x0 [ 198.789399][ T7962] hsr0: entered allmulticast mode [ 198.789421][ T7962] hsr_slave_0: entered allmulticast mode [ 198.789448][ T7962] hsr_slave_1: entered allmulticast mode [ 198.790934][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 198.826037][ T7962] hsr_slave_0: left promiscuous mode [ 198.868451][ T7962] hsr_slave_1: left promiscuous mode [ 199.040561][ T7962] hsr0 (unregistering): left allmulticast mode [ 199.462404][ T7990] overlayfs: failed to clone upperpath [ 200.311769][ T8024] FAULT_INJECTION: forcing a failure. [ 200.311769][ T8024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.311801][ T8024] CPU: 1 UID: 0 PID: 8024 Comm: syz.4.711 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.311822][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.311833][ T8024] Call Trace: [ 200.311841][ T8024] [ 200.311849][ T8024] dump_stack_lvl+0xe8/0x150 [ 200.311887][ T8024] should_fail_ex+0x46b/0x600 [ 200.311917][ T8024] _copy_to_user+0x31/0xb0 [ 200.311942][ T8024] __se_sys_newuname+0x199/0x420 [ 200.311976][ T8024] ? __pfx___se_sys_newuname+0x10/0x10 [ 200.312060][ T8024] ? rcu_is_watching+0x16/0xb0 [ 200.312099][ T8024] do_syscall_64+0x166/0x520 [ 200.312128][ T8024] ? trace_irq_disable+0x3b/0x140 [ 200.312153][ T8024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.312174][ T8024] ? clear_bhb_loop+0x70/0xc0 [ 200.312200][ T8024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.312222][ T8024] RIP: 0033:0x7fe1e36ef559 [ 200.312241][ T8024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.312258][ T8024] RSP: 002b:00007fe1e193e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003f [ 200.312280][ T8024] RAX: ffffffffffffffda RBX: 00007fe1e3975fa0 RCX: 00007fe1e36ef559 [ 200.312296][ T8024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.312308][ T8024] RBP: 00007fe1e3786b20 R08: 0000000000000000 R09: 0000000000000000 [ 200.312321][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.312333][ T8024] R13: 00007fe1e3976038 R14: 00007fe1e3975fa0 R15: 00007ffe0a13f548 [ 200.312363][ T8024] [ 200.948167][ T8040] FAULT_INJECTION: forcing a failure. [ 200.948167][ T8040] name failslab, interval 1, probability 0, space 0, times 0 [ 200.948206][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.4.717 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.948229][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.948241][ T8040] Call Trace: [ 200.948250][ T8040] [ 200.948260][ T8040] dump_stack_lvl+0xe8/0x150 [ 200.948292][ T8040] should_fail_ex+0x46b/0x600 [ 200.948318][ T8040] should_failslab+0xa8/0x100 [ 200.948353][ T8040] __kmalloc_noprof+0xf6/0x790 [ 200.948382][ T8040] ? netlink_realloc_groups+0xf4/0x310 [ 200.948406][ T8040] ? netlink_realloc_groups+0xf4/0x310 [ 200.948436][ T8040] netlink_realloc_groups+0xf4/0x310 [ 200.948463][ T8040] netlink_bind+0x2ab/0xd90 [ 200.948494][ T8040] ? __pfx_netlink_bind+0x10/0x10 [ 200.948523][ T8040] ? bpf_lsm_socket_bind+0x9/0x20 [ 200.948545][ T8040] __sys_bind+0x2e9/0x410 [ 200.948577][ T8040] ? __pfx___sys_bind+0x10/0x10 [ 200.948613][ T8040] ? rcu_is_watching+0x16/0xb0 [ 200.948650][ T8040] __x64_sys_bind+0x7a/0x90 [ 200.948678][ T8040] do_syscall_64+0x166/0x520 [ 200.948719][ T8040] ? trace_irq_disable+0x3b/0x140 [ 200.948743][ T8040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.948763][ T8040] ? clear_bhb_loop+0x70/0xc0 [ 200.948785][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.948805][ T8040] RIP: 0033:0x7fe1e36ef559 [ 200.948824][ T8040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.948839][ T8040] RSP: 002b:00007fe1e193e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 200.948862][ T8040] RAX: ffffffffffffffda RBX: 00007fe1e3975fa0 RCX: 00007fe1e36ef559 [ 200.948879][ T8040] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000003 [ 200.948892][ T8040] RBP: 00007fe1e3786b20 R08: 0000000000000000 R09: 0000000000000000 [ 200.948904][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.948916][ T8040] R13: 00007fe1e3976038 R14: 00007fe1e3975fa0 R15: 00007ffe0a13f548 [ 200.948947][ T8040] [ 201.625719][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 201.716663][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 201.716709][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 201.716732][ T5598] Bluetooth: hci2: command 0x0406 tx timeout [ 202.332931][ T8063] overlayfs: failed to clone lowerpath [ 202.981509][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.734'. [ 203.454525][ T36] audit: type=1326 audit(1792650954.142:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8096 comm="syz.2.738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7fc00000 [ 203.493753][ T8109] tmpfs: Using encoding : utf8-12.1.0 [ 203.502510][ T36] audit: type=1326 audit(1792650954.192:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8096 comm="syz.2.738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd3dc69f559 code=0x7fc00000 [ 203.505343][ T36] audit: type=1326 audit(1792650954.192:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8096 comm="syz.2.738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7fc00000 [ 203.743149][ T8119] capability: warning: `syz.4.748' uses 32-bit capabilities (legacy support in use) [ 205.658774][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.709667][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.007293][ T8187] netlink: 'syz.5.771': attribute type 4 has an invalid length. [ 206.372909][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.775'. [ 211.609764][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 211.641666][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 213.618317][ T8289] netlink: 7 bytes leftover after parsing attributes in process `syz.3.811'. [ 214.172655][ T8299] io-wq is not configured for unbound workers [ 214.422397][ T36] audit: type=1326 audit(1792650965.112:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 214.422445][ T36] audit: type=1326 audit(1792650965.112:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 214.489717][ T36] audit: type=1326 audit(1792650965.182:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 214.490010][ T36] audit: type=1326 audit(1792650965.182:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 214.492611][ T36] audit: type=1326 audit(1792650965.182:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 214.601179][ T36] audit: type=1326 audit(1792650965.292:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 214.601288][ T36] audit: type=1326 audit(1792650965.292:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 214.601418][ T36] audit: type=1326 audit(1792650965.292:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 214.760695][ T36] audit: type=1326 audit(1792650965.452:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 214.895248][ T36] audit: type=1326 audit(1792650965.582:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.3.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6e4bf559 code=0x7ffc0000 [ 215.052223][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.823'. [ 217.748391][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 217.925646][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 217.926395][ T35] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.927552][ T35] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.927574][ T35] usb 6-1: config 0 has no interface number 0 [ 218.244940][ T8380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.844'. [ 218.349685][ T8382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.844'. [ 218.398337][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.398365][ T35] usb 6-1: Product: syz [ 218.398378][ T35] usb 6-1: Manufacturer: syz [ 218.398391][ T35] usb 6-1: SerialNumber: syz [ 218.441618][ T35] usb 6-1: config 0 descriptor?? [ 218.466622][ T8380] ip6gre1: entered promiscuous mode [ 218.466648][ T8380] ip6gre1: entered allmulticast mode [ 219.042580][ T35] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 219.042609][ T35] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 219.886706][ T35] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 219.897792][ T35] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 220.003778][ T35] usb 6-1: USB disconnect, device number 2 [ 220.297961][ T8416] 9p: Bad value for 'rfdno' [ 220.614502][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 221.406741][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 221.406784][ T8443] netlink: 'syz.2.868': attribute type 12 has an invalid length. [ 222.812693][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 222.812729][ T8443] netlink: 'syz.2.868': attribute type 12 has an invalid length. [ 222.828206][ T6073] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.828367][ T6073] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.829026][ T6073] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.835633][ T68] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.012179][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.875'. [ 223.791842][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 224.100078][ T8477] fuse: Bad value for 'fd' [ 224.806346][ T8489] fuse: Bad value for 'fd' [ 225.442657][ T8501] batadv_slave_0: entered promiscuous mode [ 225.467411][ T8501] team_slave_0: entered promiscuous mode [ 225.468008][ T8500] team_slave_0: left promiscuous mode [ 225.469329][ T8500] batadv_slave_0: left promiscuous mode [ 233.122726][ T36] kauditd_printk_skb: 155 callbacks suppressed [ 233.122745][ T36] audit: type=1326 audit(1792650983.812:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8644 comm="syz.2.947" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 233.124271][ T36] audit: type=1326 audit(1792650983.812:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8644 comm="syz.2.947" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 233.144660][ T36] audit: type=1326 audit(1792650983.832:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8644 comm="syz.2.947" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 233.144718][ T36] audit: type=1326 audit(1792650983.832:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8644 comm="syz.2.947" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 233.209407][ T36] audit: type=1326 audit(1792650983.902:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8644 comm="syz.2.947" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 233.312397][ T36] audit: type=1326 audit(1792650984.002:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8644 comm="syz.2.947" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 233.312512][ T36] audit: type=1326 audit(1792650984.002:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8644 comm="syz.2.947" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc69f559 code=0x7ffc0000 [ 236.570186][ T8697] netlink: 606 bytes leftover after parsing attributes in process `syz.2.966'. [ 248.966552][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 251.567020][ T8861] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 251.572213][ T8861] bond1: entered allmulticast mode [ 251.581705][ T8862] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 252.602737][ C1] Unknown status report in ack skb [ 253.436549][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'. [ 253.498748][ T8885] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 254.656293][ T8885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.127406][ T8887] bond2: (slave gretap2): making interface the new active one [ 255.195106][ T8887] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 255.225073][ T8898] 9pnet_fd: p9_fd_create_tcp (8898): problem connecting socket to 127.0.0.1 [ 255.265035][ T8898] 9pnet_fd: p9_fd_create_tcp (8898): problem connecting socket to 127.0.0.1 [ 255.351874][ T8898] 9pnet_fd: p9_fd_create_tcp (8898): problem connecting socket to 127.0.0.1 [ 255.451002][ T8898] 9pnet_fd: p9_fd_create_tcp (8898): problem connecting socket to 127.0.0.1 [ 255.711592][ T8898] 9pnet_fd: p9_fd_create_tcp (8898): problem connecting socket to 127.0.0.1 [ 255.893609][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.893676][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.515206][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.570453][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.572456][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.574656][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.575369][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.256189][ T61] Bluetooth: hci5: command tx timeout [ 263.305655][ T61] Bluetooth: hci5: command tx timeout [ 263.369301][ T36] audit: type=1326 audit(1792651014.052:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.1.1051" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9247f559 code=0x7ffc0000 [ 263.372308][ T36] audit: type=1326 audit(1792651014.062:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.1.1051" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9247f559 code=0x7ffc0000 [ 263.406864][ T36] audit: type=1326 audit(1792651014.092:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.1.1051" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f0b9247f559 code=0x7ffc0000 [ 263.406913][ T36] audit: type=1326 audit(1792651014.092:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.1.1051" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9247f559 code=0x7ffc0000 [ 263.406948][ T36] audit: type=1326 audit(1792651014.092:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8948 comm="syz.1.1051" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9247f559 code=0x7ffc0000 [ 264.664147][ T8918] rxe_eth0 speed is unknown, defaulting to 1000 [ 265.404749][ T61] Bluetooth: hci5: command tx timeout [ 266.387069][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.525856][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.551412][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.553401][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.554905][ T5592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.475673][ T5592] Bluetooth: hci5: command tx timeout [ 268.745751][ T5592] Bluetooth: hci4: command tx timeout [ 270.829173][ T5592] Bluetooth: hci4: command tx timeout [ 271.497081][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 272.905683][ T5592] Bluetooth: hci4: command tx timeout [ 273.794098][ T9033] netlink: 'syz.3.1070': attribute type 2 has an invalid length. [ 273.794122][ T9033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1070'. [ 274.985796][ T5592] Bluetooth: hci4: command tx timeout [ 275.394829][ T9033] : entered promiscuous mode [ 276.124540][ T8972] rxe_eth0 speed is unknown, defaulting to 1000 [ 278.626713][ T69] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.860949][ T8918] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.861613][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.861816][ T8918] bridge_slave_0: entered allmulticast mode [ 279.868006][ T8918] bridge_slave_0: entered promiscuous mode [ 280.209782][ T8918] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.209915][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.210112][ T8918] bridge_slave_1: entered allmulticast mode [ 280.225357][ T8918] bridge_slave_1: entered promiscuous mode [ 280.908317][ T8918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.158308][ T8918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.214480][ T9161] overlayfs: failed to clone upperpath [ 283.880699][ T9172] cgroup: fork rejected by pids controller in /syz2 [ 285.548483][ T69] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.061361][ T8918] team0: Port device team_slave_0 added [ 288.160191][ T9212] bridge0: port 3(syz_tun) entered disabled state [ 288.804480][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.868124][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.424919][ T9212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.538387][ T8918] team0: Port device team_slave_1 added [ 295.142798][ T9230] vlan0: entered promiscuous mode [ 295.142835][ T9230] virtio_net virtio1 eth0: entered promiscuous mode [ 295.783349][ T9247] netlink: 'syz.3.1119': attribute type 11 has an invalid length. [ 299.018265][ T9248] bridge0: port 3(syz_tun) entered blocking state [ 299.018466][ T9248] bridge0: port 3(syz_tun) entered forwarding state [ 299.039157][ T9248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.041798][ T9248] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.063758][ T9248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.640411][ T9260] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 299.640435][ T9260] netlink: 'syz.2.1124': attribute type 4 has an invalid length. [ 299.640449][ T9260] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1124'. [ 299.642347][ T9260] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 299.642367][ T9260] netlink: 'syz.2.1124': attribute type 4 has an invalid length. [ 299.642378][ T9260] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1124'. [ 301.316538][ T9248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.700793][ T9248] veth1_vlan: left promiscuous mode [ 301.713471][ T9248] veth0_vlan: left promiscuous mode [ 301.718521][ T9248] veth0_vlan: entered promiscuous mode [ 301.747312][ T9248] veth1_vlan: entered promiscuous mode [ 301.855366][ T9248] veth1_macvtap: left promiscuous mode [ 301.862558][ T9248] veth0_macvtap: left promiscuous mode [ 301.881628][ T9248] veth0_macvtap: entered promiscuous mode [ 301.892022][ T9248] veth1_macvtap: entered promiscuous mode [ 302.538716][ T9248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.638643][ T9248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.644712][ T9248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.666268][ T9248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.764595][ T9248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.790202][ T9249] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 304.791929][ T9249] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 304.966064][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.966221][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.992336][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.992484][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.401272][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 310.569228][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ddfec00: rx timeout, send abort [ 311.071831][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803c424800: rx timeout, send abort [ 311.072347][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ddfec00: abort rx timeout. Force session deactivation [ 311.595292][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803c424800: abort rx timeout. Force session deactivation [ 317.124691][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.206082][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.215432][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.308361][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.308431][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.351330][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.501320][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.053660][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.053903][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.054033][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.054170][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.054299][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.054427][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.054550][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.054673][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.054802][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.054932][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.055082][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.058042][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.059148][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.059286][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.059428][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.064070][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 318.682677][ T69] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.766421][ T9344] jffs2: notice: (9344) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 319.074503][ T8918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.074522][ T8918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.074546][ T8918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.786290][ T5592] Bluetooth: hci1: command tx timeout [ 320.257722][ T9349] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.875863][ T5592] Bluetooth: hci1: command tx timeout [ 323.945674][ T5592] Bluetooth: hci1: command tx timeout [ 325.669199][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.712669][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.716232][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.746329][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.751378][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.891793][ T9395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1161'. [ 326.026011][ T61] Bluetooth: hci1: command tx timeout [ 326.780604][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 326.813302][ T69] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.662665][ T61] Bluetooth: hci6: command tx timeout [ 329.342902][ T36] audit: type=1326 audit(1792651080.032:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9421 comm="syz.3.1167" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c6e4bf559 code=0x0 [ 330.692044][ T61] Bluetooth: hci6: command tx timeout [ 330.996912][ T9408] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 332.745679][ T61] Bluetooth: hci6: command tx timeout [ 334.825612][ T61] Bluetooth: hci6: command tx timeout [ 336.795251][ T9453] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 340.461505][ T9455] veth0_virt_wifi: entered promiscuous mode [ 340.788878][ T9330] rxe_eth0 speed is unknown, defaulting to 1000 [ 340.824599][ T5741] openvswitch: cpu_id mismatch with handler threads [ 340.907126][ T9151] openvswitch: cpu_id mismatch with handler threads [ 341.032052][ T5667] openvswitch: cpu_id mismatch with handler threads [ 341.841930][ T9482] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001 [ 343.103352][ T9391] rxe_eth0 speed is unknown, defaulting to 1000 [ 347.674150][ T69] bridge_slave_1: left allmulticast mode [ 347.674192][ T69] bridge_slave_1: left promiscuous mode [ 347.674456][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.257629][ T69] bridge_slave_0: left allmulticast mode [ 349.257673][ T69] bridge_slave_0: left promiscuous mode [ 349.397638][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.597584][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.138963][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.312804][ T69] bond0 (unregistering): Released all slaves [ 358.939405][ T9514] netlink: 'syz.1.1190': attribute type 12 has an invalid length. [ 359.283805][ T5245] 8021q: adding VLAN 0 to HW filter on device eth5 [ 365.279962][ T9623] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 369.674682][ T9623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.688831][ T9623] team0: Port device netdevsim1 added [ 370.476609][ T5245] 8021q: adding VLAN 0 to HW filter on device eth6 [ 373.068802][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.215699][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.215911][ T9330] bridge_slave_0: entered allmulticast mode [ 373.229486][ T9330] bridge_slave_0: entered promiscuous mode [ 374.205741][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.205857][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.206056][ T9330] bridge_slave_1: entered allmulticast mode [ 374.556166][ T9330] bridge_slave_1: entered promiscuous mode [ 377.194551][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 377.521083][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.273092][ T9699] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 378.273117][ T9699] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1231'. [ 378.757801][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.757870][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.335483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 380.415318][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.477407][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.498218][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.503419][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.508486][ T5592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.765887][ T5592] Bluetooth: hci4: command tx timeout [ 383.285916][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.286028][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.435699][ T9391] bridge_slave_0: entered allmulticast mode [ 383.438116][ T9391] bridge_slave_0: entered promiscuous mode [ 383.770142][ T5245] 8021q: adding VLAN 0 to HW filter on device eth7 [ 383.814324][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.814430][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.814632][ T9391] bridge_slave_1: entered allmulticast mode [ 383.910943][ T9391] bridge_slave_1: entered promiscuous mode [ 384.871393][ T5592] Bluetooth: hci4: command tx timeout [ 386.905540][ T5592] Bluetooth: hci4: command tx timeout [ 387.606468][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.694851][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.699946][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.708910][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.710802][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.988948][ T61] Bluetooth: hci4: command tx timeout [ 389.672992][ T9710] rxe_eth0 speed is unknown, defaulting to 1000 [ 389.945813][ T5592] Bluetooth: hci1: command tx timeout [ 390.398098][ T36] audit: type=1804 audit(1792651140.972:476): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1248" name="file0" dev="tmpfs" ino=1717 res=1 errno=0 [ 392.096075][ T5592] Bluetooth: hci1: command tx timeout [ 394.185915][ T5592] Bluetooth: hci1: command tx timeout [ 395.425776][ T5245] 8021q: adding VLAN 0 to HW filter on device eth8 [ 396.063943][ T9777] rxe_eth0 speed is unknown, defaulting to 1000 [ 396.265599][ T5592] Bluetooth: hci1: command tx timeout [ 402.328054][ T9135] IPVS: starting estimator thread 0... [ 402.421390][ T9936] IPVS: using max 9 ests per chain, 21600 per kthread [ 403.118754][ T69] hsr_slave_0: left promiscuous mode [ 403.255608][ T69] hsr_slave_1: left promiscuous mode [ 403.256873][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.256900][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.391112][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.391142][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.258488][ T69] veth1_vlan: left promiscuous mode [ 406.258691][ T69] veth0_vlan: left promiscuous mode [ 416.466724][ T69] team0 (unregistering): Port device team_slave_1 removed [ 417.175106][ T69] team0 (unregistering): Port device team_slave_0 removed [ 420.796047][T10014] syz_tun: entered allmulticast mode [ 421.923555][ T9710] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.923689][ T9710] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.923911][ T9710] bridge_slave_0: entered allmulticast mode [ 421.953653][ T9710] bridge_slave_0: entered promiscuous mode [ 421.971043][ T9710] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.974058][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.974355][ T9710] bridge_slave_1: entered allmulticast mode [ 422.000369][ T9710] bridge_slave_1: entered promiscuous mode [ 423.366711][ T9710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.477781][ T9710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.874223][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 423.915768][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.918399][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.955341][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.959981][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.185580][ T5592] Bluetooth: hci5: command tx timeout [ 428.265572][ T5592] Bluetooth: hci5: command tx timeout [ 429.002714][ T9710] team0: Port device team_slave_0 added [ 429.031198][ T9710] team0: Port device team_slave_1 added [ 429.702520][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.702540][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.702565][ T9710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.732537][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.732555][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.732582][ T9710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.345854][ T5592] Bluetooth: hci5: command tx timeout [ 430.404588][ T9710] hsr_slave_0: entered promiscuous mode [ 430.411778][ T9710] hsr_slave_1: entered promiscuous mode [ 430.412701][ T9710] debugfs: 'hsr0' already exists in 'hsr' [ 430.412725][ T9710] Cannot create hsr debugfs directory [ 432.425728][ T5592] Bluetooth: hci5: command tx timeout [ 432.897581][ T9777] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.897706][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.897919][ T9777] bridge_slave_0: entered allmulticast mode [ 432.932439][ T9777] bridge_slave_0: entered promiscuous mode [ 433.900280][ T9777] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.900412][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.900664][ T9777] bridge_slave_1: entered allmulticast mode [ 433.928990][ T9777] bridge_slave_1: entered promiscuous mode [ 433.944819][T10049] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.700294][ T9777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.847603][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 438.995088][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.014345][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.067415][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.093366][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.287116][ T9777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.205651][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.205727][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.558772][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 440.650670][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 440.685773][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 440.738066][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 440.738821][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.988151][ T9777] team0: Port device team_slave_0 added [ 441.308320][ T5592] Bluetooth: hci0: command tx timeout [ 441.907431][ T9777] team0: Port device team_slave_1 added [ 442.531512][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.531531][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.531556][ T9777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.805361][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.805388][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.805604][ T9777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.986705][ T5592] Bluetooth: hci6: command tx timeout [ 443.800114][ T5592] Bluetooth: hci0: command tx timeout [ 445.065590][ T5592] Bluetooth: hci6: command tx timeout [ 445.865580][ T5592] Bluetooth: hci0: command tx timeout [ 446.942464][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.145797][ T5594] Bluetooth: hci6: command tx timeout [ 447.177717][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.185581][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.212172][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.215166][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.945767][ T61] Bluetooth: hci0: command tx timeout [ 447.968365][T10135] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.225533][ T61] Bluetooth: hci6: command tx timeout [ 449.305665][ T61] Bluetooth: hci4: command tx timeout [ 449.738678][T10140] rxe_eth0 speed is unknown, defaulting to 1000 [ 451.389537][ T61] Bluetooth: hci4: command tx timeout [ 452.795123][T10049] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.795262][T10049] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.811368][T10049] bridge_slave_0: entered allmulticast mode [ 452.826673][T10049] bridge_slave_0: entered promiscuous mode [ 453.331194][T10049] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.331467][T10049] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.331675][T10049] bridge_slave_1: entered allmulticast mode [ 453.346332][T10049] bridge_slave_1: entered promiscuous mode [ 453.465604][ T61] Bluetooth: hci4: command tx timeout [ 453.845226][T10182] rxe_eth0 speed is unknown, defaulting to 1000 [ 454.299478][T10049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.428808][T10049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.547272][ T61] Bluetooth: hci4: command tx timeout [ 456.021770][T10049] team0: Port device team_slave_0 added [ 456.199898][T10049] team0: Port device team_slave_1 added [ 457.965808][T10048] syz_tun (unregistering): left allmulticast mode [ 458.018949][T10048] bond0: (slave syz_tun): Releasing backup interface [ 462.218901][T10049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.218919][T10049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.218945][T10049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.389265][T10049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.389286][T10049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.389313][T10049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.129176][T10049] hsr_slave_0: entered promiscuous mode [ 464.129914][T10049] hsr_slave_1: entered promiscuous mode [ 464.385871][T10049] debugfs: 'hsr0' already exists in 'hsr' [ 464.385904][T10049] Cannot create hsr debugfs directory [ 469.907230][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.907357][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.907576][T10135] bridge_slave_0: entered allmulticast mode [ 469.912052][T10135] bridge_slave_0: entered promiscuous mode [ 470.575875][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.576003][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.576249][T10135] bridge_slave_1: entered allmulticast mode [ 470.583438][T10135] bridge_slave_1: entered promiscuous mode [ 472.928939][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.114259][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.861513][T10279] batman_adv: batadv0: Adding interface: dummy0 [ 476.861541][T10279] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.861590][T10279] batman_adv: batadv0: Interface activated: dummy0 [ 476.870278][T10135] team0: Port device team_slave_0 added [ 476.919937][T10135] team0: Port device team_slave_1 added [ 477.137500][T10140] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.139557][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.139805][T10140] bridge_slave_0: entered allmulticast mode [ 477.143765][T10140] bridge_slave_0: entered promiscuous mode [ 477.768819][T10140] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.768938][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.769160][T10140] bridge_slave_1: entered allmulticast mode [ 477.823248][T10140] bridge_slave_1: entered promiscuous mode [ 477.887785][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.887802][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.887826][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.088045][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.088062][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.088085][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.033223][T10140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.533482][T10140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.352055][T10182] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.352283][T10182] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.352785][T10182] bridge_slave_0: entered allmulticast mode [ 480.380393][T10182] bridge_slave_0: entered promiscuous mode [ 480.835443][T10182] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.835718][T10182] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.835917][T10182] bridge_slave_1: entered allmulticast mode [ 480.844575][T10182] bridge_slave_1: entered promiscuous mode [ 480.858216][T10140] team0: Port device team_slave_0 added [ 480.880952][T10135] hsr_slave_0: entered promiscuous mode [ 480.884123][T10135] hsr_slave_1: entered promiscuous mode [ 480.887538][T10135] debugfs: 'hsr0' already exists in 'hsr' [ 480.887566][T10135] Cannot create hsr debugfs directory [ 483.692910][T10140] team0: Port device team_slave_1 added [ 484.690981][T10182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.902697][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.940882][ T5592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.958390][ T5592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.977181][ T5592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.980746][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 485.122099][T10182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.150698][T10140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.150717][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.150743][T10140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.408491][T10140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.408509][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.408534][T10140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.151026][ T61] Bluetooth: hci1: command tx timeout [ 487.153458][T10182] team0: Port device team_slave_0 added [ 487.365992][T10182] team0: Port device team_slave_1 added [ 488.285707][T10140] hsr_slave_0: entered promiscuous mode [ 488.474445][T10140] hsr_slave_1: entered promiscuous mode [ 488.482103][T10140] debugfs: 'hsr0' already exists in 'hsr' [ 488.482132][T10140] Cannot create hsr debugfs directory [ 489.228498][ T61] Bluetooth: hci1: command tx timeout [ 491.315588][ T61] Bluetooth: hci1: command tx timeout [ 491.475764][T10182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.475781][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.475809][T10182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.621425][T10182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.621442][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.621468][T10182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.395756][ T61] Bluetooth: hci1: command tx timeout [ 494.818068][T10182] hsr_slave_0: entered promiscuous mode [ 494.822640][T10182] hsr_slave_1: entered promiscuous mode [ 494.825215][T10182] debugfs: 'hsr0' already exists in 'hsr' [ 494.825243][T10182] Cannot create hsr debugfs directory [ 494.863487][T10346] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 496.131232][T10311] rxe_eth0 speed is unknown, defaulting to 1000 [ 496.144499][T10347] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 499.250822][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 499.306754][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 499.334614][ T5592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 499.394308][ T5592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 499.398693][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 500.467963][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 500.472002][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 500.475238][ T5594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 500.492996][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 500.494066][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.545687][ T61] Bluetooth: hci3: command tx timeout [ 501.656893][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.656965][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.695597][ T61] Bluetooth: hci5: command tx timeout [ 503.625625][ T61] Bluetooth: hci3: command tx timeout [ 504.745553][ T61] Bluetooth: hci5: command tx timeout [ 505.771876][ T61] Bluetooth: hci3: command tx timeout [ 506.825643][ T61] Bluetooth: hci5: command tx timeout [ 507.785605][ T61] Bluetooth: hci3: command tx timeout [ 508.134508][T10359] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.898527][ T5594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 508.952309][ T5594] Bluetooth: hci5: command tx timeout [ 508.988892][ T5594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 508.994455][ T5594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 509.000402][ T5594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 509.006552][ T5594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 511.158598][T10397] Bluetooth: hci6: command tx timeout [ 513.242092][T10397] Bluetooth: hci6: command tx timeout [ 515.305565][T10397] Bluetooth: hci6: command tx timeout [ 516.633423][T10367] rxe_eth0 speed is unknown, defaulting to 1000 [ 517.427067][T10397] Bluetooth: hci6: command tx timeout [ 519.869930][T10311] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.870051][T10311] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.870283][T10311] bridge_slave_0: entered allmulticast mode [ 519.942178][T10311] bridge_slave_0: entered promiscuous mode [ 519.998976][T10311] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.999109][T10311] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.999357][T10311] bridge_slave_1: entered allmulticast mode [ 520.073532][T10311] bridge_slave_1: entered promiscuous mode [ 520.827673][T10311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.066356][T10394] rxe_eth0 speed is unknown, defaulting to 1000 [ 521.208860][T10311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.449558][T10311] team0: Port device team_slave_0 added [ 522.554508][T10311] team0: Port device team_slave_1 added [ 523.929438][T10311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.929457][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.929482][T10311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.982256][T10311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.982276][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.982301][T10311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.157843][T10441] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.759008][T10311] hsr_slave_0: entered promiscuous mode [ 525.761468][T10311] hsr_slave_1: entered promiscuous mode [ 525.763777][T10311] debugfs: 'hsr0' already exists in 'hsr' [ 525.763805][T10311] Cannot create hsr debugfs directory [ 529.472152][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.472443][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.472655][T10359] bridge_slave_0: entered allmulticast mode [ 529.474980][T10359] bridge_slave_0: entered promiscuous mode [ 529.661678][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.661831][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.662175][T10359] bridge_slave_1: entered allmulticast mode [ 529.664657][T10359] bridge_slave_1: entered promiscuous mode [ 531.404144][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.766864][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.818048][T10359] team0: Port device team_slave_0 added [ 534.407041][T10359] team0: Port device team_slave_1 added [ 535.917603][T10367] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.917731][T10367] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.917987][T10367] bridge_slave_0: entered allmulticast mode [ 536.011948][T10367] bridge_slave_0: entered promiscuous mode [ 536.179673][T10367] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.179849][T10367] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.180105][T10367] bridge_slave_1: entered allmulticast mode [ 536.187189][T10367] bridge_slave_1: entered promiscuous mode [ 536.290165][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.290183][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.290209][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.742958][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.742978][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.743003][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.480409][T10367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.136845][T10367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.950721][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.970504][T10394] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.999302][T10394] bridge_slave_0: entered allmulticast mode [ 540.101982][T10394] bridge_slave_0: entered promiscuous mode [ 540.147959][T10359] hsr_slave_0: entered promiscuous mode [ 540.160985][T10359] hsr_slave_1: entered promiscuous mode [ 540.165296][T10359] debugfs: 'hsr0' already exists in 'hsr' [ 540.165324][T10359] Cannot create hsr debugfs directory [ 540.186091][T10367] team0: Port device team_slave_0 added [ 540.189898][T10394] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.190050][T10394] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.190284][T10394] bridge_slave_1: entered allmulticast mode [ 540.197610][T10394] bridge_slave_1: entered promiscuous mode [ 540.667643][T10367] team0: Port device team_slave_1 added [ 541.331423][T10394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.498868][T10367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.498885][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.498910][T10367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.539022][T10394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.612544][ T5592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 545.677263][ T5592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 545.701814][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 545.720900][ T5592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 545.742647][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 546.131014][T10367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.131031][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.131054][T10367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.283376][T10394] team0: Port device team_slave_0 added [ 547.739602][T10394] team0: Port device team_slave_1 added [ 547.945857][T10397] Bluetooth: hci0: command tx timeout [ 549.776000][T10367] hsr_slave_0: entered promiscuous mode [ 549.779394][T10367] hsr_slave_1: entered promiscuous mode [ 549.780463][T10367] debugfs: 'hsr0' already exists in 'hsr' [ 549.780489][T10367] Cannot create hsr debugfs directory [ 550.025676][T10397] Bluetooth: hci0: command tx timeout [ 550.478942][T10394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.478961][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.478995][T10394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.588264][T10394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.588282][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.588315][T10394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.105538][T10397] Bluetooth: hci0: command tx timeout [ 554.185529][T10397] Bluetooth: hci0: command tx timeout [ 555.829814][T10510] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 557.152882][T10510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 558.334671][T10511] bond3: (slave gretap1): making interface the new active one [ 558.336857][T10511] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 558.864438][T10394] hsr_slave_0: entered promiscuous mode [ 559.039832][T10394] hsr_slave_1: entered promiscuous mode [ 559.040801][T10394] debugfs: 'hsr0' already exists in 'hsr' [ 559.040826][T10394] Cannot create hsr debugfs directory [ 560.209065][T10484] rxe_eth0 speed is unknown, defaulting to 1000 [ 562.772243][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 562.833157][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 562.939064][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 562.940379][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 562.941187][ T5592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 563.201714][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.209981][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.187997][T10397] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 565.391327][T10397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 565.393885][T10397] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 565.400295][T10397] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 565.402310][T10397] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 566.110258][ T5592] Bluetooth: hci4: command tx timeout [ 568.374581][ T5592] Bluetooth: hci4: command tx timeout [ 568.905569][ T5592] Bluetooth: hci7: command tx timeout [ 570.425900][ T5592] Bluetooth: hci4: command tx timeout [ 570.563806][T10397] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 571.115968][T10397] Bluetooth: hci7: command tx timeout [ 571.116142][T10397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 571.146094][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 571.147241][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 571.148019][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 571.892766][T10521] rxe_eth0 speed is unknown, defaulting to 1000 [ 572.506778][ T5592] Bluetooth: hci4: command tx timeout [ 573.145506][ T5592] Bluetooth: hci7: command tx timeout [ 573.385547][ T5592] Bluetooth: hci5: command tx timeout [ 575.240924][ T5592] Bluetooth: hci7: command tx timeout [ 575.467832][ T61] Bluetooth: hci5: command tx timeout [ 577.545593][ T61] Bluetooth: hci5: command tx timeout [ 579.626481][ T61] Bluetooth: hci5: command tx timeout [ 582.804931][T10524] rxe_eth0 speed is unknown, defaulting to 1000 [ 583.075099][T10484] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.078526][T10484] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.078781][T10484] bridge_slave_0: entered allmulticast mode [ 583.090142][T10484] bridge_slave_0: entered promiscuous mode [ 583.121884][T10484] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.152548][T10484] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.342857][T10484] bridge_slave_1: entered allmulticast mode [ 583.757626][T10484] bridge_slave_1: entered promiscuous mode [ 584.454464][T10484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.838902][T10484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.812351][T10484] team0: Port device team_slave_0 added [ 587.018676][T10484] team0: Port device team_slave_1 added [ 587.847755][T10549] rxe_eth0 speed is unknown, defaulting to 1000 [ 588.482377][T10484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.482396][T10484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.482422][T10484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.704024][T10484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.704042][T10484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.704068][T10484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.480485][T10484] hsr_slave_0: entered promiscuous mode [ 596.582967][T10484] hsr_slave_1: entered promiscuous mode [ 596.586162][T10484] debugfs: 'hsr0' already exists in 'hsr' [ 596.586190][T10484] Cannot create hsr debugfs directory [ 599.086965][T10638] netlink: 'syz.3.1394': attribute type 39 has an invalid length. [ 602.086688][T10521] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.087010][T10521] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.087264][T10521] bridge_slave_0: entered allmulticast mode [ 602.127647][T10521] bridge_slave_0: entered promiscuous mode [ 602.222886][T10521] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.223035][T10521] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.223277][T10521] bridge_slave_1: entered allmulticast mode [ 602.233584][T10521] bridge_slave_1: entered promiscuous mode [ 605.326423][T10521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.439640][T10521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.316583][T10521] team0: Port device team_slave_0 added [ 606.379476][ T5592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 606.407286][ T5592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 606.410881][ T5592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 606.444307][ T5592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 606.450507][ T5592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 606.628574][T10521] team0: Port device team_slave_1 added [ 608.735878][T10521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.735897][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.735922][T10521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.745564][ T61] Bluetooth: hci6: command tx timeout [ 609.914381][T10521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.914400][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.914426][T10521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.829192][ T61] Bluetooth: hci6: command tx timeout [ 611.225623][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 612.905474][ T5592] Bluetooth: hci6: command tx timeout [ 614.709806][T10521] hsr_slave_0: entered promiscuous mode [ 614.722440][T10521] hsr_slave_1: entered promiscuous mode [ 614.723495][T10521] debugfs: 'hsr0' already exists in 'hsr' [ 614.723520][T10521] Cannot create hsr debugfs directory [ 615.025501][ T61] Bluetooth: hci6: command tx timeout [ 615.828355][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.828472][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.828727][T10524] bridge_slave_0: entered allmulticast mode [ 615.847487][T10524] bridge_slave_0: entered promiscuous mode [ 616.018573][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.018749][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.018980][T10524] bridge_slave_1: entered allmulticast mode [ 616.028982][T10524] bridge_slave_1: entered promiscuous mode [ 616.788443][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 616.924627][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 616.958394][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 616.968963][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 616.971560][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.286059][T10524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.393023][T10644] rxe_eth0 speed is unknown, defaulting to 1000 [ 619.713277][T10524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.105822][ T5592] Bluetooth: hci0: command tx timeout [ 622.203890][ T5592] Bluetooth: hci0: command tx timeout [ 623.646857][T10549] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.646985][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.647255][T10549] bridge_slave_0: entered allmulticast mode [ 623.654727][T10549] bridge_slave_0: entered promiscuous mode [ 623.662667][T10549] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.662790][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.663037][T10549] bridge_slave_1: entered allmulticast mode [ 623.708230][T10549] bridge_slave_1: entered promiscuous mode [ 624.313438][ T5592] Bluetooth: hci0: command tx timeout [ 624.601682][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 624.669938][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.684467][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.880603][T10549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.957803][T10685] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 624.993556][T10685] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 625.009756][T10685] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 625.010515][T10685] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 625.214038][T10549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.345671][ T5592] Bluetooth: hci0: command tx timeout [ 626.993109][T10549] team0: Port device team_slave_0 added [ 627.010992][ T5592] Bluetooth: hci3: command 0x0406 tx timeout [ 627.100848][T10549] team0: Port device team_slave_1 added [ 627.395494][ T5592] Bluetooth: hci8: command tx timeout [ 627.478689][T10549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.478707][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.478733][T10549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.678083][T10549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.678101][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.678125][T10549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.780204][T10665] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.659615][ T5592] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 628.714848][ T5592] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 628.780960][ T5592] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 628.792669][ T5592] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 628.813178][ T5592] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 629.465857][T10397] Bluetooth: hci8: command tx timeout [ 631.098675][T10397] Bluetooth: hci9: command tx timeout [ 631.575554][T10685] Bluetooth: hci8: command tx timeout [ 631.709836][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 631.753662][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 631.768478][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 631.796439][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 631.799224][ T5592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.145439][ T5592] Bluetooth: hci9: command tx timeout [ 633.635640][ T5592] Bluetooth: hci8: command tx timeout [ 634.265564][ T5592] Bluetooth: hci4: command tx timeout [ 635.235688][ T5592] Bluetooth: hci9: command tx timeout [ 636.348326][ T5592] Bluetooth: hci4: command tx timeout [ 637.305442][ T5592] Bluetooth: hci9: command tx timeout [ 637.974612][T10681] rxe_eth0 speed is unknown, defaulting to 1000 [ 638.425548][T10397] Bluetooth: hci4: command tx timeout [ 641.021132][T10397] Bluetooth: hci4: command tx timeout [ 644.056862][T10689] rxe_eth0 speed is unknown, defaulting to 1000 [ 647.083112][T10698] rxe_eth0 speed is unknown, defaulting to 1000 [ 650.667857][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.667982][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.668619][T10644] bridge_slave_0: entered allmulticast mode [ 650.677987][T10644] bridge_slave_0: entered promiscuous mode [ 651.093679][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.093849][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.094100][T10644] bridge_slave_1: entered allmulticast mode [ 651.102761][T10644] bridge_slave_1: entered promiscuous mode [ 653.170048][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.170219][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.170448][T10665] bridge_slave_0: entered allmulticast mode [ 653.388808][T10665] bridge_slave_0: entered promiscuous mode [ 653.452235][T10644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.319449][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.319601][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.319899][T10665] bridge_slave_1: entered allmulticast mode [ 655.327112][T10665] bridge_slave_1: entered promiscuous mode [ 655.339795][T10644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.702538][T10665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.879745][T10644] team0: Port device team_slave_0 added [ 658.948761][T10665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.956977][T10644] team0: Port device team_slave_1 added [ 661.511780][T10665] team0: Port device team_slave_0 added [ 661.737932][T10644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.737951][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.737976][T10644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.023622][T10665] team0: Port device team_slave_1 added [ 662.941550][T10644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.941571][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.941597][T10644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.853815][T10665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.853832][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.853851][T10665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.981390][T10665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.981410][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.981436][T10665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.674310][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.732007][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.734106][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.740270][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.742396][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 668.448233][T10665] hsr_slave_0: entered promiscuous mode [ 668.451404][T10665] hsr_slave_1: entered promiscuous mode [ 668.453945][T10665] debugfs: 'hsr0' already exists in 'hsr' [ 668.453974][T10665] Cannot create hsr debugfs directory [ 668.595284][T10681] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.598286][T10681] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.598572][T10681] bridge_slave_0: entered allmulticast mode [ 668.674109][T10681] bridge_slave_0: entered promiscuous mode [ 669.955467][T10397] Bluetooth: hci5: command tx timeout [ 672.025733][T10397] Bluetooth: hci5: command tx timeout [ 673.014485][T10681] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.014628][T10681] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.014931][T10681] bridge_slave_1: entered allmulticast mode [ 673.018640][T10681] bridge_slave_1: entered promiscuous mode [ 674.106606][T10397] Bluetooth: hci5: command tx timeout [ 676.185499][T10397] Bluetooth: hci5: command tx timeout [ 676.726321][T10681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.883915][T10681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.433641][ T5592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 677.577351][ T5592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 677.681435][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.681597][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.681868][T10689] bridge_slave_0: entered allmulticast mode [ 677.719561][T10689] bridge_slave_0: entered promiscuous mode [ 677.758158][ T5592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 677.760181][ T5592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 677.760943][ T5592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 678.125656][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.125783][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.126051][T10689] bridge_slave_1: entered allmulticast mode [ 678.135084][T10689] bridge_slave_1: entered promiscuous mode [ 678.531026][T10681] team0: Port device team_slave_0 added [ 680.065198][T10397] Bluetooth: hci6: command tx timeout [ 681.448760][T10681] team0: Port device team_slave_1 added [ 681.900289][ T5592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 682.035601][ T5592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 682.041038][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.064486][ T5592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 682.065194][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 682.101216][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.107981][ T5592] Bluetooth: hci6: command tx timeout [ 682.930200][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.930326][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.930596][T10698] bridge_slave_0: entered allmulticast mode [ 682.946169][T10698] bridge_slave_0: entered promiscuous mode [ 683.437839][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.169632][T10751] rxe_eth0 speed is unknown, defaulting to 1000 [ 684.182618][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.182716][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.182962][T10698] bridge_slave_1: entered allmulticast mode [ 684.185949][T10397] Bluetooth: hci6: command tx timeout [ 684.215530][T10698] bridge_slave_1: entered promiscuous mode [ 684.825549][T10397] Bluetooth: hci0: command tx timeout [ 685.856802][T10698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.949491][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.949562][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.015007][T10698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.265924][T10397] Bluetooth: hci6: command tx timeout [ 686.839393][ T5592] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 686.911228][ T5592] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 686.915496][ T5594] Bluetooth: hci0: command tx timeout [ 686.948999][ T5592] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 686.980701][ T5592] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 686.981965][ T5592] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 688.985882][ T5592] Bluetooth: hci0: command tx timeout [ 689.305989][ T5592] Bluetooth: hci7: command tx timeout [ 691.075432][ T5592] Bluetooth: hci0: command tx timeout [ 691.432138][ T5592] Bluetooth: hci7: command tx timeout [ 692.820293][T10698] team0: Port device team_slave_0 added [ 693.468477][ T5592] Bluetooth: hci7: command tx timeout [ 693.804913][T10397] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 693.844231][T10397] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 693.851821][T10397] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 693.859550][T10397] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 693.866880][T10397] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 695.595606][ T5592] Bluetooth: hci7: command tx timeout [ 695.951302][T10397] Bluetooth: hci8: command tx timeout [ 697.623837][T10768] rxe_eth0 speed is unknown, defaulting to 1000 [ 698.025711][T10397] Bluetooth: hci8: command tx timeout [ 700.144130][T10397] Bluetooth: hci8: command tx timeout [ 702.185452][T10397] Bluetooth: hci8: command tx timeout [ 704.882101][T10782] rxe_eth0 speed is unknown, defaulting to 1000 [ 707.508377][T10793] rxe_eth0 speed is unknown, defaulting to 1000 [ 708.986917][ T38] INFO: task syz-executor:10359 blocked for more than 143 seconds. [ 708.986964][ T38] Tainted: G L syzkaller #0 [ 708.986975][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.986984][ T38] task:syz-executor state:D stack:17576 pid:10359 tgid:10359 ppid:1 task_flags:0x400140 flags:0x00080002 [ 708.987036][ T38] Call Trace: [ 708.987074][ ** replaying previous printk message ** [ 708.987074][ T38] [ 708.987167][ T38] __schedule+0x171d/0x56e0 [ 708.987367][ T38] ? __lock_acquire+0x747/0x2de0 [ 708.987484][ T38] ? __pfx___schedule+0x10/0x10 [ 708.987525][ T38] rt_mutex_schedule+0x76/0xf0 [ 708.987562][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 708.987622][ T38] ? rt_mutex_slowlock_block+0x33f/0x6a0 [ 708.987646][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 708.987670][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 708.987693][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 708.987732][ T38] ? del_device_store+0xd6/0x370 [ 708.987860][ T38] ? del_device_store+0xd6/0x370 [ 708.987901][ T38] mutex_lock_nested+0x163/0x1d0 [ 708.987925][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 708.987994][ T38] del_device_store+0xd6/0x370 [ 708.988017][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 708.988037][ T38] ? __pfx_del_device_store+0x10/0x10 [ 708.988059][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 708.988080][ T38] ? sysfs_kf_write+0x166/0x260 [ 708.988104][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 708.988123][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 708.988195][ T38] vfs_write+0x61e/0xbb0 [ 708.988258][ T38] ? __pfx_vfs_write+0x10/0x10 [ 708.988281][ T38] ? do_sys_openat2+0x18d/0x200 [ 708.988306][ T38] ? kmem_cache_free+0x187/0x6d0 [ 708.988349][ T38] ? fdget+0x171/0x250 [ 708.990051][ T38] ksys_write+0x156/0x270 [ 708.990082][ T38] ? __pfx_ksys_write+0x10/0x10 [ 708.990116][ T38] do_syscall_64+0x166/0x520 [ 708.990214][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.990267][ T38] ? clear_bhb_loop+0x70/0xc0 [ 708.990290][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.990315][ T38] RIP: 0033:0x7f4a9f9dfd8e [ 708.990367][ T38] RSP: 002b:00007fffbc612868 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 708.990418][ T38] RAX: ffffffffffffffda RBX: 0000555573564500 RCX: 00007f4a9f9dfd8e [ 708.990432][ T38] RDX: 0000000000000001 RSI: 00007fffbc6128f0 RDI: 0000000000000005 [ 708.990444][ T38] RBP: 00007f4a9fab73e4 R08: 0000000000000000 R09: 0000000000000000 [ 708.990463][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.990474][ T38] R13: 00007fffbc6128f0 R14: 00007fffbc613130 R15: 0000000000000003 [ 708.990506][ T38] [ 708.990575][ T38] [ 708.990575][ T38] Showing all locks held in the system: [ 708.990587][ T38] locks held by rcuc/0/19: 3, last CPU#0: [ 708.990645][ T38] #0: ffffffff8f2555e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 708.990719][ T38] #1: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 708.990766][ T38] #2: ffffffff8f3bfde0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1700 [ 708.990824][ T38] locks held by ksoftirqd/1/29: 5, last CPU#1: [ 708.990838][ T38] #0: ffffffff8f2555e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 708.990884][ T38] #1: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 708.990930][ T38] #2: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 708.991042][ T38] #3: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 708.991175][ T38] #4: ffff88801f6f5b58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 708.991226][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 708.991239][ T38] #0: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 708.991303][ T38] locks held by kworker/u8:2/48: 7, last CPU#0: [ 708.991316][ T38] #0: ffff888033d8d138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.991364][ T38] #1: ffffc90000ba7c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.991427][ T38] #2: ffff888062aea1c0 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xcf/0xf90 [ 708.995603][ T38] #3: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 708.995660][ T38] #4: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 708.995709][ T38] #5: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 708.995756][ T38] #6: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: inet_addr_type_dev_table+0x25/0x190 [ 708.995881][ T38] locks held by kworker/u8:5/69: 4, on CPU#1: [ 708.995895][ T38] #0: ffff88801bef0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.995954][ T38] #1: ffffc9000154fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.995999][ T38] #2: ffffffff907c8960 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 708.996104][ T38] #3: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 708.996183][ T38] locks held by kworker/u8:14/2327: 2, on CPU#1: [ 708.996196][ T38] #0: ffff88801cf52938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.996242][ T38] #1: ffffc90007e9fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.996325][ T38] locks held by getty/5339: 2, on CPU#1: [ 708.996337][ T38] #0: ffff88802d0720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 708.996472][ T38] #1: ffffc900044eb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 708.996536][ T38] locks held by kworker/1:7/5799: 3, last CPU#1: [ 708.996554][ T38] #0: ffff88813ff6a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.996598][ T38] #1: ffffc900062e7c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.996643][ T38] #2: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 708.996690][ T38] locks held by kworker/u8:20/6069: 2, on CPU#1: [ 708.996709][ T38] #0: ffff88801cf52938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.996759][ T38] #1: ffffc90006a87c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.996819][ T38] locks held by syz-executor/10311: 7, on CPU#1: [ 708.996832][ T38] #0: ffff888037018510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 708.996889][ T38] #1: ffff88804dba3478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 708.996938][ T38] #2: ffff88802a4abb48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 708.996985][ T38] #3: ffffffff90047578 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 708.997032][ T38] #4: ffff888062aec160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 709.006624][ T38] #5: ffff888068412310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 709.006723][ T38] #6: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.006779][ T38] locks held by syz-executor/10359: 4, on CPU#0: [ 709.006792][ T38] #0: ffff888037018510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 709.006843][ T38] #1: ffff88804122bc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 709.006886][ T38] #2: ffff88802a4abb48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 709.006932][ T38] #3: ffffffff90047578 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 709.006979][ T38] locks held by syz-executor/10394: 1, on CPU#1: [ 709.006992][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007045][ T38] locks held by syz-executor/10484: 1, on CPU#1: [ 709.007058][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007107][ T38] locks held by syz-executor/10521: 1, on CPU#0: [ 709.007120][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007178][ T38] locks held by syz-executor/10524: 1, on CPU#0: [ 709.007191][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007247][ T38] locks held by syz-executor/10549: 1, on CPU#1: [ 709.007260][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007311][ T38] locks held by syz.3.1394/10638: 1, on CPU#0: [ 709.007324][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007373][ T38] locks held by syz-executor/10644: 1, on CPU#1: [ 709.007386][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007451][ T38] locks held by syz-executor/10665: 1, on CPU#1: [ 709.007463][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007526][ T38] locks held by syz-executor/10681: 1, on CPU#1: [ 709.007551][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007599][ T38] locks held by syz-executor/10689: 1, on CPU#0: [ 709.007612][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007661][ T38] locks held by syz-executor/10698: 1, on CPU#1: [ 709.007674][ T38] #0: ffffffff8f3c5f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 709.007726][ T38] locks held by syz-executor/10751: 2, on CPU#1: [ 709.007739][ T38] #0: ffffffff90d26028 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 709.007857][ T38] #1: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 709.018507][ T38] locks held by syz-executor/10782: 2, on CPU#0: [ 709.018522][ T38] #0: ffffffff907c8960 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 709.018578][ T38] #1: ffffffff907d71b8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 709.018703][ T38] locks held by syz-executor/10793: 5, last CPU#1: [ 709.018717][ T38] #0: ffffffff907c8960 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 709.018763][ T38] #1: ffffffff90520ba0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 [ 709.018875][ T38] #2: ffffffff90520de0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 [ 709.018921][ T38] #3: ffff888037231208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 [ 709.018968][ T38] #4: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 709.019015][ T38] locks held by syz-executor/10798: 4, on CPU#1: [ 709.019027][ T38] #0: ffffffff907c8960 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 709.019071][ T38] #1: ffffffff90520ba0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 [ 709.019120][ T38] #2: ffffffff90520de0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 [ 709.019179][ T38] #3: ffff888037231208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 [ 709.019227][ T38] locks held by kworker/u8:12/10828: 2, last CPU#1: [ 709.019239][ T38] #0: ffff88801f353350 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb7/0x1590 [ 709.019287][ T38] #1: ffffffff8fb527f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0xf0/0x180 [ 709.019366][ T38] [ 709.019371][ T38] ============================================= [ 709.019371][ T38] [ 709.019386][ T38] NMI backtrace for cpu 1 [ 709.019413][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 709.019437][ T38] Tainted: [L]=SOFTLOCKUP [ 709.019443][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 709.019453][ T38] Call Trace: [ 709.019461][ T38] [ 709.019469][ T38] dump_stack_lvl+0xe8/0x150 [ 709.019508][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 709.019581][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 709.019622][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 709.019648][ T38] sys_info+0x135/0x170 [ 709.019666][ T38] watchdog+0xfd2/0x1030 [ 709.019715][ T38] ? watchdog+0x1c7/0x1030 [ 709.019741][ T38] kthread+0x38b/0x470 [ 709.019768][ T38] ? __pfx_watchdog+0x10/0x10 [ 709.019785][ T38] ? __pfx_kthread+0x10/0x10 [ 709.019811][ T38] ret_from_fork+0x514/0xb70 [ 709.019838][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 709.019858][ T38] ? __switch_to+0xc78/0x1410 [ 709.019894][ T38] ? __pfx_kthread+0x10/0x10 [ 709.019923][ T38] ret_from_fork_asm+0x1a/0x30 [ 709.019955][ T38] [ 709.019985][ T38] Sending NMI from CPU 1 to CPUs 0: [ 709.020016][ C0] NMI backtrace for cpu 0 [ 709.020030][ C0] CPU: 0 UID: 0 PID: 37 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 709.020063][ C0] Tainted: [L]=SOFTLOCKUP [ 709.020068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 709.020078][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 709.020146][ C0] Code: e8 ee 19 62 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f f9 ce fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da a9 fb 05 cc 44 89 f9 80 e1 07 [ 709.020160][ C0] RSP: 0018:ffffc90000ae78b8 EFLAGS: 00000202 [ 709.020175][ C0] RAX: 1ffffffff3618020 RBX: 00000000000003fd RCX: 0000000000000000 [ 709.020186][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 709.020196][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.020207][ C0] R10: dffffc0000000000 R11: ffffffff8564a340 R12: dffffc0000000000 [ 709.020218][ C0] R13: 0000000000000000 R14: ffffffff9b0c0300 R15: 0000000000000000 [ 709.020229][ C0] FS: 0000000000000000(0000) GS:ffff8881247ad000(0000) knlGS:0000000000000000 [ 709.020242][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.020254][ C0] CR2: 00007f908ac5687f CR3: 00000000886aa000 CR4: 00000000003526f0 [ 709.020268][ C0] Call Trace: [ 709.020275][ C0] [ 709.020283][ C0] wait_for_lsr+0x190/0x300 [ 709.020303][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 709.020327][ C0] serial8250_console_write+0xaa2/0x1220 [ 709.020349][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 709.020374][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 709.020410][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 709.020432][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 709.020461][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 709.020483][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 709.020501][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 709.020522][ C0] ? __kthread_parkme+0x71/0x1f0 [ 709.020542][ C0] ? __kthread_parkme+0x199/0x1f0 [ 709.020563][ C0] kthread+0x38b/0x470 [ 709.020585][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 709.020602][ C0] ? __pfx_kthread+0x10/0x10 [ 709.020624][ C0] ret_from_fork+0x514/0xb70 [ 709.020641][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 709.020656][ C0] ? __switch_to+0xc78/0x1410 [ 709.020679][ C0] ? __pfx_kthread+0x10/0x10 [ 709.020700][ C0] ret_from_fork_asm+0x1a/0x30 [ 709.020723][ C0] [ 709.035648][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 710.458373][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 710.469596][ T38] Tainted: [L]=SOFTLOCKUP [ 710.473935][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 710.484004][ T38] Call Trace: [ 710.487288][ T38] [ 710.490227][ T38] vpanic+0x56d/0xa60 [ 710.494226][ T38] ? __pfx___schedule+0x10/0x10 [ 710.499106][ T38] ? __pfx_vpanic+0x10/0x10 [ 710.503636][ T38] panic+0xc5/0xd0 [ 710.507373][ T38] ? __pfx_panic+0x10/0x10 [ 710.511803][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 710.517289][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 710.522685][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 710.528865][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 710.535045][ T38] watchdog+0x102b/0x1030 [ 710.539408][ T38] ? watchdog+0x1c7/0x1030 [ 710.543851][ T38] kthread+0x38b/0x470 [ 710.547944][ T38] ? __pfx_watchdog+0x10/0x10 [ 710.552638][ T38] ? __pfx_kthread+0x10/0x10 [ 710.557254][ T38] ret_from_fork+0x514/0xb70 [ 710.561872][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 710.567002][ T38] ? __switch_to+0xc78/0x1410 [ 710.571740][ T38] ? __pfx_kthread+0x10/0x10 [ 710.576348][ T38] ret_from_fork_asm+0x1a/0x30 [ 710.581146][ T38] [ 710.584442][ T38] Kernel Offset: disabled [ 710.588768][ T38] Rebooting in 86400 seconds..