last executing test programs: 2m49.561421524s ago: executing program 4 (id=1776): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 2m47.720669696s ago: executing program 4 (id=1780): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x17a, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000340)={0x20000014}) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000400)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 2m36.782736036s ago: executing program 4 (id=1800): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x800001d, 0x0) 2m34.590053924s ago: executing program 4 (id=1805): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) 2m32.339559749s ago: executing program 4 (id=1809): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000001380)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', 0x0, 0x10a) flock(r3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m31.102565235s ago: executing program 4 (id=1811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 2m15.533391392s ago: executing program 32 (id=1811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 1m25.660178878s ago: executing program 0 (id=1908): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000000c0)="935d", 0x2}], 0x1}, 0x24004871) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg$unix(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1}, 0x40010000) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)="f4b5b7", 0x3}], 0x1}, 0x40040) 1m24.765517361s ago: executing program 1 (id=1909): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 1m24.22699543s ago: executing program 1 (id=1912): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') 1m22.683896772s ago: executing program 0 (id=1914): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) read$FUSE(r3, &(0x7f0000005380)={0x2020}, 0x2020) 1m22.253298912s ago: executing program 0 (id=1915): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000500)="76380342e4b3000ce677f4b9ec33775dd269587b680942807f1e7600", 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e0c01031000ff"], 0xf) 1m20.861215421s ago: executing program 1 (id=1916): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r1, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 1m19.283301255s ago: executing program 0 (id=1918): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x1) 1m17.448677352s ago: executing program 1 (id=1920): r0 = io_uring_setup(0x539a, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x2, 0x2fb}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000027c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0xcb, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.908137316s ago: executing program 0 (id=1922): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) ioperm(0x200, 0x7ff, 0x2) acct(&(0x7f0000000100)='./file0\x00') 1m16.907681594s ago: executing program 1 (id=1923): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x304, 0x0, 0x0, 0x40801}, 0x4000000) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) syslog(0x4, &(0x7f0000000140)=""/19, 0xb12288e90d7c8384) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x401}}]}}, 0x0, 0x3e, 0x0, 0x1, 0x1}, 0x28) clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1m16.269453198s ago: executing program 1 (id=1924): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x8000001}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f00000001c0)}, 0x20) 1m15.059781067s ago: executing program 0 (id=1926): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000700)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000740)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 1m0.163632676s ago: executing program 33 (id=1924): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x8000001}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f00000001c0)}, 0x20) 59.789853031s ago: executing program 34 (id=1926): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000700)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000740)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 59.505928867s ago: executing program 2 (id=1941): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) utimensat(r1, 0x0, &(0x7f0000000340)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) 57.254590484s ago: executing program 2 (id=1943): socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5842) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0xa1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 56.106846907s ago: executing program 2 (id=1944): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x94}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 54.288324804s ago: executing program 2 (id=1946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000380)=0xce, 0x4) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000440)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x14, &(0x7f00000004c0)=[{&(0x7f0000000500)=' ', 0x100120}], 0x1}, 0x0) 53.120937632s ago: executing program 2 (id=1948): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xd) fchdir(r1) openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', &(0x7f0000000500)={0x109802, 0x0, 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 51.474744047s ago: executing program 2 (id=1950): unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x400000, 0x24000, 0xe}}) 35.95444796s ago: executing program 35 (id=1950): unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x400000, 0x24000, 0xe}}) 33.687591387s ago: executing program 3 (id=1961): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x0, 0x39, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 29.415797891s ago: executing program 3 (id=1962): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x46, 0x0, 0x1}, 0xd9c23e346d1c9e0a) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) write(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 28.584033577s ago: executing program 3 (id=1963): dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000002c0)={'dummy0\x00'}) 23.493792139s ago: executing program 3 (id=1964): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000f00), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a40)={0x1, &(0x7f0000001a80)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 21.68053637s ago: executing program 3 (id=1965): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 15.949827459s ago: executing program 3 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x24008844) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000200)={0x4, [0x0, 0x4, 0x2, 0xf]}, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) 0s ago: executing program 36 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x24008844) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000200)={0x4, [0x0, 0x4, 0x2, 0xf]}, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) kernel console output (not intermixed with test programs): e_slave_0) entered disabled state [ 250.702086][ T8098] netlink: 52 bytes leftover after parsing attributes in process `syz.3.661'. [ 251.084883][ T5716] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 251.157179][ T35] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 251.234849][ T5716] usb 5-1: Using ep0 maxpacket: 8 [ 251.235915][ T5716] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 251.240819][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.240940][ T5716] usb 5-1: Product: syz [ 251.240958][ T5716] usb 5-1: Manufacturer: syz [ 251.240975][ T5716] usb 5-1: SerialNumber: syz [ 251.305826][ T35] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 251.309390][ T35] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.309426][ T35] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.309468][ T35] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.407630][ T5716] usb 5-1: config 0 descriptor?? [ 251.429432][ T35] usb 4-1: config 0 descriptor?? [ 251.633012][ T5716] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.016966][ T35] aquacomputer_d5next 0003:0C70:F0B6.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 252.061919][ T5716] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 252.116383][ T5716] usb 5-1: USB disconnect, device number 8 [ 252.279893][ T5317] usb 4-1: USB disconnect, device number 2 [ 252.377644][ T8111] fido_id[8111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 255.827411][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.839701][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.038519][ T8200] netlink: 'syz.3.685': attribute type 4 has an invalid length. [ 256.086225][ T8200] netlink: 'syz.3.685': attribute type 4 has an invalid length. [ 256.434810][ T35] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 256.585560][ T35] usb 4-1: Using ep0 maxpacket: 8 [ 256.590112][ T35] usb 4-1: unable to get BOS descriptor or descriptor too short [ 256.590171][ T35] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 256.592841][ T35] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.592922][ T35] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 256.592968][ T35] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 205, changing to 7 [ 256.593010][ T35] usb 4-1: config 1 interface 0 has no altsetting 0 [ 256.666899][ T35] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.666930][ T35] usb 4-1: Product: syz [ 256.666947][ T35] usb 4-1: Manufacturer: syz [ 256.666963][ T35] usb 4-1: SerialNumber: syz [ 257.163840][ T35] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.181782][ T35] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 257.433733][ T35] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 257.461393][ T35] usb 4-1: USB disconnect, device number 3 [ 257.635480][ T7966] udevd[7966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.755590][ T8269] FAULT_INJECTION: forcing a failure. [ 258.755590][ T8269] name fail_futex, interval 1, probability 0, space 0, times 0 [ 258.755634][ T8269] CPU: 0 UID: 0 PID: 8269 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 258.755660][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.755674][ T8269] Call Trace: [ 258.755683][ T8269] [ 258.755694][ T8269] dump_stack_lvl+0xe8/0x150 [ 258.755738][ T8269] should_fail_ex+0x46b/0x600 [ 258.755770][ T8269] get_futex_key+0x1ab/0x1410 [ 258.755808][ T8269] ? __lock_acquire+0x747/0x2de0 [ 258.755854][ T8269] ? __pfx_get_futex_key+0x10/0x10 [ 258.755903][ T8269] futex_wake+0x119/0x600 [ 258.755933][ T8269] ? lock_acquire+0x115/0x350 [ 258.755985][ T8269] ? __pfx_futex_wake+0x10/0x10 [ 258.756034][ T8269] do_futex+0x458/0x4e0 [ 258.756066][ T8269] ? __pfx_do_futex+0x10/0x10 [ 258.756090][ T8269] ? smack_file_fcntl+0x152/0x320 [ 258.756131][ T8269] ? __pfx_do_fcntl+0x10/0x10 [ 258.756173][ T8269] __se_sys_futex+0x3a8/0x450 [ 258.756204][ T8269] ? __fget_files+0x2a/0x420 [ 258.756234][ T8269] ? __pfx___se_sys_futex+0x10/0x10 [ 258.756271][ T8269] ? __x64_sys_futex+0x21/0xf0 [ 258.756301][ T8269] do_syscall_64+0x166/0x520 [ 258.756324][ T8269] ? trace_irq_disable+0x3b/0x140 [ 258.756357][ T8269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.756383][ T8269] ? clear_bhb_loop+0x70/0xc0 [ 258.756412][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.756436][ T8269] RIP: 0033:0x7f5d1330f559 [ 258.756458][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.756477][ T8269] RSP: 002b:00007f5d1155e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.756503][ T8269] RAX: ffffffffffffffda RBX: 00007f5d13595fa8 RCX: 00007f5d1330f559 [ 258.756521][ T8269] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5d13595fac [ 258.756537][ T8269] RBP: 00007f5d13595fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 258.756553][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.756568][ T8269] R13: 00007f5d13596038 R14: 00007fffb55c8b40 R15: 00007fffb55c8c28 [ 258.756605][ T8269] [ 259.339442][ T5590] Bluetooth: hci1: unexpected event for opcode 0x0035 [ 259.726057][ T5723] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 259.874874][ T5723] usb 5-1: Using ep0 maxpacket: 16 [ 259.878243][ T5723] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 259.882057][ T5723] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 259.882109][ T5723] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 259.882139][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.882175][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.976930][ T5723] usb 5-1: config 0 descriptor?? [ 260.181467][ T8306] capability: warning: `syz.0.722' uses 32-bit capabilities (legacy support in use) [ 260.394919][ T5723] usbhid 5-1:0.0: can't add hid device: -71 [ 260.395057][ T5723] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 260.451391][ T5723] usb 5-1: USB disconnect, device number 9 [ 260.634350][ T8312] FAULT_INJECTION: forcing a failure. [ 260.634350][ T8312] name failslab, interval 1, probability 0, space 0, times 0 [ 260.634393][ T8312] CPU: 1 UID: 0 PID: 8312 Comm: syz.0.734 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 260.634421][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.634436][ T8312] Call Trace: [ 260.634445][ T8312] [ 260.634455][ T8312] dump_stack_lvl+0xe8/0x150 [ 260.634500][ T8312] should_fail_ex+0x46b/0x600 [ 260.634529][ T8312] ? __d_alloc+0x37/0x830 [ 260.634564][ T8312] should_failslab+0xa8/0x100 [ 260.634594][ T8312] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 260.634644][ T8312] ? __d_alloc+0x37/0x830 [ 260.634685][ T8312] __d_alloc+0x37/0x830 [ 260.634717][ T8312] ? hashlen_string+0xb6/0x110 [ 260.634749][ T8312] d_alloc_name+0xba/0x270 [ 260.634785][ T8312] ? __pfx_d_alloc_name+0x10/0x10 [ 260.634822][ T8312] ? fast_dput+0x481/0x690 [ 260.634857][ T8312] simple_fill_super+0x385/0x710 [ 260.634898][ T8312] nfsd_fill_super+0x8a/0x450 [ 260.634926][ T8312] ? rcu_is_watching+0x16/0xb0 [ 260.634953][ T8312] ? __pfx_nfsd_fill_super+0x10/0x10 [ 260.634983][ T8312] get_tree_keyed+0xe2/0x170 [ 260.635021][ T8312] vfs_get_tree+0x92/0x2a0 [ 260.635060][ T8312] do_new_mount+0x325/0xb00 [ 260.635089][ T8312] ? cap_capable+0x123/0x460 [ 260.635117][ T8312] ? __pfx_do_new_mount+0x10/0x10 [ 260.635150][ T8312] ? ns_capable+0x89/0xe0 [ 260.635188][ T8312] ? path_mount+0x647/0x1050 [ 260.635221][ T8312] ? user_path_at+0xd4/0x160 [ 260.635256][ T8312] __se_sys_mount+0x31d/0x420 [ 260.635293][ T8312] ? __pfx___se_sys_mount+0x10/0x10 [ 260.635331][ T8312] ? __x64_sys_mount+0x20/0xc0 [ 260.635363][ T8312] do_syscall_64+0x166/0x520 [ 260.635386][ T8312] ? trace_irq_disable+0x3b/0x140 [ 260.635419][ T8312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.635444][ T8312] ? clear_bhb_loop+0x70/0xc0 [ 260.635473][ T8312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.635497][ T8312] RIP: 0033:0x7f99f815f559 [ 260.635519][ T8312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.635538][ T8312] RSP: 002b:00007f99f63b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.635563][ T8312] RAX: ffffffffffffffda RBX: 00007f99f83e5fa0 RCX: 00007f99f815f559 [ 260.635581][ T8312] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 260.635604][ T8312] RBP: 00007f99f81f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 260.635620][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.635634][ T8312] R13: 00007f99f83e6038 R14: 00007f99f83e5fa0 R15: 00007fff6bb962c8 [ 260.635673][ T8312] [ 261.276013][ T1644] kernel write not supported for file [eventfd] (pid: 1644 comm: kworker/1:2) [ 261.387712][ T8323] input: syz0 as /devices/virtual/input/input8 [ 261.603117][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 262.692068][ T8361] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 263.006099][ T8370] bond2: (slave geneve2): making interface the new active one [ 263.052219][ T8370] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 263.056240][ T7506] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 263.056452][ T7506] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 263.064101][ T7506] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 263.064210][ T7506] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 263.102508][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 263.102527][ T36] audit: type=1326 audit(1792560234.227:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.1.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd757ac92d7 code=0x0 [ 263.469391][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 263.558287][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 263.579186][ T7506] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.579243][ T7506] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.579284][ T7506] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.579324][ T7506] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.665664][ T201] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 263.814848][ T201] usb 1-1: Using ep0 maxpacket: 8 [ 263.842303][ T201] usb 1-1: unable to get BOS descriptor or descriptor too short [ 263.842367][ T201] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 263.864217][ T201] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 263.864249][ T201] usb 1-1: config 0 has no interface number 0 [ 263.864299][ T201] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 263.864331][ T201] usb 1-1: config 0 interface 88 has no altsetting 0 [ 263.924343][ T201] usb 1-1: string descriptor 0 read error: -22 [ 263.924509][ T201] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 263.993816][ T201] usb 1-1: config 0 descriptor?? [ 264.044534][ T201] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input9 [ 264.934911][ T1644] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 265.115769][ T1644] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 265.157902][ T1644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.157938][ T1644] usb 2-1: Product: syz [ 265.157956][ T1644] usb 2-1: Manufacturer: syz [ 265.157975][ T1644] usb 2-1: SerialNumber: syz [ 266.182046][ T1644] rtl8150 2-1:1.0: couldn't reset the device [ 266.182450][ T1644] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 266.316544][ T1644] usb 2-1: USB disconnect, device number 4 [ 266.661645][ T201] usb 1-1: USB disconnect, device number 6 [ 266.795673][ T7964] udevd[7964]: Error opening device "/dev/input/event4": Input/output error [ 266.795913][ T7964] udevd[7964]: Unable to EVIOCGABS device "/dev/input/event4" [ 266.796038][ T7964] udevd[7964]: Unable to EVIOCGABS device "/dev/input/event4" [ 267.721608][ T8436] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 267.957395][ T8438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.060809][ T8438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.107461][ T8446] sock: sock_set_timeout: `syz.2.769' (pid 8446) tries to set negative timeout [ 268.144389][ T8438] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 268.259702][ T8438] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 268.299563][ T8438] bond0 (unregistering): Released all slaves [ 269.175366][ T8475] syzkaller1: entered promiscuous mode [ 269.175400][ T8475] syzkaller1: entered allmulticast mode [ 269.895603][ T8496] FAULT_INJECTION: forcing a failure. [ 269.895603][ T8496] name failslab, interval 1, probability 0, space 0, times 0 [ 269.895644][ T8496] CPU: 0 UID: 0 PID: 8496 Comm: syz.1.789 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 269.895669][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.895682][ T8496] Call Trace: [ 269.895690][ T8496] [ 269.895699][ T8496] dump_stack_lvl+0xe8/0x150 [ 269.895740][ T8496] should_fail_ex+0x46b/0x600 [ 269.895771][ T8496] should_failslab+0xa8/0x100 [ 269.895795][ T8496] ? skb_clone+0x212/0x3a0 [ 269.895842][ T8496] kmem_cache_alloc_noprof+0x99/0x680 [ 269.895879][ T8496] ? skb_clone+0x212/0x3a0 [ 269.895921][ T8496] skb_clone+0x212/0x3a0 [ 269.895958][ T8496] bpf_clone_redirect+0x170/0x4b0 [ 269.895993][ T8496] ? __local_bh_disable_ip+0x3d/0x420 [ 269.896031][ T8496] ? bpf_test_run+0x1d1/0x830 [ 269.896054][ T8496] bpf_prog_53f18857bc887b09+0x22/0x2a [ 269.896075][ T8496] bpf_test_run+0x354/0x830 [ 269.896119][ T8496] ? __pfx_bpf_test_run+0x10/0x10 [ 269.896153][ T8496] ? slab_build_skb+0x4f/0x400 [ 269.896186][ T8496] ? __kasan_krealloc+0xec/0x110 [ 269.896223][ T8496] ? convert___skb_to_skb+0x3d/0x5b0 [ 269.896253][ T8496] bpf_prog_test_run_skb+0xe35/0x2230 [ 269.896297][ T8496] ? __fget_files+0x2a/0x420 [ 269.896337][ T8496] ? __fget_files+0x3a8/0x420 [ 269.896367][ T8496] ? __fget_files+0x2a/0x420 [ 269.896404][ T8496] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 269.896430][ T8496] bpf_prog_test_run+0x2cb/0x340 [ 269.896462][ T8496] __sys_bpf+0xa22/0xd90 [ 269.896494][ T8496] ? __pfx___sys_bpf+0x10/0x10 [ 269.896519][ T8496] ? do_futex+0x3e7/0x4e0 [ 269.896578][ T8496] ? __pfx___se_sys_futex+0x10/0x10 [ 269.896605][ T8496] ? rcu_is_watching+0x16/0xb0 [ 269.896637][ T8496] __x64_sys_bpf+0xba/0xd0 [ 269.896677][ T8496] do_syscall_64+0x166/0x520 [ 269.896699][ T8496] ? trace_irq_disable+0x3b/0x140 [ 269.896733][ T8496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.896758][ T8496] ? clear_bhb_loop+0x70/0xc0 [ 269.896788][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.896811][ T8496] RIP: 0033:0x7fd757acf559 [ 269.896833][ T8496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.896854][ T8496] RSP: 002b:00007fd755d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.896879][ T8496] RAX: ffffffffffffffda RBX: 00007fd757d55fa0 RCX: 00007fd757acf559 [ 269.896897][ T8496] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 269.896913][ T8496] RBP: 00007fd757b66b20 R08: 0000000000000000 R09: 0000000000000000 [ 269.896928][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.896943][ T8496] R13: 00007fd757d56038 R14: 00007fd757d55fa0 R15: 00007fffdee3da68 [ 269.896981][ T8496] [ 270.452062][ T8500] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 270.452101][ T8500] overlayfs: failed to set xattr on upper [ 270.452111][ T8500] overlayfs: ...falling back to redirect_dir=nofollow. [ 270.452121][ T8500] overlayfs: ...falling back to index=off. [ 270.452130][ T8500] overlayfs: ...falling back to uuid=null. [ 270.943967][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 271.919900][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 271.920069][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 272.052949][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 272.052981][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 272.177448][ T8548] netlink: 'syz.3.806': attribute type 4 has an invalid length. [ 272.177477][ T8548] netlink: 17 bytes leftover after parsing attributes in process `syz.3.806'. [ 272.178462][ T8548] FAULT_INJECTION: forcing a failure. [ 272.178462][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 272.178505][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.3.806 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 272.178526][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 272.178544][ T8548] Call Trace: [ 272.178552][ T8548] [ 272.178560][ T8548] dump_stack_lvl+0xe8/0x150 [ 272.178595][ T8548] should_fail_ex+0x46b/0x600 [ 272.178622][ T8548] should_failslab+0xa8/0x100 [ 272.178646][ T8548] __kmalloc_noprof+0xf6/0x790 [ 272.178677][ T8548] ? tnode_new+0xc7/0x3b0 [ 272.178704][ T8548] ? tnode_new+0xc7/0x3b0 [ 272.178738][ T8548] tnode_new+0xc7/0x3b0 [ 272.178770][ T8548] resize+0x3e1/0x2490 [ 272.178810][ T8548] ? put_child+0x4a3/0x790 [ 272.178843][ T8548] fib_insert_alias+0xd9a/0x10f0 [ 272.178879][ T8548] fib_trie_unmerge+0x312/0xce0 [ 272.178917][ T8548] fib_unmerge+0xc5/0x350 [ 272.178955][ T8548] fib4_rule_configure+0x2c9/0x9d0 [ 272.178991][ T8548] fib_newrule+0x61e/0xf20 [ 272.179015][ T8548] ? __lock_acquire+0x747/0x2de0 [ 272.179046][ T8548] ? __pfx_fib_newrule+0x10/0x10 [ 272.179132][ T8548] ? __pfx_fib_nl_newrule+0x10/0x10 [ 272.179159][ T8548] rtnetlink_rcv_msg+0x802/0xc00 [ 272.179201][ T8548] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 272.179236][ T8548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.179273][ T8548] ? ref_tracker_free+0x668/0x820 [ 272.179299][ T8548] ? __pfx_ref_tracker_free+0x10/0x10 [ 272.179321][ T8548] ? __asan_memcpy+0x40/0x70 [ 272.179348][ T8548] ? __skb_clone+0x5c/0x6c0 [ 272.179384][ T8548] netlink_rcv_skb+0x226/0x4a0 [ 272.179405][ T8548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.179432][ T8548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.179463][ T8548] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.179488][ T8548] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.179513][ T8548] netlink_unicast+0x90c/0xac0 [ 272.179560][ T8548] netlink_sendmsg+0x884/0xba0 [ 272.179589][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.179607][ T8548] ? __lock_acquire+0x747/0x2de0 [ 272.179638][ T8548] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 272.179671][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.179690][ T8548] sock_sendmsg_nosec+0x13a/0x180 [ 272.179714][ T8548] ____sys_sendmsg+0x565/0x870 [ 272.179752][ T8548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.179790][ T8548] ? import_iovec+0x73/0xa0 [ 272.179816][ T8548] ___sys_sendmsg+0x2a5/0x360 [ 272.179843][ T8548] ? __lock_acquire+0x747/0x2de0 [ 272.179874][ T8548] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.179906][ T8548] ? futex_wait+0x2a2/0x390 [ 272.179960][ T8548] ? __fget_files+0x3a8/0x420 [ 272.179986][ T8548] ? __fget_files+0x2a/0x420 [ 272.180019][ T8548] __x64_sys_sendmsg+0x1b7/0x290 [ 272.180051][ T8548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.180100][ T8548] do_syscall_64+0x166/0x520 [ 272.180118][ T8548] ? trace_irq_disable+0x3b/0x140 [ 272.180145][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.180164][ T8548] ? clear_bhb_loop+0x70/0xc0 [ 272.180188][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.180207][ T8548] RIP: 0033:0x7f5d1330f559 [ 272.180225][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.180242][ T8548] RSP: 002b:00007f5d1155e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.180263][ T8548] RAX: ffffffffffffffda RBX: 00007f5d13595fa0 RCX: 00007f5d1330f559 [ 272.180278][ T8548] RDX: 0000000000004000 RSI: 0000200000000340 RDI: 0000000000000005 [ 272.180290][ T8548] RBP: 00007f5d133a6b20 R08: 0000000000000000 R09: 0000000000000000 [ 272.180302][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.180313][ T8548] R13: 00007f5d13596038 R14: 00007f5d13595fa0 R15: 00007fffb55c8c28 [ 272.180345][ T8548] [ 272.780690][ T36] audit: type=1326 audit(1792560243.907:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.4.810" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x0 [ 274.152462][ T171] IPVS: starting estimator thread 0... [ 274.244968][ T8592] IPVS: using max 8 ests per chain, 19200 per kthread [ 274.473086][ T8598] FAULT_INJECTION: forcing a failure. [ 274.473086][ T8598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.473131][ T8598] CPU: 0 UID: 0 PID: 8598 Comm: syz.1.824 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 274.473156][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.473171][ T8598] Call Trace: [ 274.473186][ T8598] [ 274.473198][ T8598] dump_stack_lvl+0xe8/0x150 [ 274.473243][ T8598] should_fail_ex+0x46b/0x600 [ 274.473274][ T8598] prepare_alloc_pages+0x21e/0x650 [ 274.473307][ T8598] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 274.473348][ T8598] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 274.473379][ T8598] ? __pfx_policy_nodemask+0x10/0x10 [ 274.473416][ T8598] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 274.473448][ T8598] alloc_pages_mpol+0xd4/0x280 [ 274.473481][ T8598] alloc_pages_noprof+0xd2/0x2f0 [ 274.473511][ T8598] kvm_coalesced_mmio_init+0x1d/0x130 [ 274.473546][ T8598] kvm_dev_ioctl+0x13a4/0x17e0 [ 274.473582][ T8598] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 274.473616][ T8598] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.473647][ T8598] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 274.473671][ T8598] __se_sys_ioctl+0xff/0x170 [ 274.473711][ T8598] do_syscall_64+0x166/0x520 [ 274.473732][ T8598] ? trace_irq_disable+0x3b/0x140 [ 274.473767][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.473792][ T8598] ? clear_bhb_loop+0x70/0xc0 [ 274.473822][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.473846][ T8598] RIP: 0033:0x7fd757acf559 [ 274.473869][ T8598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.473888][ T8598] RSP: 002b:00007fd755d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.473913][ T8598] RAX: ffffffffffffffda RBX: 00007fd757d55fa0 RCX: 00007fd757acf559 [ 274.473931][ T8598] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 274.473947][ T8598] RBP: 00007fd757b66b20 R08: 0000000000000000 R09: 0000000000000000 [ 274.473962][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.473975][ T8598] R13: 00007fd757d56038 R14: 00007fd757d55fa0 R15: 00007fffdee3da68 [ 274.474013][ T8598] [ 274.857373][ T36] audit: type=1326 audit(1792560245.977:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 274.857444][ T36] audit: type=1326 audit(1792560245.987:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 274.949720][ T36] audit: type=1326 audit(1792560246.077:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 274.967009][ T36] audit: type=1326 audit(1792560246.077:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 274.967190][ T36] audit: type=1326 audit(1792560246.087:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 275.018164][ T36] audit: type=1326 audit(1792560246.147:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 275.018477][ T36] audit: type=1326 audit(1792560246.147:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcba7d9f2c2 code=0x7ffc0000 [ 275.119169][ T8611] netlink: 'syz.2.831': attribute type 16 has an invalid length. [ 275.119200][ T8611] netlink: 'syz.2.831': attribute type 17 has an invalid length. [ 275.426032][ T8614] FAULT_INJECTION: forcing a failure. [ 275.426032][ T8614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.426074][ T8614] CPU: 0 UID: 0 PID: 8614 Comm: syz.1.830 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 275.426100][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 275.426113][ T8614] Call Trace: [ 275.426126][ T8614] [ 275.426137][ T8614] dump_stack_lvl+0xe8/0x150 [ 275.426176][ T8614] should_fail_ex+0x46b/0x600 [ 275.426207][ T8614] prepare_alloc_pages+0x21e/0x650 [ 275.426238][ T8614] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 275.426265][ T8614] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 275.426293][ T8614] ? __pfx_policy_nodemask+0x10/0x10 [ 275.426324][ T8614] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.426362][ T8614] alloc_pages_mpol+0xd4/0x280 [ 275.426401][ T8614] alloc_pages_noprof+0xd2/0x2f0 [ 275.426430][ T8614] get_zeroed_page_noprof+0x1a/0x90 [ 275.426453][ T8614] comedi_buf_alloc+0x3ca/0x8f0 [ 275.426500][ T8614] comedi_device_postconfig+0x59b/0xd00 [ 275.426546][ T8614] comedi_device_attach+0x554/0x730 [ 275.426585][ T8614] comedi_unlocked_ioctl+0x8f4/0x1af0 [ 275.426630][ T8614] ? kasan_quarantine_put+0xbb/0x1f0 [ 275.426667][ T8614] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 275.426711][ T8614] ? do_vfs_ioctl+0x1184/0x1550 [ 275.426752][ T8614] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 275.426787][ T8614] ? __pfx_smack_log+0x10/0x10 [ 275.426829][ T8614] ? smk_tskacc+0x2fb/0x370 [ 275.426865][ T8614] ? smack_file_ioctl+0x265/0x370 [ 275.426904][ T8614] ? __pfx_smack_file_ioctl+0x10/0x10 [ 275.426949][ T8614] ? __fget_files+0x2a/0x420 [ 275.426979][ T8614] ? __fget_files+0x2a/0x420 [ 275.427012][ T8614] ? bpf_lsm_file_ioctl+0x9/0x20 [ 275.427040][ T8614] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 275.427065][ T8614] __se_sys_ioctl+0xff/0x170 [ 275.427102][ T8614] do_syscall_64+0x166/0x520 [ 275.427123][ T8614] ? trace_irq_disable+0x3b/0x140 [ 275.427156][ T8614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.427178][ T8614] ? clear_bhb_loop+0x70/0xc0 [ 275.427206][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.427228][ T8614] RIP: 0033:0x7fd757acf559 [ 275.427250][ T8614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.427269][ T8614] RSP: 002b:00007fd755d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.427296][ T8614] RAX: ffffffffffffffda RBX: 00007fd757d55fa0 RCX: 00007fd757acf559 [ 275.427314][ T8614] RDX: 0000200000000380 RSI: 0000000040946400 RDI: 0000000000000004 [ 275.427330][ T8614] RBP: 00007fd757b66b20 R08: 0000000000000000 R09: 0000000000000000 [ 275.427343][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.427356][ T8614] R13: 00007fd757d56038 R14: 00007fd757d55fa0 R15: 00007fffdee3da68 [ 275.427398][ T8614] [ 275.586965][ T8614] comedi comedi2: Buffer allocation failed [ 276.560686][ T36] audit: type=1326 audit(1792560247.687:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcba7d9f357 code=0x7ffc0000 [ 276.560758][ T36] audit: type=1326 audit(1792560247.687:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.4.829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 277.370885][ T8649] FAULT_INJECTION: forcing a failure. [ 277.370885][ T8649] name failslab, interval 1, probability 0, space 0, times 0 [ 277.370927][ T8649] CPU: 0 UID: 0 PID: 8649 Comm: syz.1.846 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 277.370955][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.370969][ T8649] Call Trace: [ 277.370978][ T8649] [ 277.370989][ T8649] dump_stack_lvl+0xe8/0x150 [ 277.371031][ T8649] should_fail_ex+0x46b/0x600 [ 277.371063][ T8649] should_failslab+0xa8/0x100 [ 277.371093][ T8649] __kmalloc_cache_noprof+0x9c/0x670 [ 277.371117][ T8649] ? __rdma_create_id+0x65/0x7b0 [ 277.371150][ T8649] ? __rdma_create_id+0x65/0x7b0 [ 277.371186][ T8649] ? __pfx_ucma_event_handler+0x10/0x10 [ 277.371213][ T8649] ? __pfx_ucma_event_handler+0x10/0x10 [ 277.371237][ T8649] __rdma_create_id+0x65/0x7b0 [ 277.371275][ T8649] ? __pfx_ucma_event_handler+0x10/0x10 [ 277.371298][ T8649] rdma_create_user_id+0x81/0xc0 [ 277.371335][ T8649] ucma_create_id+0x22e/0x370 [ 277.371375][ T8649] ? __pfx_ucma_create_id+0x10/0x10 [ 277.371430][ T8649] ucma_write+0x257/0x2f0 [ 277.371468][ T8649] ? __pfx_ucma_write+0x10/0x10 [ 277.371503][ T8649] ? security_file_permission+0x75/0x260 [ 277.371529][ T8649] ? rw_verify_area+0x209/0x4d0 [ 277.371575][ T8649] ? __pfx_ucma_write+0x10/0x10 [ 277.371611][ T8649] vfs_write+0x29f/0xbb0 [ 277.371653][ T8649] ? __pfx_vfs_write+0x10/0x10 [ 277.371687][ T8649] ? __fget_files+0x2a/0x420 [ 277.371717][ T8649] ? __fget_files+0x3a8/0x420 [ 277.371745][ T8649] ? __fget_files+0x2a/0x420 [ 277.371780][ T8649] ? fdget+0x1b2/0x250 [ 277.371817][ T8649] ksys_write+0x156/0x270 [ 277.371853][ T8649] ? __pfx_ksys_write+0x10/0x10 [ 277.371899][ T8649] do_syscall_64+0x166/0x520 [ 277.371922][ T8649] ? trace_irq_disable+0x3b/0x140 [ 277.371961][ T8649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.371986][ T8649] ? clear_bhb_loop+0x70/0xc0 [ 277.372015][ T8649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.372039][ T8649] RIP: 0033:0x7fd757acf559 [ 277.372061][ T8649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.372082][ T8649] RSP: 002b:00007fd755d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.372108][ T8649] RAX: ffffffffffffffda RBX: 00007fd757d55fa0 RCX: 00007fd757acf559 [ 277.372126][ T8649] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000003 [ 277.372141][ T8649] RBP: 00007fd757b66b20 R08: 0000000000000000 R09: 0000000000000000 [ 277.372156][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.372171][ T8649] R13: 00007fd757d56038 R14: 00007fd757d55fa0 R15: 00007fffdee3da68 [ 277.372209][ T8649] [ 278.682666][ T8673] rxe_eth0 speed is unknown, defaulting to 1000 [ 280.747322][ T8723] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 282.907173][ T8723] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 283.060848][ T8734] fuse: fd is not a fuse device [ 283.163872][ T8736] bridge_slave_0: left allmulticast mode [ 283.163926][ T8736] bridge_slave_0: left promiscuous mode [ 283.179507][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.646240][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 287.792988][ T8849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'. [ 287.887936][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'. [ 288.912450][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 288.912472][ T36] audit: type=1326 audit(1792560260.037:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd757acf559 code=0x7ffc0000 [ 288.912525][ T36] audit: type=1326 audit(1792560260.037:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd757acf559 code=0x7ffc0000 [ 288.943948][ T36] audit: type=1326 audit(1792560260.067:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd757acf559 code=0x7ffc0000 [ 288.944102][ T36] audit: type=1326 audit(1792560260.067:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd757acf559 code=0x7ffc0000 [ 288.990103][ T36] audit: type=1326 audit(1792560260.067:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd757acf559 code=0x7ffc0000 [ 288.990271][ T36] audit: type=1326 audit(1792560260.077:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd757acf559 code=0x7ffc0000 [ 288.990427][ T36] audit: type=1326 audit(1792560260.077:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd757acf559 code=0x7ffc0000 [ 288.990551][ T36] audit: type=1326 audit(1792560260.097:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd757a8fd8e code=0x7ffc0000 [ 288.991924][ T36] audit: type=1326 audit(1792560260.097:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd757acf559 code=0x7ffc0000 [ 288.992076][ T36] audit: type=1326 audit(1792560260.117:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.905" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd757acf559 code=0x7ffc0000 [ 290.702146][ T8899] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 290.763015][ T8899] bond0: entered promiscuous mode [ 290.763630][ T8899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.976136][ T8899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.977015][ T8899] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 290.977041][ T8899] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 291.051156][ T8899] bond0: (slave ip6gre1): making interface the new active one [ 291.051189][ T8899] ip6gre1: entered promiscuous mode [ 291.082800][ T8899] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 291.343868][ T8916] netlink: 52 bytes leftover after parsing attributes in process `syz.0.926'. [ 291.889912][ T5590] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 292.093052][ T8946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.937'. [ 292.168964][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.937'. [ 292.754233][ T8959] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 294.495658][ T36] kauditd_printk_skb: 152 callbacks suppressed [ 294.495680][ T36] audit: type=1326 audit(1792560265.617:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9005 comm="syz.0.960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f815f559 code=0x7ffc0000 [ 294.495736][ T36] audit: type=1326 audit(1792560265.627:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9005 comm="syz.0.960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f815f559 code=0x7ffc0000 [ 294.499795][ T36] audit: type=1326 audit(1792560265.627:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9005 comm="syz.0.960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f99f815f559 code=0x7ffc0000 [ 294.946691][ T36] audit: type=1326 audit(1792560266.067:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9005 comm="syz.0.960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f815f559 code=0x7ffc0000 [ 294.946745][ T36] audit: type=1326 audit(1792560266.067:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9005 comm="syz.0.960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f815f559 code=0x7ffc0000 [ 295.865173][ T36] audit: type=1326 audit(1792560266.997:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9014 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd757acf559 code=0x7fc00000 [ 295.915558][ T5590] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 295.915947][ T5590] Bluetooth: hci3: Injecting HCI hardware error event [ 295.923074][ T60] Bluetooth: hci3: hardware error 0x00 [ 298.065169][ T60] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 298.698334][ T9073] netlink: 'syz.4.985': attribute type 1 has an invalid length. [ 298.698366][ T9073] netlink: 'syz.4.985': attribute type 4 has an invalid length. [ 298.698384][ T9073] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.985'. [ 298.897484][ T9079] vcan0: tx address claim with dlc 0 [ 303.006929][ T9132] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 303.125680][ T9132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.249521][ T9132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.338450][ T9132] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 303.407340][ T9132] bond0 (unregistering): Released all slaves [ 304.011984][ T9156] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9159] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9156] [ 304.373581][ T9174] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 305.620400][ T9180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.791504][ T9180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.934485][ T9180] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 306.088559][ T9180] bond0 (unregistering): (slave team0): Releasing backup interface [ 306.185999][ T9180] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 306.235848][ T9180] bond0 (unregistering): Released all slaves [ 307.524435][ T9242] vcan0: tx address claim with dlc 0 [ 307.599949][ T9245] bridge0: port 3(syz_tun) entered blocking state [ 307.600093][ T9245] bridge0: port 3(syz_tun) entered disabled state [ 307.600312][ T9245] syz_tun: entered allmulticast mode [ 307.641911][ T9245] syz_tun: entered promiscuous mode [ 307.994273][ T9251] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 308.128319][ T9256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.338060][ T36] audit: type=1326 audit(1792560279.457:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.338130][ T36] audit: type=1326 audit(1792560279.457:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.338180][ T36] audit: type=1326 audit(1792560279.467:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.338229][ T36] audit: type=1326 audit(1792560279.467:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.338284][ T36] audit: type=1326 audit(1792560279.467:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.346606][ T36] audit: type=1326 audit(1792560279.467:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.346674][ T36] audit: type=1326 audit(1792560279.467:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.346722][ T36] audit: type=1326 audit(1792560279.467:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.515290][ T36] audit: type=1326 audit(1792560279.617:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.515445][ T36] audit: type=1326 audit(1792560279.617:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.4.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 308.714576][ T9256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.795814][ T9256] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 308.846099][ T9256] bond0 (unregistering): Released all slaves [ 309.550396][ T9284] Invalid argument reading file caps for ./file0 [ 310.693484][ T9313] fuse: Bad value for 'fd' [ 311.587708][ T9332] netlink: 'syz.1.1082': attribute type 10 has an invalid length. [ 311.689977][ T9339] tipc: Started in network mode [ 311.690016][ T9339] tipc: Node identity ac1414aa, cluster identity 4711 [ 311.710958][ T9339] tipc: New replicast peer: 172.20.20.187 [ 311.742326][ T9339] tipc: Enabled bearer , priority 10 [ 311.765122][ T9339] tipc: Can't bind to reserved service type 0 [ 312.530436][ T9347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'. [ 312.689721][ T9343] uprobe: syz.0.1086:9343 failed to unregister, leaking uprobe [ 312.709122][ T5317] tipc: Node number set to 2886997162 [ 314.477577][ T9386] netlink: 'syz.1.1103': attribute type 10 has an invalid length. [ 314.478123][ T9386] veth0_macvtap: entered allmulticast mode [ 316.885776][ T9444] sctp: [Deprecated]: syz.4.1124 (pid 9444) Use of int in maxseg socket option. [ 316.885776][ T9444] Use struct sctp_assoc_value instead [ 317.279658][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.279739][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.118712][ T9488] bond1: (slave syz_tun): Removing an active aggregator [ 319.145215][ T1473] bond1: Warning: Found an uninitialized port [ 319.151831][ T9488] bond1: (slave syz_tun): Releasing backup interface [ 319.317671][ T9488] bridge0: port 3(syz_tun) entered blocking state [ 319.317782][ T9488] bridge0: port 3(syz_tun) entered disabled state [ 319.317941][ T9488] syz_tun: entered allmulticast mode [ 319.348331][ T9488] syz_tun: entered promiscuous mode [ 320.172118][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.184382][ T9512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1149'. [ 321.657568][ T9540] syz.4.1160 (9540) used greatest stack depth: 17536 bytes left [ 324.032978][ T9597] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1184'. [ 325.945923][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 327.343320][ T36] kauditd_printk_skb: 231 callbacks suppressed [ 327.343343][ T36] audit: type=1326 audit(1792560298.467:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.1.1210" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd757acf559 code=0x0 [ 329.747695][ T9703] uprobe: syz.3.1219:9703 failed to unregister, leaking uprobe [ 329.897713][ T9703] uprobe: syz.3.1219:9703 failed to unregister, leaking uprobe [ 332.312387][ T9778] lo: entered allmulticast mode [ 332.376642][ T9779] lo: left allmulticast mode [ 333.407651][ T9796] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 333.675444][ T9807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1262'. [ 333.767470][ T9796] bond2 (unregistering): Released all slaves [ 334.687825][ T9830] Invalid option length (1048488) for dns_resolver key [ 335.184877][ T9305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.184901][ T9305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.252604][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1274'. [ 335.566397][ T9849] FAULT_INJECTION: forcing a failure. [ 335.566397][ T9849] name failslab, interval 1, probability 0, space 0, times 0 [ 335.566438][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz.2.1277 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.566489][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.566516][ T9849] Call Trace: [ 335.566528][ T9849] [ 335.566539][ T9849] dump_stack_lvl+0xe8/0x150 [ 335.566584][ T9849] should_fail_ex+0x46b/0x600 [ 335.566618][ T9849] should_failslab+0xa8/0x100 [ 335.566646][ T9849] ? security_inode_alloc+0x39/0x310 [ 335.566679][ T9849] kmem_cache_alloc_noprof+0x99/0x680 [ 335.566717][ T9849] ? security_inode_alloc+0x39/0x310 [ 335.566758][ T9849] security_inode_alloc+0x39/0x310 [ 335.566793][ T9849] inode_init_always_gfp+0x983/0xd40 [ 335.566828][ T9849] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 335.566853][ T9849] alloc_inode+0x82/0x1b0 [ 335.566883][ T9849] new_inode+0x1f/0x170 [ 335.566917][ T9849] __debugfs_create_file+0xb8/0x400 [ 335.566961][ T9849] debugfs_create_file_full+0x3f/0x60 [ 335.567004][ T9849] kvm_create_vcpu_debugfs+0x13b/0x1c0 [ 335.567031][ T9849] ? __pfx_kvm_create_vcpu_debugfs+0x10/0x10 [ 335.567073][ T9849] kvm_vm_ioctl_create_vcpu+0x6e4/0x9f0 [ 335.567111][ T9849] ? __pfx_kvm_vm_ioctl_create_vcpu+0x10/0x10 [ 335.567149][ T9849] kvm_vm_ioctl+0x889/0xd30 [ 335.567176][ T9849] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 335.567222][ T9849] ? kasan_quarantine_put+0xbb/0x1f0 [ 335.567275][ T9849] ? tomoyo_path_number_perm+0x219/0x5f0 [ 335.567316][ T9849] ? tomoyo_path_number_perm+0x219/0x5f0 [ 335.567360][ T9849] ? do_vfs_ioctl+0x1184/0x1550 [ 335.567402][ T9849] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 335.567456][ T9849] ? hook_file_ioctl+0x1f5/0x610 [ 335.567493][ T9849] ? __asan_memset+0x22/0x50 [ 335.567533][ T9849] ? smack_file_ioctl+0x335/0x370 [ 335.567572][ T9849] ? __pfx_smack_file_ioctl+0x10/0x10 [ 335.567620][ T9849] ? __fget_files+0x2a/0x420 [ 335.567649][ T9849] ? __fget_files+0x2a/0x420 [ 335.567683][ T9849] ? bpf_lsm_file_ioctl+0x9/0x20 [ 335.567712][ T9849] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 335.567734][ T9849] __se_sys_ioctl+0xff/0x170 [ 335.567773][ T9849] do_syscall_64+0x166/0x520 [ 335.567795][ T9849] ? trace_irq_disable+0x3b/0x140 [ 335.567829][ T9849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.567854][ T9849] ? clear_bhb_loop+0x70/0xc0 [ 335.567882][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.567907][ T9849] RIP: 0033:0x7f90acd1f559 [ 335.567928][ T9849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.567949][ T9849] RSP: 002b:00007f90aaf6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.567975][ T9849] RAX: ffffffffffffffda RBX: 00007f90acfa5fa0 RCX: 00007f90acd1f559 [ 335.567992][ T9849] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 335.568007][ T9849] RBP: 00007f90acdb6b20 R08: 0000000000000000 R09: 0000000000000000 [ 335.568023][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.568038][ T9849] R13: 00007f90acfa6038 R14: 00007f90acfa5fa0 R15: 00007ffd410472f8 [ 335.568077][ T9849] [ 335.570882][ T9849] debugfs: out of free dentries, can not create file 'pid' [ 335.929306][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1280'. [ 337.220394][ T9885] sctp: [Deprecated]: syz.4.1293 (pid 9885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.220394][ T9885] Use struct sctp_sack_info instead [ 337.342024][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 337.342054][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 337.446351][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 337.446379][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 338.238106][ T9908] loop8: detected capacity change from 0 to 16384 [ 338.409840][ T9909] loop8: detected capacity change from 16384 to 16383 [ 338.708733][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.708960][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709114][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.709144][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709189][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.709217][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709271][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.709299][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709345][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.709374][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709443][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.709471][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709529][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.709557][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709603][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.709631][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709655][ T9909] ldm_validate_partition_table(): Disk read failed. [ 338.709691][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.709719][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709761][ T9909] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 338.709788][ T9909] Buffer I/O error on dev loop8, logical block 0, async page read [ 338.709875][ T9909] Dev loop8: unable to read RDB block 0 [ 338.879524][ T9909] loop8: unable to read partition table [ 338.973282][ T9909] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 339.878116][ T36] audit: type=1326 audit(1792560311.007:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 339.878272][ T36] audit: type=1326 audit(1792560311.007:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 339.945040][ T36] audit: type=1326 audit(1792560311.077:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 339.945180][ T36] audit: type=1326 audit(1792560311.077:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 339.945385][ T36] audit: type=1326 audit(1792560311.077:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 339.948880][ T36] audit: type=1326 audit(1792560311.077:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcba7d9f1eb code=0x7ffc0000 [ 339.950480][ T36] audit: type=1326 audit(1792560311.077:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcba7d9f1eb code=0x7ffc0000 [ 339.950536][ T36] audit: type=1326 audit(1792560311.077:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcba7d9f1eb code=0x7ffc0000 [ 339.950586][ T36] audit: type=1326 audit(1792560311.077:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcba7d9f1eb code=0x7ffc0000 [ 339.950636][ T36] audit: type=1326 audit(1792560311.077:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9942 comm="syz.4.1309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcba7d9f1eb code=0x7ffc0000 [ 341.752661][ T9984] team_slave_0: entered promiscuous mode [ 342.068753][ T9979] team_slave_0: left promiscuous mode [ 342.197159][ T9997] fuse: Bad value for 'fd' [ 343.063570][T10025] gre1: entered promiscuous mode [ 343.084926][T10027] io-wq is not configured for unbound workers [ 343.499967][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 343.924846][ T5716] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 344.080020][ T5716] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 344.081756][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.342724][ T5716] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 345.403071][ T5761] usb 3-1: USB disconnect, device number 3 [ 346.727294][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 346.727413][T10097] bridge_slave_1: left allmulticast mode [ 346.727453][T10097] bridge_slave_1: left promiscuous mode [ 346.727744][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.517656][T10108] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1366'. [ 348.799165][T10135] netlink: 'syz.1.1374': attribute type 4 has an invalid length. [ 349.100884][T10131] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 352.061389][T10215] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.100173][T10219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1402'. [ 352.177297][T10220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1402'. [ 352.211792][T10215] bridge_slave_0 (unregistering): left allmulticast mode [ 352.211830][T10215] bridge_slave_0 (unregistering): left promiscuous mode [ 352.211929][T10215] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.639810][T10219] bond0: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 352.656578][T10220] bond0: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 355.469419][T10278] kexec: Could not allocate control_code_buffer [ 356.253149][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 357.273607][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 357.273631][ T36] audit: type=1326 audit(1792560584.398:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 357.273691][ T36] audit: type=1326 audit(1792560584.398:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 357.275490][ T36] audit: type=1326 audit(1792560584.408:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 357.275642][ T36] audit: type=1326 audit(1792560584.408:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 357.287374][ T36] audit: type=1326 audit(1792560584.418:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 357.287464][ T36] audit: type=1326 audit(1792560584.418:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 357.294833][ T36] audit: type=1326 audit(1792560584.418:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 357.294952][ T36] audit: type=1326 audit(1792560584.418:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 357.297826][ T36] audit: type=1326 audit(1792560584.418:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 357.297988][ T36] audit: type=1326 audit(1792560584.428:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.3.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d1330f559 code=0x7ffc0000 [ 360.630070][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1468'. [ 360.763075][T10412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.080338][T10454] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 362.080366][T10454] netlink: 'syz.4.1485': attribute type 4 has an invalid length. [ 362.080382][T10454] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1485'. [ 362.081776][T10454] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 362.081796][T10454] netlink: 'syz.4.1485': attribute type 4 has an invalid length. [ 362.081811][T10454] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1485'. [ 362.248748][ T8159] rpcbind: server 127.0.0.1 not responding, timed out [ 362.696844][T10472] fuse: Bad value for 'fd' [ 365.072562][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 365.072612][T10535] netlink: 'syz.0.1518': attribute type 12 has an invalid length. [ 365.152941][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 365.152981][T10535] netlink: 'syz.0.1518': attribute type 12 has an invalid length. [ 365.211859][T10541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1522'. [ 365.211900][T10541] netlink: 'syz.1.1522': attribute type 7 has an invalid length. [ 365.211916][T10541] netlink: 'syz.1.1522': attribute type 8 has an invalid length. [ 365.211931][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 365.227229][ T7504] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.227364][ T7504] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.227474][ T7504] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.227582][ T7504] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.488496][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 366.488520][ T36] audit: type=1326 audit(1792560850.604:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 366.504467][ T36] audit: type=1326 audit(1792560850.634:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 366.508231][ T36] audit: type=1326 audit(1792560850.634:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 366.532032][ T36] audit: type=1326 audit(1792560850.654:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcba7d9f559 code=0x7ffc0000 [ 366.598438][ T36] audit: type=1326 audit(1792560850.714:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcba7d5fd8e code=0x7ffc0000 [ 366.598587][ T36] audit: type=1326 audit(1792560850.724:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcba7d5fd8e code=0x7ffc0000 [ 366.612108][ T36] audit: type=1326 audit(1792560850.734:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcba7d5fd8e code=0x7ffc0000 [ 366.628082][ T36] audit: type=1326 audit(1792560850.744:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcba7d5fd8e code=0x7ffc0000 [ 366.628269][ T36] audit: type=1326 audit(1792560850.744:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcba7d5fd8e code=0x7ffc0000 [ 366.628400][ T36] audit: type=1326 audit(1792560850.744:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10580 comm="syz.4.1538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcba7d5fd8e code=0x7ffc0000 [ 368.843139][T10632] jffs2: notice: (10632) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 370.332878][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 370.642686][T10690] netlink: 'syz.0.1579': attribute type 8 has an invalid length. [ 370.642714][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'. [ 370.682314][T10692] veth4: entered promiscuous mode [ 370.682354][T10692] veth4: entered allmulticast mode [ 370.899131][T10699] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1583'. [ 371.373203][T10718] FAULT_INJECTION: forcing a failure. [ 371.373203][T10718] name failslab, interval 1, probability 0, space 0, times 0 [ 371.373264][T10718] CPU: 1 UID: 0 PID: 10718 Comm: syz.2.1590 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 371.373292][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 371.373312][T10718] Call Trace: [ 371.373321][T10718] [ 371.373331][T10718] dump_stack_lvl+0xe8/0x150 [ 371.373375][T10718] should_fail_ex+0x46b/0x600 [ 371.373409][T10718] should_failslab+0xa8/0x100 [ 371.373440][T10718] __kmalloc_cache_noprof+0x9c/0x670 [ 371.373465][T10718] ? x509_key_preparse+0x30d/0x6d0 [ 371.373498][T10718] ? x509_key_preparse+0x30d/0x6d0 [ 371.373539][T10718] x509_key_preparse+0x30d/0x6d0 [ 371.373594][T10718] asymmetric_key_preparse+0xb9/0x1b0 [ 371.373625][T10718] __key_create_or_update+0x354/0xa70 [ 371.373671][T10718] ? __pfx___key_create_or_update+0x10/0x10 [ 371.373708][T10718] ? lookup_user_key+0xb68/0x1150 [ 371.373749][T10718] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 371.373790][T10718] key_create_or_update+0x42/0x60 [ 371.373825][T10718] __se_sys_add_key+0x349/0x420 [ 371.373866][T10718] ? __pfx___se_sys_add_key+0x10/0x10 [ 371.373916][T10718] ? __x64_sys_add_key+0x20/0xc0 [ 371.373956][T10718] do_syscall_64+0x166/0x520 [ 371.373982][T10718] ? trace_irq_disable+0x3b/0x140 [ 371.374017][T10718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.374042][T10718] ? clear_bhb_loop+0x70/0xc0 [ 371.374074][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.374116][T10718] RIP: 0033:0x7f90acd1f559 [ 371.374139][T10718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.374160][T10718] RSP: 002b:00007f90aaf6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 371.374187][T10718] RAX: ffffffffffffffda RBX: 00007f90acfa5fa0 RCX: 00007f90acd1f559 [ 371.374205][T10718] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 371.374222][T10718] RBP: 00007f90acdb6b20 R08: ffffffffffffffff R09: 0000000000000000 [ 371.374239][T10718] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 371.374254][T10718] R13: 00007f90acfa6038 R14: 00007f90acfa5fa0 R15: 00007ffd410472f8 [ 371.374293][T10718] [ 372.819035][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1610'. [ 372.819079][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1610'. [ 373.079962][T10774] gretap0: entered promiscuous mode [ 373.103924][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 373.104113][T10774] gretap0: left promiscuous mode [ 376.963009][T10845] tmpfs: Using encoding : utf8-12.1.0 [ 377.064774][ T5761] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 377.163641][ T5317] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 377.179566][ T5317] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 377.214820][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 377.215664][ T5761] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 377.227218][ T5761] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.227246][ T5761] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.254098][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.254121][ T5761] usb 3-1: SerialNumber: syz [ 377.340242][ T5761] usb 3-1: 0:2 : does not exist [ 377.445684][ T5317] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 377.903968][T10852] ceph: No mds server is up or the cluster is laggy [ 377.903977][T10847] ceph: No mds server is up or the cluster is laggy [ 378.016799][ T5317] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 378.496181][T10874] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1654'. [ 378.587443][ T5761] usb 3-1: USB disconnect, device number 4 [ 378.709601][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.709678][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.325746][T10895] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1661'. [ 380.158765][T10922] netlink: 606 bytes leftover after parsing attributes in process `syz.0.1672'. [ 381.094977][ T5894] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 381.246087][ T5894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.248060][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.254048][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.254079][ T5894] usb 3-1: Product: syz [ 381.254096][ T5894] usb 3-1: Manufacturer: syz [ 381.254112][ T5894] usb 3-1: SerialNumber: syz [ 382.390360][ T5894] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 382.390405][ T5894] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 382.390427][ T5894] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 382.796369][ T5894] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 382.853114][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'. [ 383.070595][ T5894] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 383.148450][ T5894] usb 3-1: USB disconnect, device number 5 [ 383.187014][ T5894] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 384.603959][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 384.603988][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 384.846710][T10806] udevd[10806]: setting mode of /dev/bus/usb/003/005 to 020664 failed: No such file or directory [ 384.846918][T10806] udevd[10806]: setting owner of /dev/bus/usb/003/005 to uid=0, gid=0 failed: No such file or directory [ 385.659516][T11044] kernel read not supported for file /memory.events (pid: 11044 comm: syz.1.1716) [ 385.752386][ T36] kauditd_printk_skb: 178 callbacks suppressed [ 385.752408][ T36] audit: type=1800 audit(1792560869.784:780): pid=11044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1716" name="memory.events" dev="mqueue" ino=26790 res=0 errno=0 [ 385.961057][T11053] bridge_slave_0: left allmulticast mode [ 385.961096][T11053] bridge_slave_0: left promiscuous mode [ 385.961357][T11053] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.280601][T11053] bridge_slave_1: left allmulticast mode [ 386.280638][T11053] bridge_slave_1: left promiscuous mode [ 386.280880][T11053] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.553250][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 386.737773][T11053] team0: Port device team_slave_0 removed [ 386.888024][T11053] team0: Port device team_slave_1 removed [ 386.893036][T11053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.893067][T11053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.100837][T11053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.100871][T11053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.203887][T11053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.333097][T11055] team0: Port device xfrm0 added [ 387.505326][T11076] Invalid auth_tok structure returned from key query [ 387.505347][T11076] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 387.505363][T11076] One or more global auth toks could not properly register; rc = [-22] [ 387.505439][T11076] Error validating options; rc = [-22] [ 388.063247][T11085] FAULT_INJECTION: forcing a failure. [ 388.063247][T11085] name failslab, interval 1, probability 0, space 0, times 0 [ 388.063288][T11085] CPU: 1 UID: 0 PID: 11085 Comm: syz.2.1731 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 388.063317][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 388.063331][T11085] Call Trace: [ 388.063341][T11085] [ 388.063351][T11085] dump_stack_lvl+0xe8/0x150 [ 388.063394][T11085] should_fail_ex+0x46b/0x600 [ 388.063427][T11085] should_failslab+0xa8/0x100 [ 388.063456][T11085] __kmalloc_cache_noprof+0x9c/0x670 [ 388.063481][T11085] ? bpf_int_jit_compile+0x1c4/0x17d0 [ 388.063503][T11085] ? bpf_int_jit_compile+0x1c4/0x17d0 [ 388.063533][T11085] bpf_int_jit_compile+0x1c4/0x17d0 [ 388.063564][T11085] ? __pfx_bpf_convert_filter+0x10/0x10 [ 388.063600][T11085] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 388.063643][T11085] ? bpf_prepare_filter+0xd5d/0x12d0 [ 388.063673][T11085] __bpf_prog_select_runtime+0x53d/0xc90 [ 388.063705][T11085] ? bpf_prog_realloc+0x19b/0x240 [ 388.063733][T11085] bpf_prepare_filter+0x10df/0x12d0 [ 388.063766][T11085] ? __pfx_seccomp_check_filter+0x10/0x10 [ 388.063795][T11085] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 388.063824][T11085] ? __asan_memcpy+0x40/0x70 [ 388.063864][T11085] bpf_prog_create_from_user+0x2c6/0x440 [ 388.063893][T11085] ? __pfx_seccomp_check_filter+0x10/0x10 [ 388.063924][T11085] do_seccomp+0x770/0xd30 [ 388.063955][T11085] ? __se_sys_futex+0x3a8/0x450 [ 388.063982][T11085] ? __pfx_do_seccomp+0x10/0x10 [ 388.064013][T11085] ? rcu_is_watching+0x16/0xb0 [ 388.064051][T11085] do_syscall_64+0x166/0x520 [ 388.064074][T11085] ? trace_irq_disable+0x3b/0x140 [ 388.064115][T11085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.064140][T11085] ? clear_bhb_loop+0x70/0xc0 [ 388.064170][T11085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.064195][T11085] RIP: 0033:0x7f90acd1f559 [ 388.064217][T11085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.064239][T11085] RSP: 002b:00007f90aaf6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 388.064264][T11085] RAX: ffffffffffffffda RBX: 00007f90acfa5fa0 RCX: 00007f90acd1f559 [ 388.064282][T11085] RDX: 00002000000004c0 RSI: 0000000000000007 RDI: 0000000000000001 [ 388.064298][T11085] RBP: 00007f90acdb6b20 R08: 0000000000000000 R09: 0000000000000000 [ 388.064313][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.064327][T11085] R13: 00007f90acfa6038 R14: 00007f90acfa5fa0 R15: 00007ffd410472f8 [ 388.064366][T11085] [ 388.368443][T11053] syz.0.1719 (11053) used greatest stack depth: 16776 bytes left [ 388.828172][T11090] gretap1: entered promiscuous mode [ 389.948095][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1737'. [ 394.824577][T11154] overlayfs: failed to resolve './file1/file0': -2 [ 396.256446][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 402.773880][T11189] overlayfs: failed to clone upperpath [ 403.285620][T11191] overlayfs: failed to clone upperpath [ 404.593136][T11199] lo: entered allmulticast mode [ 404.722523][T11198] lo: left allmulticast mode [ 419.605655][T11277] 9pnet_fd: p9_fd_create_tcp (11277): problem connecting socket to 127.0.0.1 [ 421.095092][T11290] netlink: 'syz.1.1796': attribute type 12 has an invalid length. [ 429.490088][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.140434][T11344] bridge_slave_0 (unregistering): left allmulticast mode [ 431.140476][T11344] bridge_slave_0 (unregistering): left promiscuous mode [ 431.140597][T11344] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.510747][T11374] netlink: 'syz.1.1821': attribute type 10 has an invalid length. [ 435.086099][T11374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.188120][T11374] team0: Port device netdevsim1 added [ 436.118496][T11393] fuse: fd is not a fuse device [ 437.467910][T11395] netlink: 'syz.1.1829': attribute type 11 has an invalid length. [ 440.148576][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.148665][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.390907][T11396] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.308966][T11396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.342789][T11399] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 443.342829][T11399] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 443.955887][ C0] Unknown status report in ack skb [ 447.535997][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 447.590046][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 447.605800][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 447.610949][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 447.627289][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.424251][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'. [ 450.068625][ T60] Bluetooth: hci5: command tx timeout [ 452.144887][ T60] Bluetooth: hci5: command tx timeout [ 454.224951][ T60] Bluetooth: hci5: command tx timeout [ 454.331976][T11443] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 454.332004][T11443] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1841'. [ 455.829267][T11472] kexec: Could not allocate control_code_buffer [ 456.304857][ T60] Bluetooth: hci5: command tx timeout [ 456.398765][ T5723] page_pool_release_retry() stalled pool shutdown: id 83, 2 inflight 60 sec [ 457.058835][T11492] netlink: 'syz.1.1853': attribute type 2 has an invalid length. [ 458.391048][T11501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.522215][T11502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.206641][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 460.534680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 461.734665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 464.173589][T11431] rxe_eth0 speed is unknown, defaulting to 1000 [ 469.494876][T11547] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 474.638966][T11597] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 475.763288][T11597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.858821][T11598] bond1: (slave gretap2): making interface the new active one [ 476.167350][T11598] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 478.646213][T11431] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.646363][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.646720][T11431] bridge_slave_0: entered allmulticast mode [ 478.684795][T11431] bridge_slave_0: entered promiscuous mode [ 479.415637][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 479.415679][T11626] netlink: 'syz.3.1892': attribute type 6 has an invalid length. [ 479.845266][ T35] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 480.304903][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 480.327569][T11431] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.327701][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.327950][T11431] bridge_slave_1: entered allmulticast mode [ 480.330651][T11431] bridge_slave_1: entered promiscuous mode [ 480.500335][ T35] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.504000][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.504040][ T35] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.504089][ T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.589517][ T35] usb 3-1: config 0 descriptor?? [ 480.840608][T11626] @: entered promiscuous mode [ 481.472905][ T35] HID 045e:07da: Invalid code 65791 type 1 [ 481.948921][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.952441][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.007978][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 482.008016][T11626] netlink: 'syz.3.1892': attribute type 6 has an invalid length. [ 482.213487][ T35] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input10 [ 482.634224][T11431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.644922][ T8158] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.644974][ T8158] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.645014][ T8158] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.645055][ T8158] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.694286][T11431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.017321][T11431] team0: Port device team_slave_0 added [ 484.037802][T11431] team0: Port device team_slave_1 added [ 485.110372][ T35] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 485.210023][ T35] usb 3-1: USB disconnect, device number 6 [ 485.518127][T11431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.518149][T11431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.518180][T11431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.621885][T11431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.621906][T11431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.621938][T11431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.772494][T11650] fido_id[11650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 487.211785][T11431] hsr_slave_0: entered promiscuous mode [ 487.226140][T11431] hsr_slave_1: entered promiscuous mode [ 487.227261][T11431] debugfs: 'hsr0' already exists in 'hsr' [ 487.227289][T11431] Cannot create hsr debugfs directory [ 495.435727][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1911'. [ 497.785453][T11699] Process accounting resumed [ 501.607763][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.607849][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.729578][T11344] syz_tun (unregistering): left allmulticast mode [ 501.729620][T11344] syz_tun (unregistering): left promiscuous mode [ 501.729770][T11344] bridge0: port 3(syz_tun) entered disabled state [ 506.873292][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.918461][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.950004][ T5590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.981962][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.033298][ T5590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 509.104821][ T60] Bluetooth: hci0: command tx timeout [ 511.185288][ T60] Bluetooth: hci0: command tx timeout [ 513.264783][ T60] Bluetooth: hci0: command tx timeout [ 513.568526][T11745] rxe_eth0 speed is unknown, defaulting to 1000 [ 515.344762][ T60] Bluetooth: hci0: command tx timeout [ 516.569232][ T5723] page_pool_release_retry() stalled pool shutdown: id 83, 2 inflight 120 sec [ 520.250482][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.409559][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.504303][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.518379][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.522794][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.545962][T11805] 9p: Bad value for 'rfdno' [ 522.091465][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 522.160097][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 522.173685][T11437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 522.190528][T11437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 522.216206][T11437] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 522.727603][T11437] Bluetooth: hci5: command tx timeout [ 524.705160][T11437] Bluetooth: hci6: command tx timeout [ 524.786181][T11437] Bluetooth: hci5: command tx timeout [ 525.983815][T11745] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.983952][T11745] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.984193][T11745] bridge_slave_0: entered allmulticast mode [ 526.021959][T11745] bridge_slave_0: entered promiscuous mode [ 526.041391][T11745] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.041538][T11745] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.041767][T11745] bridge_slave_1: entered allmulticast mode [ 526.264222][T11745] bridge_slave_1: entered promiscuous mode [ 526.788051][T11437] Bluetooth: hci6: command tx timeout [ 526.865034][T11437] Bluetooth: hci5: command tx timeout [ 527.013263][T11799] rxe_eth0 speed is unknown, defaulting to 1000 [ 527.066348][T11745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.276180][T11745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.865058][T11437] Bluetooth: hci6: command tx timeout [ 528.990706][T11437] Bluetooth: hci5: command tx timeout [ 530.951265][T11437] Bluetooth: hci6: command tx timeout [ 532.674378][T11745] team0: Port device team_slave_0 added [ 532.974616][T11745] team0: Port device team_slave_1 added [ 534.026691][T11745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.026714][T11745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.026744][T11745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.115609][T11745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.115630][T11745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.115662][T11745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.258713][T11807] rxe_eth0 speed is unknown, defaulting to 1000 [ 536.771402][T11745] hsr_slave_0: entered promiscuous mode [ 536.780257][T11745] hsr_slave_1: entered promiscuous mode [ 536.792001][T11745] debugfs: 'hsr0' already exists in 'hsr' [ 536.792032][T11745] Cannot create hsr debugfs directory [ 538.658896][T11877] Getting sb failed; rc = [-12] [ 543.950313][ T5590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 543.976508][ T5590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 544.018525][ T5590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 544.054537][ T5590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 544.064986][ T5590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 546.224991][ T5590] Bluetooth: hci7: command tx timeout [ 547.888472][T11799] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.888609][T11799] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.888837][T11799] bridge_slave_0: entered allmulticast mode [ 547.918288][T11799] bridge_slave_0: entered promiscuous mode [ 548.158845][T11799] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.159097][T11799] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.159322][T11799] bridge_slave_1: entered allmulticast mode [ 548.193746][T11799] bridge_slave_1: entered promiscuous mode [ 548.305549][ T5590] Bluetooth: hci7: command tx timeout [ 549.364449][T11799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.461498][T11799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.388407][ T5590] Bluetooth: hci7: command tx timeout [ 550.497314][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.497452][T11807] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.498409][T11807] bridge_slave_0: entered allmulticast mode [ 550.501108][T11807] bridge_slave_0: entered promiscuous mode [ 550.603883][T11799] team0: Port device team_slave_0 added [ 550.624505][T11925] batman_adv: batadv0: Adding interface: dummy0 [ 550.624528][T11925] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.706471][T11925] batman_adv: batadv0: Interface activated: dummy0 [ 550.707369][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.707530][T11807] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.707767][T11807] bridge_slave_1: entered allmulticast mode [ 550.718439][T11807] bridge_slave_1: entered promiscuous mode [ 550.762195][T11799] team0: Port device team_slave_1 added [ 552.469410][ T5590] Bluetooth: hci7: command tx timeout [ 552.550647][T11925] batadv0: mtu less than device minimum [ 552.753396][T11925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 552.939084][T11925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.002306][T11925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.052650][T11925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.345150][T11925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.353253][T11925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.463313][T11925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.497398][T11925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.545956][T11925] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 557.140852][T11807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.164118][T11799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.164141][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.164174][T11799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.178837][T11900] rxe_eth0 speed is unknown, defaulting to 1000 [ 557.190549][T11799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.190574][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.190606][T11799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.111717][T11807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.956020][T11807] team0: Port device team_slave_0 added [ 562.111367][T11807] team0: Port device team_slave_1 added [ 562.550959][T11799] hsr_slave_0: entered promiscuous mode [ 562.554148][T11799] hsr_slave_1: entered promiscuous mode [ 562.571969][T11799] debugfs: 'hsr0' already exists in 'hsr' [ 562.572041][T11799] Cannot create hsr debugfs directory [ 562.907338][T11807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.907361][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.907397][T11807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.027092][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.027170][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.127614][T11807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.127637][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.127670][T11807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.896854][T11933] batman_adv: batadv0: Interface deactivated: dummy0 [ 564.195676][T11933] batman_adv: batadv0: Removing interface: dummy0 [ 564.855838][T11437] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 564.903722][T11437] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 564.925021][T11437] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 564.976553][T11437] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 564.979021][T11437] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 567.025259][T11939] Bluetooth: hci8: command tx timeout [ 567.693823][T11807] hsr_slave_0: entered promiscuous mode [ 567.698609][T11807] hsr_slave_1: entered promiscuous mode [ 567.702065][T11807] debugfs: 'hsr0' already exists in 'hsr' [ 567.702095][T11807] Cannot create hsr debugfs directory [ 569.112188][T11939] Bluetooth: hci8: command tx timeout [ 569.845030][T11936] rxe_eth0 speed is unknown, defaulting to 1000 [ 571.184844][T11939] Bluetooth: hci8: command tx timeout [ 572.898182][T11900] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.898322][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.898547][T11900] bridge_slave_0: entered allmulticast mode [ 572.935426][T11900] bridge_slave_0: entered promiscuous mode [ 573.207037][T11900] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.207270][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.207500][T11900] bridge_slave_1: entered allmulticast mode [ 573.219784][T11900] bridge_slave_1: entered promiscuous mode [ 573.265758][T11939] Bluetooth: hci8: command tx timeout [ 573.740928][T11900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.821134][T11900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.246400][T11900] team0: Port device team_slave_0 added [ 575.273853][T11900] team0: Port device team_slave_1 added [ 575.614946][T11900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.614968][T11900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.615000][T11900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.690884][T11900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.690905][T11900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.690937][T11900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.108214][T11900] hsr_slave_0: entered promiscuous mode [ 576.111421][T11900] hsr_slave_1: entered promiscuous mode [ 576.148457][T11900] debugfs: 'hsr0' already exists in 'hsr' [ 576.148492][T11900] Cannot create hsr debugfs directory [ 580.114078][ T60] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 580.171622][ T60] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 580.183051][ T60] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 580.222968][ T60] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 580.228961][ T60] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 580.903294][ T60] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 580.975177][ T60] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 580.980463][ T60] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 581.023353][ T60] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 581.024216][ T60] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 581.712778][T11939] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 581.765055][T11939] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 581.813802][T11939] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 581.823128][T11939] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 581.847170][T11939] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 582.625139][T11939] Bluetooth: hci9: command tx timeout [ 582.725480][T11936] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.725618][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.725845][T11936] bridge_slave_0: entered allmulticast mode [ 582.733989][T11936] bridge_slave_0: entered promiscuous mode [ 582.892814][T11936] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.892952][T11936] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.893185][T11936] bridge_slave_1: entered allmulticast mode [ 582.925719][T11936] bridge_slave_1: entered promiscuous mode [ 583.344708][T11939] Bluetooth: hci10: command tx timeout [ 583.986458][T11939] Bluetooth: hci11: command tx timeout [ 584.714895][T11939] Bluetooth: hci9: command tx timeout [ 585.210734][T11936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.222052][T11936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.534855][T11939] Bluetooth: hci10: command tx timeout [ 585.669583][T11936] team0: Port device team_slave_0 added [ 586.064801][T11939] Bluetooth: hci11: command tx timeout [ 586.835970][ T60] Bluetooth: hci9: command tx timeout [ 586.895338][T11936] team0: Port device team_slave_1 added [ 587.163124][T11936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.163147][T11936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.163178][T11936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.305619][T11936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.305674][T11936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.305764][T11936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.587909][ T60] Bluetooth: hci10: command tx timeout [ 587.968951][T11936] hsr_slave_0: entered promiscuous mode [ 588.025025][T11936] hsr_slave_1: entered promiscuous mode [ 588.040435][T11936] debugfs: 'hsr0' already exists in 'hsr' [ 588.040467][T11936] Cannot create hsr debugfs directory [ 588.144688][ T60] Bluetooth: hci11: command tx timeout [ 588.597848][T11963] rxe_eth0 speed is unknown, defaulting to 1000 [ 588.865626][ T60] Bluetooth: hci9: command tx timeout [ 589.665841][ T60] Bluetooth: hci10: command tx timeout [ 590.235278][ T60] Bluetooth: hci11: command tx timeout [ 590.703814][T11967] rxe_eth0 speed is unknown, defaulting to 1000 [ 595.936253][T11970] rxe_eth0 speed is unknown, defaulting to 1000 [ 600.044034][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.044172][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.044416][T11963] bridge_slave_0: entered allmulticast mode [ 600.076325][T11963] bridge_slave_0: entered promiscuous mode [ 600.580553][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.580793][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.581016][T11963] bridge_slave_1: entered allmulticast mode [ 600.609672][T11963] bridge_slave_1: entered promiscuous mode [ 603.506478][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.791686][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.687451][T11939] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 606.737294][T11939] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 606.743096][T11939] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 606.824399][T11939] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 606.840963][T11939] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 607.497981][T11963] team0: Port device team_slave_0 added [ 609.155560][T11939] Bluetooth: hci12: command tx timeout [ 609.608129][T11963] team0: Port device team_slave_1 added [ 609.608443][T11967] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.608574][T11967] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.608792][T11967] bridge_slave_0: entered allmulticast mode [ 609.651510][T11967] bridge_slave_0: entered promiscuous mode [ 609.808372][T11967] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.808511][T11967] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.808729][T11967] bridge_slave_1: entered allmulticast mode [ 609.835274][T11967] bridge_slave_1: entered promiscuous mode [ 610.916010][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.916032][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.916062][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.194948][T11939] Bluetooth: hci12: command tx timeout [ 611.374811][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.374834][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.374867][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.448690][T11967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.567047][T11967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.280894][T11939] Bluetooth: hci12: command tx timeout [ 613.515700][T11967] team0: Port device team_slave_0 added [ 613.618554][T11967] team0: Port device team_slave_1 added [ 613.836851][T11963] hsr_slave_0: entered promiscuous mode [ 613.842180][T11963] hsr_slave_1: entered promiscuous mode [ 613.843230][T11963] debugfs: 'hsr0' already exists in 'hsr' [ 613.843258][T11963] Cannot create hsr debugfs directory [ 614.952309][T11967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.952331][T11967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.952360][T11967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.344675][T11939] Bluetooth: hci12: command tx timeout [ 615.398681][T11967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.398702][T11967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.398735][T11967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.337904][T12020] rxe_eth0 speed is unknown, defaulting to 1000 [ 617.279515][T11967] hsr_slave_0: entered promiscuous mode [ 617.284232][T11967] hsr_slave_1: entered promiscuous mode [ 617.302131][T11967] debugfs: 'hsr0' already exists in 'hsr' [ 617.302164][T11967] Cannot create hsr debugfs directory [ 618.612237][T11970] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.612478][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.613085][T11970] bridge_slave_0: entered allmulticast mode [ 618.652887][T11970] bridge_slave_0: entered promiscuous mode [ 618.713640][T11970] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.713793][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.714021][T11970] bridge_slave_1: entered allmulticast mode [ 618.762111][T11970] bridge_slave_1: entered promiscuous mode [ 622.315847][T11970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.499666][T11970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.572222][T11970] team0: Port device team_slave_0 added [ 623.654054][T11970] team0: Port device team_slave_1 added [ 624.282772][T11970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.282793][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.282825][T11970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.425721][T11970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.425744][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.425774][T11970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.491753][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.491830][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.676266][T11970] hsr_slave_0: entered promiscuous mode [ 625.681002][T11970] hsr_slave_1: entered promiscuous mode [ 625.697465][T11970] debugfs: 'hsr0' already exists in 'hsr' [ 625.697500][T11970] Cannot create hsr debugfs directory [ 627.206620][ T60] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 627.299437][ T60] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 627.302362][ T60] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 627.346760][ T60] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 627.359532][ T60] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 629.591905][T11939] Bluetooth: hci13: command tx timeout [ 631.664792][ T5590] Bluetooth: hci0: command 0x0406 tx timeout [ 631.665194][ T5590] Bluetooth: hci13: command tx timeout [ 632.360317][T12020] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.411882][T12020] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.435215][T12020] bridge_slave_0: entered allmulticast mode [ 632.616881][T12020] bridge_slave_0: entered promiscuous mode [ 632.712533][T12020] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.750576][T12020] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.773214][T12020] bridge_slave_1: entered allmulticast mode [ 632.863637][T12020] bridge_slave_1: entered promiscuous mode [ 633.754928][ T60] Bluetooth: hci13: command tx timeout [ 633.863534][T12020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.924924][T12020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.589777][T12041] rxe_eth0 speed is unknown, defaulting to 1000 [ 634.944469][T12020] team0: Port device team_slave_0 added [ 634.998965][T12020] team0: Port device team_slave_1 added [ 636.285014][ T60] Bluetooth: hci13: command tx timeout [ 637.073305][T12020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.073327][T12020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.073359][T12020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.130191][T12020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.130212][T12020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.130244][T12020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.831710][T12020] hsr_slave_0: entered promiscuous mode [ 637.854378][T12020] hsr_slave_1: entered promiscuous mode [ 637.860972][T12020] debugfs: 'hsr0' already exists in 'hsr' [ 637.861004][T12020] Cannot create hsr debugfs directory [ 641.507957][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 641.724111][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 641.735064][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 641.736697][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 641.737874][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 642.573262][ T5590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 642.715743][T12069] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 642.717419][T11437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 643.042348][T11437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.043599][T11437] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.044380][T11437] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.101782][T11437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 643.155291][T11437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 643.375442][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 643.376662][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 644.548028][ T60] Bluetooth: hci1: command tx timeout [ 645.429872][T12079] Bluetooth: hci4: command tx timeout [ 645.504698][T12079] Bluetooth: hci2: command tx timeout [ 645.565801][ T7501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.565848][ T7501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.625086][T12079] Bluetooth: hci1: command tx timeout [ 647.039715][T12079] Bluetooth: hci5: command 0x0406 tx timeout [ 647.039744][T12069] Bluetooth: hci6: command 0x0406 tx timeout [ 647.511995][T12079] Bluetooth: hci4: command tx timeout [ 647.585488][T12079] Bluetooth: hci2: command tx timeout [ 648.704765][ T5590] Bluetooth: hci1: command tx timeout [ 649.586603][ T5590] Bluetooth: hci4: command tx timeout [ 649.664781][ T5590] Bluetooth: hci2: command tx timeout [ 650.785094][ T5590] Bluetooth: hci1: command tx timeout [ 651.665285][ T5590] Bluetooth: hci4: command tx timeout [ 651.789477][ T5590] Bluetooth: hci2: command tx timeout [ 657.156894][T12064] rxe_eth0 speed is unknown, defaulting to 1000 [ 660.072963][T12067] rxe_eth0 speed is unknown, defaulting to 1000 [ 660.273738][T12041] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.354728][T12041] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.354991][T12041] bridge_slave_0: entered allmulticast mode [ 660.387605][T12041] bridge_slave_0: entered promiscuous mode [ 660.502254][T12041] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.502393][T12041] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.502650][T12041] bridge_slave_1: entered allmulticast mode [ 660.650872][T12041] bridge_slave_1: entered promiscuous mode [ 662.460101][T12041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.519727][T12041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.270052][T12041] team0: Port device team_slave_0 added [ 663.294301][T12065] rxe_eth0 speed is unknown, defaulting to 1000 [ 663.405749][T12041] team0: Port device team_slave_1 added [ 664.365582][T12041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.365605][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.365641][T12041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.035745][T12041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.035766][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.035799][T12041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.216146][T12079] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 666.495511][T12079] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 666.503506][T12079] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 666.505963][T12079] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 666.511222][T12079] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 667.504957][T12079] Bluetooth: hci7: command 0x0406 tx timeout [ 668.624799][ T5590] Bluetooth: hci14: command tx timeout [ 670.447973][T12041] hsr_slave_0: entered promiscuous mode [ 670.460735][T12041] hsr_slave_1: entered promiscuous mode [ 670.463651][T12041] debugfs: 'hsr0' already exists in 'hsr' [ 670.463681][T12041] Cannot create hsr debugfs directory [ 670.704759][ T5590] Bluetooth: hci14: command tx timeout [ 672.784664][ T5590] Bluetooth: hci14: command tx timeout [ 675.184650][ T5590] Bluetooth: hci14: command tx timeout [ 677.283449][T12114] rxe_eth0 speed is unknown, defaulting to 1000 [ 680.516431][T12064] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.516572][T12064] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.516835][T12064] bridge_slave_0: entered allmulticast mode [ 680.774896][T12064] bridge_slave_0: entered promiscuous mode [ 681.201868][T12064] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.202123][T12064] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.202385][T12064] bridge_slave_1: entered allmulticast mode [ 681.232541][T12064] bridge_slave_1: entered promiscuous mode [ 683.814310][T12067] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.817113][T12067] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.817375][T12067] bridge_slave_0: entered allmulticast mode [ 683.822076][T12067] bridge_slave_0: entered promiscuous mode [ 683.939306][T12064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.048570][T12064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.049134][T12067] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.049349][T12067] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.049577][T12067] bridge_slave_1: entered allmulticast mode [ 684.087933][T12067] bridge_slave_1: entered promiscuous mode [ 685.593749][T12064] team0: Port device team_slave_0 added [ 685.643933][T12067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.929680][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.929760][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.640307][T12064] team0: Port device team_slave_1 added [ 686.710112][T12067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.717796][T12065] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.718161][T12065] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.718855][T12065] bridge_slave_0: entered allmulticast mode [ 686.759702][T12065] bridge_slave_0: entered promiscuous mode [ 687.957752][T12065] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.957922][T12065] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.958186][T12065] bridge_slave_1: entered allmulticast mode [ 687.992416][T12079] Bluetooth: hci8: command 0x0406 tx timeout [ 688.000294][T12065] bridge_slave_1: entered promiscuous mode [ 688.118132][ T60] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 688.203058][ T60] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 688.212978][ T60] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 688.960484][ T5590] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 688.990075][ T60] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 691.236659][T12079] Bluetooth: hci15: command tx timeout [ 691.955788][T12064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.955810][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.955842][T12064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.024276][T12067] team0: Port device team_slave_0 added [ 692.122454][T12064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.122474][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.122503][T12064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.209317][T12067] team0: Port device team_slave_1 added [ 692.381047][T12065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.280649][T12079] Bluetooth: hci15: command tx timeout [ 693.932654][T12065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.344825][T12079] Bluetooth: hci15: command tx timeout [ 696.483584][T12067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.483605][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.483638][T12067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.262011][T12067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.262033][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.262071][T12067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.348749][T12065] team0: Port device team_slave_0 added [ 697.425103][T12079] Bluetooth: hci15: command tx timeout [ 699.717253][T12065] team0: Port device team_slave_1 added [ 701.347812][T11939] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 701.427000][T11939] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 701.497683][T11939] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 701.759824][T11939] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 701.763512][T11939] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 702.107248][T12064] hsr_slave_0: entered promiscuous mode [ 702.132048][T12064] hsr_slave_1: entered promiscuous mode [ 702.149192][T12064] debugfs: 'hsr0' already exists in 'hsr' [ 702.149226][T12064] Cannot create hsr debugfs directory [ 703.344656][T12079] Bluetooth: hci10: command 0x0406 tx timeout [ 703.360031][T11939] Bluetooth: hci9: command 0x0406 tx timeout [ 704.016899][T12079] Bluetooth: hci16: command tx timeout [ 704.280496][T12079] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 704.333075][T12079] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 704.385192][ T60] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 704.433648][ T60] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 704.445883][ T60] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 705.201199][ T5590] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 705.260899][ T5590] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 705.264235][ T5590] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 705.446188][ T5590] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 705.554839][ T5590] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 706.074697][ T60] Bluetooth: hci16: command tx timeout [ 706.165207][T12148] rxe_eth0 speed is unknown, defaulting to 1000 [ 706.712412][ T60] Bluetooth: hci17: command tx timeout [ 708.144648][ T60] Bluetooth: hci16: command tx timeout [ 708.307227][ T60] Bluetooth: hci18: command tx timeout [ 708.503377][ T60] Bluetooth: hci11: command 0x0406 tx timeout [ 708.788131][ T60] Bluetooth: hci17: command tx timeout [ 710.228511][ T5590] Bluetooth: hci16: command tx timeout [ 710.386503][ T5590] Bluetooth: hci18: command tx timeout [ 710.982856][ T5590] Bluetooth: hci17: command tx timeout [ 712.464678][ T5590] Bluetooth: hci18: command tx timeout [ 713.024878][ T5590] Bluetooth: hci17: command tx timeout [ 714.544692][ T5590] Bluetooth: hci18: command tx timeout [ 725.870256][T12114] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 727.482763][T12159] rxe_eth0 speed is unknown, defaulting to 1000 [ 727.505509][ T38] INFO: task syz-executor:11799 blocked for more than 143 seconds. [ 727.505538][ T38] Not tainted syzkaller #0 [ 727.505551][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.505563][ T38] task:syz-executor state:D stack:19288 pid:11799 tgid:11799 ppid:1 task_flags:0x400140 flags:0x00080002 [ 727.505625][ T38] Call Trace: [ 727.505634][ T38] [ 727.505649][ T38] __schedule+0x171d/0x56e0 [ 727.505723][ T38] ? __pfx___schedule+0x10/0x10 [ 727.505776][ T38] rt_mutex_schedule+0x76/0xf0 [ 727.505810][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 727.505851][ T38] ? rt_mutex_slowlock_block+0x33f/0x6a0 [ 727.505884][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 727.505917][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 727.505949][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 727.506000][ T38] ? del_device_store+0xd6/0x370 [ 727.506036][ T38] ? del_device_store+0xd6/0x370 [ 727.506063][ T38] mutex_lock_nested+0x163/0x1d0 [ 727.506091][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 727.506127][ T38] del_device_store+0xd6/0x370 [ 727.506157][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 727.506187][ T38] ? __pfx_del_device_store+0x10/0x10 [ 727.506217][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 727.506248][ T38] ? sysfs_kf_write+0x166/0x260 [ 727.506300][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 727.506331][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 727.506371][ T38] vfs_write+0x61e/0xbb0 [ 727.506414][ T38] ? __pfx_vfs_write+0x10/0x10 [ 727.506450][ T38] ? do_sys_openat2+0x18d/0x200 [ 727.506476][ T38] ? kmem_cache_free+0x187/0x6d0 [ 727.506508][ T38] ? fdget+0x171/0x250 [ 727.506546][ T38] ksys_write+0x156/0x270 [ 727.506583][ T38] ? __pfx_ksys_write+0x10/0x10 [ 727.506629][ T38] do_syscall_64+0x166/0x520 [ 727.506652][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.506677][ T38] ? clear_bhb_loop+0x70/0xc0 [ 727.506708][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.506731][ T38] RIP: 0033:0x7fd60823fd8e [ 727.506754][ T38] RSP: 002b:00007ffd43b5dd48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 727.506778][ T38] RAX: ffffffffffffffda RBX: 0000555572a0e500 RCX: 00007fd60823fd8e [ 727.506796][ T38] RDX: 0000000000000001 RSI: 00007ffd43b5ddd0 RDI: 0000000000000005 [ 727.506811][ T38] RBP: 00007fd6083173e4 R08: 0000000000000000 R09: 0000000000000000 [ 727.506826][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.506841][ T38] R13: 00007ffd43b5ddd0 R14: 00007ffd43b5e610 R15: 0000000000000003 [ 727.508430][ T38] [ 727.508445][ T38] INFO: task syz-executor:11807 blocked for more than 143 seconds. [ 727.508464][ T38] Not tainted syzkaller #0 [ 727.508476][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.508487][ T38] task:syz-executor state:D stack:18664 pid:11807 tgid:11807 ppid:1 task_flags:0x400140 flags:0x00080002 [ 727.508546][ T38] Call Trace: [ 727.508554][ T38] [ 727.508568][ T38] __schedule+0x171d/0x56e0 [ 727.508636][ T38] ? __pfx___schedule+0x10/0x10 [ 727.508687][ T38] rt_mutex_schedule+0x76/0xf0 [ 727.508720][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 727.508766][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 727.508801][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 727.508831][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 727.508897][ T38] ? del_device_store+0xd6/0x370 [ 727.508935][ T38] ? del_device_store+0xd6/0x370 [ 727.508961][ T38] mutex_lock_nested+0x163/0x1d0 [ 727.508989][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 727.509025][ T38] del_device_store+0xd6/0x370 [ 727.509053][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 727.509083][ T38] ? __pfx_del_device_store+0x10/0x10 [ 727.509113][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 727.509145][ T38] ? sysfs_kf_write+0x166/0x260 [ 727.509180][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 727.509209][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 727.509244][ T38] vfs_write+0x61e/0xbb0 [ 727.509287][ T38] ? __pfx_vfs_write+0x10/0x10 [ 727.509323][ T38] ? do_sys_openat2+0x18d/0x200 [ 727.509347][ T38] ? kmem_cache_free+0x187/0x6d0 [ 727.509387][ T38] ? fdget+0x171/0x250 [ 727.509425][ T38] ksys_write+0x156/0x270 [ 727.509462][ T38] ? __pfx_ksys_write+0x10/0x10 [ 727.509508][ T38] do_syscall_64+0x166/0x520 [ 727.509530][ T38] ? trace_irq_disable+0x3b/0x140 [ 727.509564][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.509588][ T38] ? clear_bhb_loop+0x70/0xc0 [ 727.509618][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.509642][ T38] RIP: 0033:0x7fcaa466fd8e [ 727.509663][ T38] RSP: 002b:00007ffe92480298 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 727.509687][ T38] RAX: ffffffffffffffda RBX: 000055555d37f500 RCX: 00007fcaa466fd8e [ 727.509705][ T38] RDX: 0000000000000001 RSI: 00007ffe92480320 RDI: 0000000000000005 ** replaying previous printk message ** [ 727.509705][ T38] RDX: 0000000000000001 RSI: 00007ffe92480320 RDI: 0000000000000005 [ 727.509721][ T38] RBP: 00007fcaa47473e4 R08: 0000000000000000 R09: 0000000000000000 [ 727.509736][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.509750][ T38] R13: 00007ffe92480320 R14: 00007ffe92480b60 R15: 0000000000000003 [ 727.509787][ T38] [ 727.509859][ T38] [ 727.509859][ T38] Showing all locks held in the system: [ 727.509872][ T38] locks held by rcuc/1/27: 2, last CPU#1: [ 727.509890][ T38] #0: ffffffff8f257820 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 727.509960][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 727.724789][ T38] locks held by ksoftirqd/1/29: 5, last CPU#1: [ 727.724849][ T38] #0: ffffffff8f257820 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 727.724990][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 727.725151][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 727.725310][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 727.725474][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 727.725658][ T38] locks held by pr/ttyS0/37: 3, last CPU#1: [ 727.725701][ T38] #0: ffffffff8f29ba18 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 727.725879][ T38] #1: ffffffff9b0bff58 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x6ac/0x8d0 [ 727.726035][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 727.726199][ T38] locks held by khungtaskd/38: 1, last CPU#0: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 727.726250][ T38] #0: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 727.726411][ T38] locks held by kworker/u8:2/48: 7, last CPU#1: [ 727.726455][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.726601][ T38] #1: ffffc90000ba7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.726778][ T38] #2: ffff888036e54310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 727.726935][ T38] #3: ffff888065588520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 727.727082][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 727.727244][ T38] #5: ffff8880b85436d8 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x85e/0x2600 [ 727.727447][ T38] #6: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 727.727611][ T38] locks held by kworker/u8:3/57: 5, last CPU#1: [ 727.727654][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.727791][ T38] #1: ffffc9000123fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.727956][ T38] #2: ffff88803b348310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 727.728071][ T38] #3: ffff888033527120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 727.728215][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 727.728403][ T38] locks held by kworker/u8:15/1475: 6, last CPU#1: [ 727.728447][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.728622][ T38] #1: ffffc90006effc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.761392][ T38] #2: ffff8880b8526598 (&base->lock){-...}-{2:2}, at: __mod_timer+0x922/0xf10 [ 727.761561][ T38] #3: ffffffff9b00d0a0 (&obj_hash[i].lock){-...}-{2:2}, at: debug_object_activate+0xa8/0x3b0 [ 727.761732][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 727.761889][ T38] #5: ffff88803bebeb28 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 727.762094][ T38] locks held by klogd/4940: 1, on CPU#0: [ 727.762138][ T38] #0: ffff88813fffc2d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xc5f/0x2600 [ 727.762251][ T38] locks held by getty/5341: 2, on CPU#1: [ 727.762288][ T38] #0: ffff8880372ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 727.762458][ T38] #1: ffffc900044db2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 727.762634][ T38] locks held by kworker/0:5/5723: 3, on CPU#0: [ 727.762677][ T38] #0: ffff88813ff6b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.762844][ T38] #1: ffffc90005a37c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.763027][ T38] #2: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.763190][ T38] locks held by kworker/u8:18/7501: 6, on CPU#0: [ 727.763235][ T38] #0: ffff88801bef0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.763402][ T38] #1: ffffc90006dafc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.773808][ T38] #2: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 727.773991][ T38] #3: ffff88803d1d4160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 727.774111][ T38] #4: ffff8880365ce310 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 727.774287][ T38] #5: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.774452][ T38] locks held by kworker/u8:46/8155: 2, on CPU#1: [ 727.774908][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.775093][ T38] #1: ffffc900037dfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.775291][ T38] locks held by kworker/u8:50/8159: 2, last CPU#0: [ 727.775342][ T38] #0: ffff888033c11138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.775487][ T38] #1: ffffc90004b87c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.786133][ T38] locks held by kworker/u8:63/8173: 8, last CPU#0: [ 727.786180][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.786376][ T38] #1: ffffc900049b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 727.786567][ T38] #2: ffff888027f04310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 727.786734][ T38] #3: ffff888063dac120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 727.786880][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 727.787031][ T38] #5: ffff8880b84436d8 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x85e/0x2600 [ 727.787185][ T38] #6: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 727.787341][ T38] #7: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 727.787505][ T38] locks held by syz.1.1924/11741: 1, on CPU#0: [ 727.787535][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.787731][ T38] locks held by syz.0.1926/11739: 1, on CPU#0: [ 727.812947][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.813129][ T38] locks held by syz-executor/11745: 7, on CPU#1: [ 727.813175][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.813361][ T38] #1: ffff888065228878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.813516][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.813692][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.813875][ T38] #4: ffff88804cc71160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 727.814046][ T38] #5: ffff88802c348310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 727.814223][ T38] #6: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.814367][ T38] locks held by syz-executor/11799: 4, on CPU#0: [ 727.814404][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.829333][ T38] #1: ffff8880835ae078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.829528][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.829699][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.829875][ T38] locks held by syz-executor/11807: 4, on CPU#0: [ 727.829918][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.830086][ T38] #1: ffff88804f2ab078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.830237][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.830402][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.830575][ T38] locks held by syz.2.1950/11855: 1, on CPU#0: [ 727.830619][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.830733][ T38] locks held by syz-executor/11900: 4, on CPU#0: [ 727.830797][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.848142][ T38] #1: ffff888077f10478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.848264][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.848392][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.848563][ T38] locks held by syz.3.1966/11933: 1, on CPU#0: [ 727.848607][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.848761][ T38] locks held by syz-executor/11936: 4, on CPU#0: [ 727.848805][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.848973][ T38] #1: ffff88805ae2fc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.849121][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.849288][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.849466][ T38] locks held by syz-executor/11963: 4, on CPU#0: [ 727.863470][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.863696][ T38] #1: ffff88807bcfec78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.863808][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.863989][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.864166][ T38] locks held by syz-executor/11967: 4, on CPU#1: [ 727.864211][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.864386][ T38] #1: ffff8880746a9878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.867959][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.868159][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.880194][ T38] locks held by syz-executor/11970: 4, on CPU#0: [ 727.880263][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.880465][ T38] #1: ffff8880834f6c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.880635][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.880801][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.880955][ T38] locks held by syz-executor/12020: 4, on CPU#0: [ 727.880972][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.881135][ T38] #1: ffff88803f4ab478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.881287][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.881453][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.881631][ T38] locks held by syz-executor/12041: 4, on CPU#0: [ 727.898477][ T38] #0: ffff888036b24510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 727.898665][ T38] #1: ffff88803cce3878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 727.898820][ T38] #2: ffff88802ad6f3c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 727.898993][ T38] #3: ffffffff90046038 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 727.899156][ T38] locks held by syz-executor/12064: 1, on CPU#0: [ 727.899200][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.899352][ T38] locks held by syz-executor/12065: 1, on CPU#0: [ 727.899394][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.899570][ T38] locks held by syz-executor/12067: 1, on CPU#0: [ 727.899614][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 727.899785][ T38] locks held by syz-executor/12148: 4, last CPU#0: [ 727.899844][ T38] #0: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 727.958161][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 727.958353][ T38] #2: ffff888094bf4628 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 727.958540][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 727.958708][ T38] locks held by syz-executor/12159: 7, last CPU#0: [ 727.958753][ T38] #0: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 727.958915][ T38] #1: ffffffff9051f660 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 [ 727.959010][ T38] #2: ffffffff9051f8a0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 [ 727.959156][ T38] #3: ffff8880387bd208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 [ 727.959303][ T38] #4: ffff8880b843af08 ((lock)){+.+.}-{3:3}, at: __radix_tree_preload+0x144/0x880 [ 727.959475][ T38] #5: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 727.959640][ T38] #6: ffff88813fe37100 (&root->kernfs_idr_lock){+.+.}-{3:3}, at: __kernfs_new_node+0x11e/0xa70 [ 727.959850][ T38] locks held by syz-executor/12172: 2, on CPU#1: [ 727.959886][ T38] #0: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 727.960044][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 727.960201][ T38] locks held by syz-executor/12198: 2, last CPU#0: [ 727.960244][ T38] #0: ffff88804e171db8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 727.972540][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 727.972725][ T38] locks held by modprobe/12206: 2, last CPU#0: [ 727.972784][ T38] #0: ffff88803d0d4158 (&newf->file_lock){+.+.}-{3:3}, at: file_close_fd+0x50/0x80 [ 727.972949][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 727.973115][ T38] [ 727.973138][ T38] ============================================= [ 727.973138][ T38] [ 727.973162][ T38] NMI backtrace for cpu 0 [ 727.973206][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 727.973272][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 727.973306][ T38] Call Trace: [ 727.973329][ T38] [ 727.973359][ T38] dump_stack_lvl+0xe8/0x150 [ 727.973456][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 727.973543][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 727.973612][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 727.973699][ T38] sys_info+0x135/0x170 [ 727.973765][ T38] watchdog+0xfd2/0x1030 [ 727.973835][ T38] ? watchdog+0x1c7/0x1030 [ 727.973935][ T38] kthread+0x38b/0x470 [ 727.974011][ T38] ? __pfx_watchdog+0x10/0x10 [ 727.974095][ T38] ? __pfx_kthread+0x10/0x10 [ 727.974181][ T38] ret_from_fork+0x514/0xb70 [ 727.974251][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 727.974326][ T38] ? __switch_to+0xc78/0x1410 [ 727.974423][ T38] ? __pfx_kthread+0x10/0x10 [ 727.974483][ T38] ret_from_fork_asm+0x1a/0x30 [ 727.974526][ T38] [ 727.974571][ T38] Sending NMI from CPU 0 to CPUs 1: [ 727.974617][ C1] NMI backtrace for cpu 1 [ 727.974632][ C1] CPU: 1 UID: 0 PID: 28 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 727.974654][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 727.974670][ C1] RIP: 0010:tmigr_handle_remote+0x1189/0x1560 [ 727.974703][ C1] Code: 00 48 c7 c7 20 44 42 8f be 04 00 00 00 e8 6f a0 f2 ff 65 49 ff 47 08 e9 7d f8 ff ff e8 00 b7 0e 00 90 0f 0b 90 e9 04 ff ff ff f2 b6 0e 00 eb 05 e8 eb b6 0e 00 48 8b 44 24 40 48 b9 00 00 00 [ 727.974720][ C1] RSP: 0018:ffffc90000a2fb00 EFLAGS: 00000046 [ 727.974737][ C1] RAX: 7fffffffffffffff RBX: 1ffff11003ada330 RCX: ffff88801e68ddc0 [ 727.974752][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000100 [ 727.974766][ C1] RBP: ffffc90000a2fcc8 R08: 0000000000000100 R09: 0000000000000100 [ 727.974778][ C1] R10: dffffc0000000000 R11: fffff52000145f50 R12: ffff88801d6d1980 [ 727.974793][ C1] R13: ffff88801d6d1970 R14: ffff88801d6d1980 R15: ffff88801d6d1978 [ 727.974808][ C1] FS: 0000000000000000(0000) GS:ffff8881248ad000(0000) knlGS:0000000000000000 [ 727.974824][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 727.974837][ C1] CR2: 00007f11d6d1ee9c CR3: 0000000094ba8000 CR4: 00000000003526f0 [ 727.974854][ C1] Call Trace: [ 727.974861][ C1] [ 727.974868][ C1] ? rt_spin_unlock+0x165/0x200 [ 727.974895][ C1] ? __run_timer_base+0x19c/0x9b0 [ 727.974932][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 727.974967][ C1] handle_softirqs+0x1da/0x6d0 [ 727.975001][ C1] run_ktimerd+0x6a/0x100 [ 727.975025][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 727.975058][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 727.975093][ C1] kthread+0x38b/0x470 [ 727.975113][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 727.975141][ C1] ? __pfx_kthread+0x10/0x10 [ 727.975162][ C1] ret_from_fork+0x514/0xb70 [ 727.975182][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 727.975209][ C1] ? __switch_to+0xc78/0x1410 [ 727.975239][ C1] ? __pfx_kthread+0x10/0x10 [ 727.975259][ C1] ret_from_fork_asm+0x1a/0x30 [ 727.975291][ C1] [ 728.013506][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 729.831575][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 729.841247][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 729.851342][ T38] Call Trace: [ 729.854664][ T38] [ 729.857623][ T38] vpanic+0x56d/0xa60 [ 729.861642][ T38] ? __pfx___schedule+0x10/0x10 [ 729.866533][ T38] ? __pfx_vpanic+0x10/0x10 [ 729.871073][ T38] panic+0xc5/0xd0 [ 729.874824][ T38] ? __pfx_panic+0x10/0x10 [ 729.879344][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 729.884926][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 729.890327][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 729.896534][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 729.902715][ T38] watchdog+0x102b/0x1030 [ 729.907080][ T38] ? watchdog+0x1c7/0x1030 [ 729.911532][ T38] kthread+0x38b/0x470 [ 729.915623][ T38] ? __pfx_watchdog+0x10/0x10 [ 729.920331][ T38] ? __pfx_kthread+0x10/0x10 [ 729.925031][ T38] ret_from_fork+0x514/0xb70 [ 729.929656][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 729.934786][ T38] ? __switch_to+0xc78/0x1410 [ 729.939498][ T38] ? __pfx_kthread+0x10/0x10 [ 729.944106][ T38] ret_from_fork_asm+0x1a/0x30 [ 729.948907][ T38] [ 729.952226][ T38] Kernel Offset: disabled [ 729.956597][ T38] Rebooting in 86400 seconds..