last executing test programs: 8m54.688821762s ago: executing program 0 (id=495): r0 = socket$inet6(0xa, 0x80002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @empty, 0x75e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="ad", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)='e', 0x1}], 0x1}}], 0x3, 0x4008000) 8m54.506353307s ago: executing program 0 (id=498): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83c) shutdown(r0, 0x1) listen(r0, 0x28) poll(&(0x7f0000000100)=[{r0, 0x1281}, {r0, 0x8100}], 0x2, 0x8001) shutdown(r0, 0x0) 8m54.02704963s ago: executing program 0 (id=501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 8m53.743213104s ago: executing program 0 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 8m53.583062682s ago: executing program 0 (id=504): socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000280), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x1d, r2}, 0x10, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 8m52.292226157s ago: executing program 0 (id=512): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) 8m51.981067559s ago: executing program 32 (id=512): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) 6m58.042430551s ago: executing program 3 (id=1279): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x3, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0xfffffffd], [0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0x6, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000000)={0x0, &(0x7f0000000640)="87", 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x8) 6m57.96113781s ago: executing program 3 (id=1281): r0 = semget$private(0x0, 0x6, 0x1b5) semop(r0, &(0x7f0000000200)=[{0x0, 0xff43}], 0x1) semtimedop(r0, &(0x7f0000000240)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000280)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f00000002c0)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x1, 0x4, 0x8]) 6m56.98617058s ago: executing program 3 (id=1286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) recvmsg(r1, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) 6m56.647452385s ago: executing program 3 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x1214040, 0x0) stat(&(0x7f0000000400)='./file0/../file0\x00', 0x0) 6m56.261926532s ago: executing program 3 (id=1293): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) writev(r2, &(0x7f0000003480)=[{&(0x7f0000000040)='R8', 0x2}], 0x1) 6m53.732505484s ago: executing program 3 (id=1307): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000280)=[{{0x2, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000002c0)=0x9, 0x4) bind$can_raw(r1, &(0x7f0000000300), 0x10) 6m53.513346053s ago: executing program 33 (id=1307): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000240), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000280)=[{{0x2, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000002c0)=0x9, 0x4) bind$can_raw(r1, &(0x7f0000000300), 0x10) 3m27.215452599s ago: executing program 4 (id=2909): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f000000e080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 3m26.646715631s ago: executing program 4 (id=2912): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bda4, 0x25dfdbfd, {0x1, 0x1f, 0x88, 0x10, {0x4e24, 0x4e22, [0x3, 0xffffffff, 0xf, 0xc3], [0x6, 0x0, 0x5, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x2, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) 3m25.999424011s ago: executing program 4 (id=2915): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4048050) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 3m25.629067327s ago: executing program 4 (id=2919): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 3m24.869955148s ago: executing program 4 (id=2923): userfaultfd(0x80801) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3m23.180027575s ago: executing program 4 (id=2927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000004c0)={r2, 0x2, 0x2, r2}) unshare(0x8040480) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000540)={r2, 0x2, 0x3}) 3m20.468529565s ago: executing program 2 (id=2943): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0xfffffffa, 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="fdffffffffffffff", 0x8}], 0x1) 3m17.524328516s ago: executing program 2 (id=2953): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001140)='./dev\x00', &(0x7f0000001180)='devtmpfs\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000001200)=@filename='./dev/sda1\x00', &(0x7f0000001240)='./mnt\x00', &(0x7f0000001280)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000001300)={@desc={0x1, 0x0, @desc1}, 0x10, 0x0, '\x00', @d}) 3m17.048095943s ago: executing program 2 (id=2957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="92fa7413a2c3d61336a8000a9f6bf1c80d1e272a84", 0x15}], 0x1}, 0x4004000) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) 3m15.947164676s ago: executing program 2 (id=2963): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x10001, 0x0) mkdir(&(0x7f0000000040)='my_sys\x00', 0xd6) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 3m15.311182909s ago: executing program 2 (id=2965): socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000240)="0a000000010001", 0x7) 3m14.929060492s ago: executing program 2 (id=2970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x6, 0x10000}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m13.578998583s ago: executing program 6 (id=2974): r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x23e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x3b7, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1, 0x1e7, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800ef95, 0x400, 0x2, 0xffffffed}}], 0x1, &(0x7f0000000340)={0x2e, 0x63, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x21, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 3m12.754346348s ago: executing program 6 (id=2978): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000700)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000740)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 3m11.077532757s ago: executing program 6 (id=2983): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/215, 0xd7, 0x0, 0x0) 3m9.696837929s ago: executing program 6 (id=2986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) connect(r1, &(0x7f0000000800)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 3m8.704940579s ago: executing program 6 (id=2989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 3m8.025226094s ago: executing program 34 (id=2927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000004c0)={r2, 0x2, 0x2, r2}) unshare(0x8040480) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000540)={r2, 0x2, 0x3}) 3m7.816946571s ago: executing program 6 (id=2993): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000008c0)="01154e0001000011221e445508000102030405060708", 0x16, 0x0, &(0x7f0000000900)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 2m59.508508162s ago: executing program 35 (id=2970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x6, 0x10000}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m52.4865462s ago: executing program 36 (id=2993): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000008c0)="01154e0001000011221e445508000102030405060708", 0x16, 0x0, &(0x7f0000000900)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 2m42.355822088s ago: executing program 1 (id=3042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x54, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x0, @val={0x8c, 0x18, {0x283, "726712ea1b02", @long="605eddec808ff48238e18400"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000002001"], 0x1d0}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m40.864704513s ago: executing program 1 (id=3047): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x100000001, &(0x7f0000006680)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0xde) 2m39.675811516s ago: executing program 1 (id=3050): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x10, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) close(r1) r2 = eventfd2(0xc43a50c9, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000001040)={0x0, r2}) 2m39.444047766s ago: executing program 1 (id=3051): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x104a8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x94}, 0x9}, 0x80) 2m38.561781585s ago: executing program 1 (id=3054): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x104}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000340)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40850}, 0x84) 2m38.561381079s ago: executing program 1 (id=3055): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000007e7000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 2m23.408081076s ago: executing program 37 (id=3055): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000007e7000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1m59.151505645s ago: executing program 7 (id=3120): openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0), 0x129482, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 1m56.535500424s ago: executing program 7 (id=3121): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x7, 0xffffffffffffffff, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000001c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x2, 0x0, 0xffffffeffffffffc}, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x3, 0xffff, 0x7}, 0x51, [0x40000002, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x6, 0x6, 0x8, 0x7, 0x1000009, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0xe, 0x8, 0x800, 0x6, 0x401, 0x4, 0x6, 0x10001, 0xa, 0x10000, 0x4, 0x6, 0x9, 0x2, 0x9, 0x4, 0x2, 0x2, 0x9, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x2, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x3, 0x80000001, 0xffffffff, 0x9, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x39b7c38a, 0x80000015, 0x12, 0x802, 0xa, 0x0, 0x2329, 0x9, 0x3, 0x9, 0x6, 0x8, 0x24a, 0x2, 0xfffffff7, 0xfffffffb, 0x3, 0x5, 0x5, 0x80, 0x6, 0x8001, 0x40, 0xa1, 0x4, 0x4, 0x2, 0x10004, 0x9a, 0xf7ffff00, 0x100007ff, 0x6, 0x1, 0x8, 0x8e, 0xffff3f16, 0xc, 0x2, 0x5, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x1, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x2003, 0x24e, 0x1ff, 0x3, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x5, 0x9, 0xfca, 0xfffffffc, 0xa, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x200, 0x7ffffff7, 0x8000, 0x5, 0x4, 0x5, 0x10001, 0x2, 0x2ac, 0x5, 0x97f82544, 0x2, 0xfffffffd, 0x8, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x2, 0x3, 0x6, 0x8007c14, 0x5, 0x1, 0x0, 0x8083, 0xe, 0x3, 0x4, 0x8, 0xfff, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x2010008, 0xdd, 0x1, 0x9, 0xc3, 0x9, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1b, 0x81, 0xa, 0x6, 0x1ff, 0x200, 0xfffffffd, 0x0, 0x66608000, 0x7, 0x7fb, 0x3, 0x0, 0x7, 0x9, 0x80000001, 0x10000, 0xd, 0x0, 0xb044, 0x1, 0x10001, 0x61, 0x10, 0x1800, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0x80000001, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x27d, 0x5, 0xfffffffb, 0x7, 0x6, 0x8001, 0x10, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x2]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xfffffffd, '\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0, 0x51}) 1m55.365750884s ago: executing program 7 (id=3122): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000008c0)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000900)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000940)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000980), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000009c0)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000a00)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/25, 0x19}, 0x4}], 0x1, 0x45833af92e4b38bf, 0x0) 1m53.737787264s ago: executing program 7 (id=3123): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0xdf8, 0x4) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x116}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655eb91a1d1d35f4adc7c85920b40ba4c90bcbe564bad4422f2c1df8aab220851f24feb537bc74c14c70c096f4f82676b8", 0x87}, {&(0x7f0000000540)="85def750bf0f970d18673f7a66da039282c9e8bad703922b4bb30ba92ee6e4a38cc1e681f094c48eacc04a75eee5d9bafa37c0339df18615d43673a757", 0x3d}, {&(0x7f0000000b00)="99ddc8b5582b558a3c0366c34c19fb5e63050b060f8c573ef4b40a4f91e798498320af4f9deefe54ab0e05ec5cea2f08e75b313b5aa4e36ce2b7361e133ec162079509e078fd813296ca83514d6f96c7b8e130291ed9bb423b7dde7dfcb055473d6088413d2ff2b0942db70a0f31444096ec76be0773ac66b01fd3d618c85ade1bb12bc8532408191d931ff30ced3061cc9d51", 0x93}, {&(0x7f0000000bc0)="26c8ecde257dacbca7d704d4b8db3c70d1d6e753f0bdbe967eef6d7eee43170578acd2e2ff269ff17144a90f0f00823a2d74803be1ed7d3780ed97c5e40ee2e5a6102a489d9732dfd00e6959b82128da99641dac68a39b74eaa00e299aaf2d7d5465242853483bd6a2ccea22247de61a65e43cddb0044d92ea490074c2fb83d3139f83478b890fac6435389ba3d0f449774a4b0b1ba1a3d1febe87eadd5459e61546fae26190776c8213b61461", 0xad}], 0x4}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="b45621ffc5c4e0f27078ec7e3c62ed7d", 0x10}, {&(0x7f0000000d40)="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", 0x3ee}], 0x2}}], 0x3, 0x0) 1m53.591118852s ago: executing program 7 (id=3124): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='27', 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f"], 0x48}}, 0x0) 1m53.108416601s ago: executing program 7 (id=3125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001080)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x42, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001140)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 1m37.765942397s ago: executing program 38 (id=3125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001080)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x42, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001140)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 22.360724291s ago: executing program 5 (id=3224): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f0000000000feff0000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ff850a010101000000003c0000000200000000000000000000000000ffffac1e0101060000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 19.50437723s ago: executing program 5 (id=3225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000004c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540), 0x4) sendto$inet(r0, &(0x7f0000000580), 0xffffffffffffff94, 0xb, 0x0, 0x0) 18.60570321s ago: executing program 5 (id=3226): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000001180)="e8700e", 0x3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 18.543716174s ago: executing program 5 (id=3227): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) read(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 16.751876356s ago: executing program 5 (id=3228): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) syz_clone3(&(0x7f00000001c0)={0x2041000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x4) 14.992004944s ago: executing program 5 (id=3229): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 0s ago: executing program 39 (id=3229): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 37.482938][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 437.521332][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 437.606057][ T10] ti_usb_3410_5052 3-1:2.0: device disconnected [ 440.203145][T13085] netlink: 'syz.5.2453': attribute type 1 has an invalid length. [ 440.257099][T13085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.424527][T13090] bond3: (slave geneve3): making interface the new active one [ 440.504118][T13090] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 441.027215][ T5856] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 441.187307][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 441.188315][ T5856] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 441.193315][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.194041][ T5856] usb 5-1: Product: syz [ 441.194062][ T5856] usb 5-1: Manufacturer: syz [ 441.194080][ T5856] usb 5-1: SerialNumber: syz [ 441.238693][T13114] 9p: Bad value for 'wfdno' [ 441.241461][ T5856] usb 5-1: config 0 descriptor?? [ 441.266068][ T5856] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 442.436614][T13133] fuse: Bad value for 'fd' [ 442.707099][ T5856] gspca_sonixj: i2c_w8 err -71 [ 442.747178][ T5856] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 442.753995][ T5856] usb 5-1: USB disconnect, device number 13 [ 443.211249][T13149] fuse: fd is not a fuse device [ 443.667151][ T9] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 443.827818][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 443.829222][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.842251][ T9] usb 5-1: config 0 descriptor?? [ 443.872247][ T9] cp210x 5-1:0.0: cp210x converter detected [ 444.314442][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 444.516460][ T5740] usb 5-1: USB disconnect, device number 14 [ 444.574714][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2491'. [ 444.757349][ T5740] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 444.758879][ T5740] cp210x 5-1:0.0: device disconnected [ 445.166627][T13188] netlink: 'syz.5.2496': attribute type 1 has an invalid length. [ 445.166653][T13188] netlink: 'syz.5.2496': attribute type 4 has an invalid length. [ 445.166667][T13188] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2496'. [ 445.531379][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.305042][T13213] sg_write: process 879 (syz.2.2507) changed security contexts after opening file descriptor, this is not allowed. [ 446.505217][T13222] 9p: Bad value for 'wfdno' [ 447.729382][T13268] sctp: [Deprecated]: syz.6.2527 (pid 13268) Use of int in max_burst socket option. [ 447.729382][T13268] Use struct sctp_assoc_value instead [ 448.549302][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 451.074994][T13346] netlink: 'syz.4.2554': attribute type 12 has an invalid length. [ 451.282921][T13351] fuse: fd is not a fuse device [ 451.951666][T13360] FAULT_INJECTION: forcing a failure. [ 451.951666][T13360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.951715][T13360] CPU: 1 UID: 0 PID: 13360 Comm: syz.2.2560 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 451.951759][T13360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 451.951774][T13360] Call Trace: [ 451.951783][T13360] [ 451.951794][T13360] dump_stack_lvl+0xe8/0x150 [ 451.951836][T13360] should_fail_ex+0x46b/0x600 [ 451.951890][T13360] prepare_alloc_pages+0x223/0x650 [ 451.951920][T13360] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 451.951948][T13360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 451.951978][T13360] ? __pfx_policy_nodemask+0x10/0x10 [ 451.952007][T13360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 451.952045][T13360] alloc_pages_mpol+0xd4/0x280 [ 451.952076][T13360] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 451.952104][T13360] vma_alloc_folio_noprof+0xe1/0x1e0 [ 451.952134][T13360] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 451.952171][T13360] do_wp_page+0x121f/0x3d20 [ 451.952222][T13360] ? preempt_count_add+0x6a/0x140 [ 451.952254][T13360] ? __pfx_do_wp_page+0x10/0x10 [ 451.952282][T13360] ? rt_spin_lock+0x2d0/0x400 [ 451.952310][T13360] ? __pfx_rt_spin_lock+0x10/0x10 [ 451.952342][T13360] ? pte_offset_map_rw_nolock+0xea/0x160 [ 451.952376][T13360] handle_mm_fault+0xd69/0x28c0 [ 451.952412][T13360] ? handle_mm_fault+0xeb/0x28c0 [ 451.952454][T13360] ? __pfx_handle_mm_fault+0x10/0x10 [ 451.952505][T13360] ? lock_mm_and_find_vma+0xa7/0x340 [ 451.952544][T13360] do_user_addr_fault+0x746/0x1340 [ 451.952585][T13360] exc_page_fault+0x6a/0xc0 [ 451.952617][T13360] asm_exc_page_fault+0x26/0x30 [ 451.952638][T13360] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 451.952665][T13360] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 47 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 451.952693][T13360] RSP: 0018:ffffc9001477f618 EFLAGS: 00050206 [ 451.952714][T13360] RAX: ffffffff84cca701 RBX: ffff88806bc80000 RCX: 000000000001d2a0 [ 451.952731][T13360] RDX: 0000000000000000 RSI: ffff88806bc85d40 RDI: 0000200000006000 [ 451.952747][T13360] RBP: ffffc9001477f790 R08: ffff88806bca2fdf R09: 1ffff1100d7945fb [ 451.952763][T13360] R10: dffffc0000000000 R11: ffffed100d7945fc R12: 1ffff920028effc3 [ 451.952780][T13360] R13: 00002000000002c0 R14: ffffc9001477fe28 R15: 0000000000022fe0 [ 451.952805][T13360] ? _copy_to_iter+0x1a1/0x1810 [ 451.952847][T13360] _copy_to_iter+0x255/0x1810 [ 451.952888][T13360] ? do_raw_spin_lock+0x12b/0x2f0 [ 451.952922][T13360] ? __pfx__copy_to_iter+0x10/0x10 [ 451.952958][T13360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 451.952992][T13360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 451.953024][T13360] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 451.953060][T13360] __skb_datagram_iter+0xf8/0x980 [ 451.953096][T13360] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 451.953132][T13360] ? __rcu_read_unlock+0x83/0xe0 [ 451.953161][T13360] skb_copy_datagram_iter+0xb5/0x240 [ 451.953196][T13360] __unix_dgram_recvmsg+0x664/0xd70 [ 451.953249][T13360] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 451.953280][T13360] ? lock_acquire+0x115/0x350 [ 451.953314][T13360] ? __lock_acquire+0x747/0x2de0 [ 451.953360][T13360] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 451.953384][T13360] ? unix_dgram_recvmsg+0xae/0xd0 [ 451.953414][T13360] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 451.953445][T13360] sock_recvmsg+0x196/0x1e0 [ 451.953472][T13360] ____sys_recvmsg+0x1f2/0x4b0 [ 451.953532][T13360] ? __pfx_____sys_recvmsg+0x10/0x10 [ 451.953585][T13360] ? import_iovec+0x73/0xa0 [ 451.953615][T13360] ___sys_recvmsg+0x213/0x5a0 [ 451.953655][T13360] ? __pfx____sys_recvmsg+0x10/0x10 [ 451.953704][T13360] ? lock_acquire+0x115/0x350 [ 451.953754][T13360] ? __fget_files+0x3a8/0x420 [ 451.953796][T13360] __x64_sys_recvmsg+0x1b4/0x290 [ 451.953833][T13360] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 451.953893][T13360] do_syscall_64+0x166/0x520 [ 451.953927][T13360] ? trace_irq_disable+0x3b/0x140 [ 451.953978][T13360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.954002][T13360] ? clear_bhb_loop+0x70/0xc0 [ 451.954031][T13360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.954055][T13360] RIP: 0033:0x7f61222de559 [ 451.954078][T13360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.954098][T13360] RSP: 002b:00007f6120536028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 451.954125][T13360] RAX: ffffffffffffffda RBX: 00007f6122565fa0 RCX: 00007f61222de559 [ 451.954144][T13360] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 451.954159][T13360] RBP: 00007f6122375ab8 R08: 0000000000000000 R09: 0000000000000000 [ 451.954175][T13360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.954189][T13360] R13: 00007f6122566038 R14: 00007f6122565fa0 R15: 00007fff3ab9ada8 [ 451.954228][T13360] [ 452.651406][T13367] FAULT_INJECTION: forcing a failure. [ 452.651406][T13367] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.651450][T13367] CPU: 1 UID: 0 PID: 13367 Comm: syz.4.2563 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 452.651479][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 452.651495][T13367] Call Trace: [ 452.651505][T13367] [ 452.651515][T13367] dump_stack_lvl+0xe8/0x150 [ 452.651559][T13367] should_fail_ex+0x46b/0x600 [ 452.651603][T13367] prepare_alloc_pages+0x223/0x650 [ 452.651636][T13367] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 452.651666][T13367] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 452.651696][T13367] ? __pfx_try_to_migrate+0x10/0x10 [ 452.651731][T13367] __alloc_pages_noprof+0x10/0x100 [ 452.651756][T13367] __folio_alloc_noprof+0x17/0x90 [ 452.651781][T13367] migrate_pages_batch+0x80c/0x43b0 [ 452.651833][T13367] ? __pfx_alloc_migration_target+0x10/0x10 [ 452.651861][T13367] ? queue_folios_pte_range+0xafd/0xc00 [ 452.651910][T13367] ? __pfx_migrate_pages_batch+0x10/0x10 [ 452.651958][T13367] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 452.652001][T13367] ? walk_pgd_range+0x1b1f/0x1c30 [ 452.652060][T13367] migrate_pages+0x1b96/0x2900 [ 452.652107][T13367] ? __pfx_alloc_migration_target+0x10/0x10 [ 452.652140][T13367] ? __walk_page_range+0x6cc/0x730 [ 452.652175][T13367] ? __pfx_migrate_pages+0x10/0x10 [ 452.652217][T13367] ? queue_pages_test_walk+0x3dc/0x410 [ 452.652257][T13367] ? walk_page_range_mm_unsafe+0x595/0x680 [ 452.652308][T13367] ? do_migrate_pages+0x61a/0x8b0 [ 452.652341][T13367] do_migrate_pages+0x656/0x8b0 [ 452.652380][T13367] ? __pfx_do_migrate_pages+0x10/0x10 [ 452.652404][T13367] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 452.652447][T13367] ? rcu_is_watching+0x16/0xb0 [ 452.652479][T13367] ? security_capable+0xb9/0x2c0 [ 452.652515][T13367] __se_sys_migrate_pages+0xaa2/0xc90 [ 452.652541][T13367] ? __se_sys_futex+0x3a8/0x450 [ 452.652570][T13367] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 452.652601][T13367] ? rcu_is_watching+0x16/0xb0 [ 452.652639][T13367] do_syscall_64+0x166/0x520 [ 452.652674][T13367] ? trace_irq_disable+0x3b/0x140 [ 452.652708][T13367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.652734][T13367] ? clear_bhb_loop+0x70/0xc0 [ 452.652764][T13367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.652787][T13367] RIP: 0033:0x7f688086e559 [ 452.652811][T13367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.652832][T13367] RSP: 002b:00007f687eac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 452.652857][T13367] RAX: ffffffffffffffda RBX: 00007f6880af5fa0 RCX: 00007f688086e559 [ 452.652876][T13367] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 452.652893][T13367] RBP: 00007f6880905ab8 R08: 0000000000000000 R09: 0000000000000000 [ 452.652909][T13367] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 452.652925][T13367] R13: 00007f6880af6038 R14: 00007f6880af5fa0 R15: 00007fffec39ae78 [ 452.652964][T13367] [ 453.368162][T13380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.389324][T13382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.999088][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 454.999108][ T36] audit: type=1326 audit(1792414128.248:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 454.999157][ T36] audit: type=1326 audit(1792414128.248:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 455.001960][ T36] audit: type=1326 audit(1792414128.248:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 455.002016][ T36] audit: type=1326 audit(1792414128.248:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 455.002067][ T36] audit: type=1326 audit(1792414128.248:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 455.004829][ T36] audit: type=1326 audit(1792414128.248:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 455.004883][ T36] audit: type=1326 audit(1792414128.248:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 455.004931][ T36] audit: type=1326 audit(1792414128.248:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 455.005440][ T36] audit: type=1326 audit(1792414128.248:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 455.009509][ T36] audit: type=1326 audit(1792414128.248:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13434 comm="syz.5.2583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 455.289776][T13438] netlink: 'syz.6.2584': attribute type 11 has an invalid length. [ 455.289804][T13438] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2584'. [ 456.331849][T13470] fuse: fd is not a fuse device [ 456.437145][ T5603] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 456.438078][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 456.598102][ T5603] usb 3-1: Using ep0 maxpacket: 8 [ 456.599312][ T5603] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.629804][ T5603] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 456.629869][ T5603] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.629896][ T5603] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.629926][ T5603] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.629955][ T5603] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.630004][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.959848][ T5603] usb 3-1: GET_CAPABILITIES returned 0 [ 456.959899][ T5603] usbtmc 3-1:16.0: can't read capabilities [ 457.306366][ T5603] usb 3-1: USB disconnect, device number 19 [ 457.315978][T13468] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 457.528167][ T5741] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 457.677939][ T5741] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 457.679402][ T5741] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.682792][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 457.682818][ T5741] usb 5-1: Product: syz [ 457.682833][ T5741] usb 5-1: Manufacturer: syz [ 457.682848][ T5741] usb 5-1: SerialNumber: syz [ 457.736124][ T5741] usb 5-1: config 0 descriptor?? [ 457.763839][ T5741] usb 5-1: no audio or video endpoints found [ 458.193123][T13499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.194600][T13499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.327814][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2617'. [ 458.693195][T13537] netlink: 'syz.1.2622': attribute type 10 has an invalid length. [ 458.762835][T13537] bond3: (slave team0): Removing an active aggregator [ 458.810677][T13537] bond3: (slave team0): Releasing backup interface [ 458.885858][ T10] usb 5-1: USB disconnect, device number 15 [ 458.987545][T13537] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.006616][T13537] bond0: (slave team0): Enslaving as an active interface with an up link [ 460.054132][ T5603] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 460.203398][ T5603] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 460.205821][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.482325][ T5603] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 461.446239][ T5856] usb 3-1: USB disconnect, device number 20 [ 462.007143][ T5603] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 462.157099][ T5603] usb 5-1: Using ep0 maxpacket: 16 [ 462.158121][ T5603] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 462.161122][ T5603] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 462.161181][ T5603] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 462.161212][ T5603] usb 5-1: config 0 interface 0 has no altsetting 0 [ 462.161248][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.231353][ T5603] usb 5-1: config 0 descriptor?? [ 462.698438][ T5603] usbhid 5-1:0.0: can't add hid device: -71 [ 462.698570][ T5603] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 462.747199][ T5603] usb 5-1: USB disconnect, device number 16 [ 464.069081][T13661] netlink: 'syz.1.2664': attribute type 4 has an invalid length. [ 464.121981][T13664] netlink: 'syz.1.2664': attribute type 4 has an invalid length. [ 465.591465][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'. [ 465.619530][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'. [ 465.622971][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'. [ 465.622996][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'. [ 466.548031][ T36] kauditd_printk_skb: 1339 callbacks suppressed [ 466.548052][ T36] audit: type=1326 audit(1792414139.798:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 466.549892][ T36] audit: type=1326 audit(1792414139.798:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 466.551904][ T36] audit: type=1326 audit(1792414139.798:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 466.552159][ T36] audit: type=1326 audit(1792414139.798:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 466.552401][ T36] audit: type=1326 audit(1792414139.798:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 466.553290][ T36] audit: type=1326 audit(1792414139.798:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 466.555034][ T36] audit: type=1326 audit(1792414139.798:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 466.555088][ T36] audit: type=1326 audit(1792414139.798:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 466.556439][ T36] audit: type=1326 audit(1792414139.798:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 466.822268][ T36] audit: type=1326 audit(1792414140.068:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13717 comm="syz.1.2688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21e06e559 code=0x7ffc0000 [ 467.209271][T13732] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2692'. [ 467.296393][T13737] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2692'. [ 467.469125][T13732] bond4: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 467.470321][T13737] bond4: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 469.156549][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2716'. [ 469.209247][T13799] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.207495][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 479.109211][T13983] FAULT_INJECTION: forcing a failure. [ 479.109211][T13983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 479.109255][T13983] CPU: 0 UID: 0 PID: 13983 Comm: syz.4.2776 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.109303][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 479.109330][T13983] Call Trace: [ 479.109338][T13983] [ 479.109348][T13983] dump_stack_lvl+0xe8/0x150 [ 479.109389][T13983] should_fail_ex+0x46b/0x600 [ 479.109431][T13983] prepare_alloc_pages+0x223/0x650 [ 479.109460][T13983] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 479.109488][T13983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 479.109516][T13983] ? __pfx_policy_nodemask+0x10/0x10 [ 479.109545][T13983] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 479.109590][T13983] alloc_pages_mpol+0xd4/0x280 [ 479.109620][T13983] alloc_pages_noprof+0xd2/0x2f0 [ 479.109668][T13983] pte_alloc_one+0x22/0x380 [ 479.109707][T13983] do_pte_missing+0x128d/0x28f0 [ 479.109744][T13983] ? rt_spin_unlock+0x165/0x200 [ 479.109777][T13983] ? __pmd_alloc+0x41b/0x5e0 [ 479.109815][T13983] handle_mm_fault+0xf64/0x28c0 [ 479.109856][T13983] ? handle_mm_fault+0xeb/0x28c0 [ 479.109903][T13983] ? __pfx_handle_mm_fault+0x10/0x10 [ 479.109951][T13983] ? __lock_acquire+0x747/0x2de0 [ 479.109991][T13983] ? lock_mm_and_find_vma+0xa7/0x340 [ 479.110034][T13983] do_user_addr_fault+0x746/0x1340 [ 479.110080][T13983] exc_page_fault+0x6a/0xc0 [ 479.110116][T13983] asm_exc_page_fault+0x26/0x30 [ 479.110140][T13983] RIP: 0010:strncpy_from_user+0xb7/0x2c0 [ 479.110178][T13983] Code: 00 00 4c 89 f6 e8 99 e7 ba fc 49 83 fe 07 0f 86 9d 00 00 00 4c 89 24 24 4c 89 74 24 08 48 c7 c5 f8 ff ff ff 45 31 ff 49 89 dc <4e> 8b 34 3b 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 06 4d 89 f5 49 [ 479.110199][T13983] RSP: 0018:ffffc9000f7afc98 EFLAGS: 00050246 [ 479.110222][T13983] RAX: ffffffff850bf917 RBX: 0000000000000000 RCX: ffff888037f65dc0 [ 479.110241][T13983] RDX: 0000000000000002 RSI: 0000000000000100 RDI: 0000000000000007 [ 479.110256][T13983] RBP: fffffffffffffff8 R08: 0000000000000000 R09: 0000000000000000 [ 479.110272][T13983] R10: dffffc0000000000 R11: fffff52001ef5fc8 R12: 0000000000000000 [ 479.110288][T13983] R13: 1ffff92001ef5fa4 R14: 0000000000000100 R15: 0000000000000000 [ 479.110314][T13983] ? strncpy_from_user+0x97/0x2c0 [ 479.110358][T13983] ? strncpy_from_user+0x97/0x2c0 [ 479.110399][T13983] path_getxattrat+0x162/0x460 [ 479.110444][T13983] ? __pfx_path_getxattrat+0x10/0x10 [ 479.110509][T13983] ? rcu_is_watching+0x16/0xb0 [ 479.110546][T13983] do_syscall_64+0x166/0x520 [ 479.110581][T13983] ? trace_irq_disable+0x3b/0x140 [ 479.110615][T13983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.110639][T13983] ? clear_bhb_loop+0x70/0xc0 [ 479.110669][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.110694][T13983] RIP: 0033:0x7f688086e559 [ 479.110716][T13983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.110745][T13983] RSP: 002b:00007f687eac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 479.110770][T13983] RAX: ffffffffffffffda RBX: 00007f6880af5fa0 RCX: 00007f688086e559 [ 479.110789][T13983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 479.110805][T13983] RBP: 00007f6880905ab8 R08: 0000000000000000 R09: 0000000000000000 [ 479.110821][T13983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.110837][T13983] R13: 00007f6880af6038 R14: 00007f6880af5fa0 R15: 00007fffec39ae78 [ 479.110876][T13983] [ 481.293841][T14018] FAULT_INJECTION: forcing a failure. [ 481.293841][T14018] name failslab, interval 1, probability 0, space 0, times 0 [ 481.293882][T14018] CPU: 0 UID: 0 PID: 14018 Comm: syz.4.2791 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 481.293910][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 481.293924][T14018] Call Trace: [ 481.293933][T14018] [ 481.293962][T14018] dump_stack_lvl+0xe8/0x150 [ 481.294005][T14018] should_fail_ex+0x46b/0x600 [ 481.294058][T14018] should_failslab+0xa8/0x100 [ 481.294086][T14018] __kmalloc_cache_noprof+0xa1/0x680 [ 481.294125][T14018] ? __rdma_create_id+0x65/0x7b0 [ 481.294156][T14018] ? __rdma_create_id+0x65/0x7b0 [ 481.294190][T14018] ? __pfx_ucma_event_handler+0x10/0x10 [ 481.294216][T14018] ? __pfx_ucma_event_handler+0x10/0x10 [ 481.294239][T14018] __rdma_create_id+0x65/0x7b0 [ 481.294276][T14018] ? __pfx_ucma_event_handler+0x10/0x10 [ 481.294299][T14018] rdma_create_user_id+0x81/0xc0 [ 481.294335][T14018] ucma_create_id+0x22e/0x370 [ 481.294375][T14018] ? __pfx_ucma_create_id+0x10/0x10 [ 481.294429][T14018] ucma_write+0x257/0x2f0 [ 481.294467][T14018] ? __pfx_ucma_write+0x10/0x10 [ 481.294501][T14018] ? security_file_permission+0x75/0x260 [ 481.294540][T14018] ? rw_verify_area+0x209/0x4d0 [ 481.294575][T14018] ? __pfx_ucma_write+0x10/0x10 [ 481.294609][T14018] vfs_write+0x29f/0xbb0 [ 481.294649][T14018] ? __pfx_vfs_write+0x10/0x10 [ 481.294688][T14018] ? __fget_files+0x2a/0x420 [ 481.294721][T14018] ? __fget_files+0x2a/0x420 [ 481.294750][T14018] ? __fget_files+0x3a8/0x420 [ 481.294777][T14018] ? __fget_files+0x2a/0x420 [ 481.294815][T14018] ksys_write+0x156/0x270 [ 481.294850][T14018] ? __pfx_ksys_write+0x10/0x10 [ 481.294895][T14018] do_syscall_64+0x166/0x520 [ 481.294930][T14018] ? trace_irq_disable+0x3b/0x140 [ 481.294964][T14018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.294989][T14018] ? clear_bhb_loop+0x70/0xc0 [ 481.295027][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.295053][T14018] RIP: 0033:0x7f688086e559 [ 481.295076][T14018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.295097][T14018] RSP: 002b:00007f687eac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 481.295134][T14018] RAX: ffffffffffffffda RBX: 00007f6880af5fa0 RCX: 00007f688086e559 [ 481.295152][T14018] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000003 [ 481.295166][T14018] RBP: 00007f6880905ab8 R08: 0000000000000000 R09: 0000000000000000 [ 481.295180][T14018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.295194][T14018] R13: 00007f6880af6038 R14: 00007f6880af5fa0 R15: 00007fffec39ae78 [ 481.295229][T14018] [ 488.258891][T14108] kexec: Could not allocate control_code_buffer [ 489.400781][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 489.400802][ T36] audit: type=1326 audit(1792414162.638:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 489.404416][ T36] audit: type=1326 audit(1792414162.648:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 489.516368][ T36] audit: type=1326 audit(1792414162.758:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 489.543271][ T36] audit: type=1326 audit(1792414162.778:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb20a2fb2bb code=0x7ffc0000 [ 489.543329][ T36] audit: type=1326 audit(1792414162.788:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 489.543379][ T36] audit: type=1326 audit(1792414162.788:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 489.561704][ T36] audit: type=1326 audit(1792414162.798:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb20a2fa9ac code=0x7ffc0000 [ 489.561863][ T36] audit: type=1326 audit(1792414162.808:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb20a2faa0e code=0x7ffc0000 [ 489.561978][ T36] audit: type=1326 audit(1792414162.808:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb20a33e1eb code=0x7ffc0000 [ 489.567444][ T36] audit: type=1326 audit(1792414162.818:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.5.2833" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb20a33e559 code=0x7ffc0000 [ 492.605691][T14169] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 493.766638][T14169] bond5 (unregistering): Released all slaves [ 494.037987][T14187] kernel read not supported for file /memory.events (pid: 14187 comm: syz.5.2864) [ 500.357435][ T5741] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 500.515965][ T5741] usb 3-1: unable to get BOS descriptor or descriptor too short [ 500.529052][ T5741] usb 3-1: not running at top speed; connect to a high speed hub [ 500.529148][ T5741] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 500.530433][ T5741] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 500.530466][ T5741] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 500.530488][ T5741] usb 3-1: config 14 has no interface number 0 [ 500.530504][ T5741] usb 3-1: config 14 has no interface number 1 [ 500.530654][ T5741] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 500.530679][ T5741] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 500.530706][ T5741] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 500.530735][ T5741] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.530759][ T5741] usb 3-1: config 14 interface 57 has no altsetting 0 [ 500.530776][ T5741] usb 3-1: config 14 interface 228 has no altsetting 0 [ 500.557644][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.557673][ T5741] usb 3-1: Product: syz [ 500.557689][ T5741] usb 3-1: Manufacturer: syz [ 500.557706][ T5741] usb 3-1: SerialNumber: syz [ 500.875756][ T4908] Bluetooth: hci2: command 0x0c1a tx timeout [ 501.376233][ T5741] legousbtower 3-1:14.57: interrupt endpoints not found [ 501.867468][ T5741] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 90.189 build 39714 [ 501.909149][ T5741] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 502.439208][T14299] usb 3-1: LEGO USB Tower reset control request failed [ 502.446930][ T5809] usb 3-1: USB disconnect, device number 21 [ 502.523458][ T5809] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 502.558950][T14301] syz_tun: entered allmulticast mode [ 502.585674][T14300] syz_tun: left allmulticast mode [ 502.823232][T14308] netlink: 'syz.4.2895': attribute type 1 has an invalid length. [ 502.823256][T14308] netlink: 'syz.4.2895': attribute type 4 has an invalid length. [ 502.823270][T14308] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2895'. [ 505.443199][T14355] sctp: [Deprecated]: syz.5.2911 (pid 14355) Use of int in maxseg socket option. [ 505.443199][T14355] Use struct sctp_assoc_value instead [ 506.930530][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.866133][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 509.866164][ T36] audit: type=1326 audit(1792414183.108:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 509.904252][ T36] audit: type=1326 audit(1792414183.108:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 509.904314][ T36] audit: type=1326 audit(1792414183.108:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 509.904363][ T36] audit: type=1326 audit(1792414183.108:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 509.917728][ T36] audit: type=1326 audit(1792414183.168:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 509.917780][ T36] audit: type=1326 audit(1792414183.168:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 509.920579][ T36] audit: type=1326 audit(1792414183.168:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38c17de2c2 code=0x7ffc0000 [ 509.920719][ T36] audit: type=1326 audit(1792414183.168:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f38c17de357 code=0x7ffc0000 [ 509.920838][ T36] audit: type=1326 audit(1792414183.168:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f38c179b251 code=0x7ffc0000 [ 509.920970][ T36] audit: type=1326 audit(1792414183.168:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14418 comm="syz.6.2932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f38c17df349 code=0x7ffc0000 [ 510.199552][T14425] sctp: [Deprecated]: syz.1.2933 (pid 14425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 510.199552][T14425] Use struct sctp_sack_info instead [ 511.245907][T14439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2940'. [ 518.805252][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'. [ 520.273499][T14552] overlayfs: failed to clone lowerpath [ 520.895217][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 520.895310][ T36] audit: type=1326 audit(1792414194.138:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 520.934936][ T36] audit: type=1326 audit(1792414194.138:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 520.975911][ T36] audit: type=1326 audit(1792414194.218:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 520.977254][ T36] audit: type=1326 audit(1792414194.218:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 521.038908][ T36] audit: type=1326 audit(1792414194.278:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 521.091140][ T36] audit: type=1326 audit(1792414194.338:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 521.091196][ T36] audit: type=1326 audit(1792414194.338:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38c17de2c2 code=0x7ffc0000 [ 521.507782][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 521.787385][ T36] audit: type=1326 audit(1792414195.028:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 521.788195][ T36] audit: type=1326 audit(1792414195.038:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c17de559 code=0x7ffc0000 [ 521.791941][ T36] audit: type=1326 audit(1792414195.038:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14557 comm="syz.6.2983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f38c17de357 code=0x7ffc0000 [ 524.091002][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2992'. [ 524.631546][ T4908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.667183][ T4908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.752929][ T4908] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.765425][ T4908] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.776818][ T4908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.210106][T14584] hsr_slave_0: left promiscuous mode [ 525.384803][T14584] hsr_slave_1: left promiscuous mode [ 526.852536][T14586] rxe_eth0 speed is unknown, defaulting to 1000 [ 527.007457][ T5598] Bluetooth: hci5: command tx timeout [ 528.146750][T14586] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.154629][T14586] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.154820][T14586] bridge_slave_0: entered allmulticast mode [ 528.174194][T14586] bridge_slave_0: entered promiscuous mode [ 528.199878][T14586] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.200122][T14586] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.200299][T14586] bridge_slave_1: entered allmulticast mode [ 528.203052][T14586] bridge_slave_1: entered promiscuous mode [ 528.313680][T14586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.327905][T14586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.382612][T14586] team0: Port device team_slave_0 added [ 528.392832][T14586] team0: Port device team_slave_1 added [ 528.439806][T14586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.439823][T14586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.439852][T14586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.442172][T14586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.442187][T14586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.442216][T14586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.627212][T14586] hsr_slave_0: entered promiscuous mode [ 528.630211][T14586] hsr_slave_1: entered promiscuous mode [ 529.088056][ T5598] Bluetooth: hci5: command tx timeout [ 529.896878][T14586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 529.953665][T14586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.955299][T14586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 530.184585][T14586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.186429][T14586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 530.252042][T14586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.253692][T14586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 530.413964][T14586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.567673][T14586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.598826][T14586] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.633767][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.633916][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.691970][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.692199][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.167376][ T5598] Bluetooth: hci5: command tx timeout [ 531.512513][T14586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.162839][T14586] veth0_vlan: entered promiscuous mode [ 532.193830][T14586] veth1_vlan: entered promiscuous mode [ 532.258523][T14586] veth0_macvtap: entered promiscuous mode [ 532.264826][T14586] veth1_macvtap: entered promiscuous mode [ 532.365729][T14586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.555220][T14586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.629317][T14629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.716341][T14629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.726239][T14629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.736345][T14629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.751656][T14629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.987459][ T67] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.257034][ T5598] Bluetooth: hci5: command tx timeout [ 533.468197][ T7658] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.989455][ T7647] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.112018][ T7683] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.847883][ T5598] Bluetooth: hci4: command tx timeout [ 535.974338][T13728] bond3: (slave syz_tun): Removing an active aggregator [ 535.975156][T13728] bond3: (slave syz_tun): Releasing backup interface [ 536.933815][ T5598] Bluetooth: hci4: command tx timeout [ 538.309167][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.309192][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.008891][ T5598] Bluetooth: hci4: command tx timeout [ 539.089791][T14628] rxe_eth0 speed is unknown, defaulting to 1000 [ 539.275056][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.275079][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.440190][T14629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.503210][T14629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.506233][T14629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 540.530803][T14629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 540.533200][T14629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 541.093925][ T5598] Bluetooth: hci4: command tx timeout [ 541.936005][T14706] Invalid auth_tok structure returned from key query [ 541.936025][T14706] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 541.936040][T14706] One or more global auth toks could not properly register; rc = [-22] [ 541.936171][T14706] Error validating options; rc = [-22] [ 542.087511][T14714] overlayfs: failed to clone upperpath [ 542.687194][ T5598] Bluetooth: hci3: command tx timeout [ 543.847883][T14733] FAULT_INJECTION: forcing a failure. [ 543.847883][T14733] name failslab, interval 1, probability 0, space 0, times 0 [ 543.847924][T14733] CPU: 0 UID: 0 PID: 14733 Comm: syz.7.3023 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 543.847952][T14733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.847967][T14733] Call Trace: [ 543.847976][T14733] [ 543.847986][T14733] dump_stack_lvl+0xe8/0x150 [ 543.848028][T14733] should_fail_ex+0x46b/0x600 [ 543.848070][T14733] ? proc_alloc_inode+0x2a/0xc0 [ 543.848106][T14733] should_failslab+0xa8/0x100 [ 543.848135][T14733] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 543.848174][T14733] ? proc_alloc_inode+0x2a/0xc0 [ 543.848214][T14733] ? __pfx_proc_alloc_inode+0x10/0x10 [ 543.848249][T14733] proc_alloc_inode+0x2a/0xc0 [ 543.848283][T14733] alloc_inode+0x6a/0x1b0 [ 543.848312][T14733] new_inode+0x1f/0x170 [ 543.848337][T14733] ? proc_pid_make_inode+0x19/0x130 [ 543.848366][T14733] proc_pid_make_inode+0x21/0x130 [ 543.848395][T14733] proc_ns_dir_lookup+0x697/0x7c0 [ 543.848434][T14733] lookup_open+0x9eb/0x1a60 [ 543.848498][T14733] path_openat+0x715/0x20a0 [ 543.848554][T14733] do_file_open+0x23e/0x4a0 [ 543.848596][T14733] ? __pfx_do_file_open+0x10/0x10 [ 543.848640][T14733] ? __pfx_kfree_link+0x10/0x10 [ 543.848683][T14733] ? alloc_fd+0x654/0x6d0 [ 543.848722][T14733] do_sys_openat2+0x115/0x200 [ 543.848747][T14733] ? __se_sys_futex+0x3a8/0x450 [ 543.848774][T14733] ? __pfx_do_sys_openat2+0x10/0x10 [ 543.848814][T14733] ? rcu_is_watching+0x16/0xb0 [ 543.848844][T14733] __x64_sys_openat+0x138/0x170 [ 543.848876][T14733] do_syscall_64+0x166/0x520 [ 543.848910][T14733] ? trace_irq_disable+0x3b/0x140 [ 543.848943][T14733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.848971][T14733] ? clear_bhb_loop+0x70/0xc0 [ 543.849000][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.849024][T14733] RIP: 0033:0x7f1ef987ed8e [ 543.849046][T14733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 543.849066][T14733] RSP: 002b:00007f1ef7b15ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.849092][T14733] RAX: ffffffffffffffda RBX: 00007f1ef7b166c0 RCX: 00007f1ef987ed8e [ 543.849109][T14733] RDX: 0000000000000002 RSI: 00007f1ef7b15f90 RDI: ffffffffffffff9c [ 543.849126][T14733] RBP: 00007f1ef9955ab8 R08: 0000000000000000 R09: 0000000000000000 [ 543.849141][T14733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.849156][T14733] R13: 00007f1ef9b46038 R14: 00007f1ef9b45fa0 R15: 00007ffe5b30a198 [ 543.849194][T14733] [ 543.934132][T14687] rxe_eth0 speed is unknown, defaulting to 1000 [ 544.767840][ T5598] Bluetooth: hci3: command tx timeout [ 546.421784][T14745] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3031'. [ 546.465248][T14745] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3031'. [ 546.847303][ T5598] Bluetooth: hci3: command tx timeout [ 548.927271][ T5598] Bluetooth: hci3: command tx timeout [ 549.103263][T14628] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.103467][T14628] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.103775][T14628] bridge_slave_0: entered allmulticast mode [ 549.106597][T14628] bridge_slave_0: entered promiscuous mode [ 549.135440][T14628] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.135587][T14628] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.135741][T14628] bridge_slave_1: entered allmulticast mode [ 549.140029][T14628] bridge_slave_1: entered promiscuous mode [ 549.389941][T14687] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.390101][T14687] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.390401][T14687] bridge_slave_0: entered allmulticast mode [ 549.431012][T14687] bridge_slave_0: entered promiscuous mode [ 549.614613][T14687] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.614745][T14687] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.614930][T14687] bridge_slave_1: entered allmulticast mode [ 549.687930][T14687] bridge_slave_1: entered promiscuous mode [ 549.711877][T14628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.901546][T14628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.086212][T14687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.628392][T14825] jffs2: notice: (14825) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 550.993098][T14687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.935937][T14628] team0: Port device team_slave_0 added [ 553.124343][T14628] team0: Port device team_slave_1 added [ 553.346068][T14687] team0: Port device team_slave_0 added [ 553.419838][T14853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 553.419878][T14853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 553.485307][T14687] team0: Port device team_slave_1 added [ 553.503424][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 553.503460][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 553.533051][T14853] erspan0: entered promiscuous mode [ 553.534722][T14853] 0ªî{X¹¦: entered promiscuous mode [ 553.718400][T14628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.718421][T14628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.718453][T14628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.216348][T14584] bond0: (slave syz_tun): Releasing backup interface [ 555.583104][T14628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.583124][T14628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.583155][T14628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.967527][T14629] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 557.738612][T14687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.738634][T14687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.738665][T14687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.807634][T14687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.807655][T14687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.807686][T14687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.144633][T14628] hsr_slave_0: entered promiscuous mode [ 558.145981][T14628] hsr_slave_1: entered promiscuous mode [ 558.154793][T14628] debugfs: 'hsr0' already exists in 'hsr' [ 558.154819][T14628] Cannot create hsr debugfs directory [ 558.279059][T14687] hsr_slave_0: entered promiscuous mode [ 558.281236][T14687] hsr_slave_1: entered promiscuous mode [ 558.282328][T14687] debugfs: 'hsr0' already exists in 'hsr' [ 558.282354][T14687] Cannot create hsr debugfs directory [ 562.538176][T14628] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 563.019209][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3077'. [ 563.019246][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3077'. [ 563.024240][T14628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 563.173935][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3077'. [ 563.173970][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3077'. [ 563.360166][T14628] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 563.436430][T14628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 563.822474][T14628] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 564.214194][T14628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.355315][T14938] FAULT_INJECTION: forcing a failure. [ 565.355315][T14938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.355374][T14938] CPU: 1 UID: 0 PID: 14938 Comm: syz.7.3083 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 565.355403][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 565.355418][T14938] Call Trace: [ 565.355426][T14938] [ 565.355437][T14938] dump_stack_lvl+0xe8/0x150 [ 565.355481][T14938] should_fail_ex+0x46b/0x600 [ 565.355528][T14938] _copy_from_user+0x2d/0xb0 [ 565.355556][T14938] ____sys_sendmsg+0x31b/0x870 [ 565.355601][T14938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.355648][T14938] ? import_iovec+0x73/0xa0 [ 565.355680][T14938] ___sys_sendmsg+0x2a5/0x360 [ 565.355714][T14938] ? __lock_acquire+0x747/0x2de0 [ 565.355752][T14938] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.355792][T14938] ? futex_wake+0x51e/0x600 [ 565.355855][T14938] ? __fget_files+0x2a/0x420 [ 565.355884][T14938] ? __fget_files+0x3a8/0x420 [ 565.355944][T14938] __x64_sys_sendmsg+0x1b7/0x290 [ 565.355989][T14938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.356048][T14938] do_syscall_64+0x166/0x520 [ 565.356085][T14938] ? trace_irq_disable+0x3b/0x140 [ 565.356119][T14938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.356144][T14938] ? clear_bhb_loop+0x70/0xc0 [ 565.356174][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.356198][T14938] RIP: 0033:0x7f1ef98be559 [ 565.356221][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.356241][T14938] RSP: 002b:00007f1ef7b16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.356268][T14938] RAX: ffffffffffffffda RBX: 00007f1ef9b45fa0 RCX: 00007f1ef98be559 [ 565.356286][T14938] RDX: 0000000000008004 RSI: 00002000000006c0 RDI: 0000000000000004 [ 565.356302][T14938] RBP: 00007f1ef9955ab8 R08: 0000000000000000 R09: 0000000000000000 [ 565.356317][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.356332][T14938] R13: 00007f1ef9b46038 R14: 00007f1ef9b45fa0 R15: 00007ffe5b30a198 [ 565.356370][T14938] [ 565.664592][T14628] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 566.073006][T14628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.188424][ T7646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.151612][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 568.195732][T14959] hsr0: entered allmulticast mode [ 568.195759][T14959] hsr_slave_0: entered allmulticast mode [ 568.195788][T14959] hsr_slave_1: entered allmulticast mode [ 568.387469][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.633547][T14962] hsr_slave_0: left promiscuous mode [ 568.683308][T14962] hsr_slave_1: left promiscuous mode [ 569.199541][T14962] hsr0 (unregistering): left allmulticast mode [ 569.371564][ T5598] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 569.434986][ T5598] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.455204][ T5598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.468666][ T5598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.471808][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.577826][T14687] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 569.824286][T14687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.850248][T14687] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 569.876519][T14975] overlayfs: failed to clone upperpath [ 569.975280][T14687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.005558][T14687] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 570.104992][T14687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.681665][ T7646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.957038][T14687] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 571.045174][T14687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.551468][T15000] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 571.737063][ T5598] Bluetooth: hci2: command tx timeout [ 572.867685][ T149] IPVS: starting estimator thread 0... [ 572.967326][T15009] IPVS: using max 7 ests per chain, 16800 per kthread [ 573.807067][ T5598] Bluetooth: hci2: command tx timeout [ 575.887226][ T5598] Bluetooth: hci2: command tx timeout [ 576.129752][ T7646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.326786][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3105'. [ 577.967437][ T5598] Bluetooth: hci2: command tx timeout [ 578.359766][ T67] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.360132][ T67] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.487362][T14969] rxe_eth0 speed is unknown, defaulting to 1000 [ 578.632611][T14628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.688828][ T7683] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.688929][ T7683] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.000934][T14628] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.083330][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.085579][ T7683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.245936][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 579.245967][ T36] audit: type=1326 audit(1792414252.488:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.246016][ T36] audit: type=1326 audit(1792414252.488:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.246060][ T36] audit: type=1326 audit(1792414252.488:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.246104][ T36] audit: type=1326 audit(1792414252.488:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.246149][ T36] audit: type=1326 audit(1792414252.488:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.246193][ T36] audit: type=1326 audit(1792414252.488:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.295148][ T36] audit: type=1326 audit(1792414252.528:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.449782][ T36] audit: type=1326 audit(1792414252.568:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.449855][ T36] audit: type=1326 audit(1792414252.568:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.449904][ T36] audit: type=1326 audit(1792414252.568:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15032 comm="syz.7.3109" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef98be559 code=0x7ffc0000 [ 579.619311][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.624493][ T7686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.044861][T14687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.170727][T15037] loop5: detected capacity change from 0 to 7 [ 580.185787][T15037] Dev loop5: unable to read RDB block 7 [ 580.185817][T15037] loop5: AHDI p1 p2 p3 [ 580.185836][T15037] loop5: partition table partially beyond EOD, truncated [ 580.186802][T15037] loop5: p1 start 1818582900 is beyond EOD, truncated [ 580.186829][T15037] loop5: p3 start 335544320 is beyond EOD, truncated [ 580.435322][T14687] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.523729][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.525563][ T7683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.581225][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.581679][ T7650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.054241][ T7646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.196220][T14628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.604712][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.606460][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.606694][T14969] bridge_slave_0: entered allmulticast mode [ 583.651165][T14969] bridge_slave_0: entered promiscuous mode [ 583.781651][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.781784][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.782001][T14969] bridge_slave_1: entered allmulticast mode [ 583.822873][T14969] bridge_slave_1: entered promiscuous mode [ 583.924344][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.943307][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.045801][T14969] team0: Port device team_slave_0 added [ 584.114137][T14969] team0: Port device team_slave_1 added [ 584.776665][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.776685][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.776713][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.844278][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.844298][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.844329][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.120072][T14687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.244480][T14969] hsr_slave_0: entered promiscuous mode [ 585.246219][T14969] hsr_slave_1: entered promiscuous mode [ 585.829124][T14628] veth0_vlan: entered promiscuous mode [ 586.225977][T14628] veth1_vlan: entered promiscuous mode [ 586.988375][T14628] veth0_macvtap: entered promiscuous mode [ 587.030783][T14628] veth1_macvtap: entered promiscuous mode [ 587.033166][T14687] veth0_vlan: entered promiscuous mode [ 587.119459][T14687] veth1_vlan: entered promiscuous mode [ 587.160459][T14628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.239061][T15096] netlink: 'syz.5.3117': attribute type 1 has an invalid length. [ 589.132568][T14969] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.575651][T15096] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 590.150026][T14628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.370165][T14687] veth0_macvtap: entered promiscuous mode [ 591.611537][T14687] veth1_macvtap: entered promiscuous mode [ 592.797838][ T1015] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.831370][T14687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.373365][T14687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.800478][T14629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 593.842304][T14629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 593.861032][T14629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 593.945399][T14629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.974127][T14629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.453005][ T5598] Bluetooth: hci0: command tx timeout [ 597.905767][T14969] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.410082][T15182] FAULT_INJECTION: forcing a failure. [ 598.410082][T15182] name failslab, interval 1, probability 0, space 0, times 0 [ 598.410122][T15182] CPU: 1 UID: 0 PID: 15182 Comm: syz.7.3124 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 598.410149][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 598.410162][T15182] Call Trace: [ 598.410171][T15182] [ 598.410180][T15182] dump_stack_lvl+0xe8/0x150 [ 598.410220][T15182] should_fail_ex+0x46b/0x600 [ 598.410262][T15182] should_failslab+0xa8/0x100 [ 598.410289][T15182] __kmalloc_noprof+0xfb/0x790 [ 598.410324][T15182] ? _ib_alloc_device+0x40/0x6f0 [ 598.410356][T15182] ? _ib_alloc_device+0x40/0x6f0 [ 598.410405][T15182] _ib_alloc_device+0x40/0x6f0 [ 598.410443][T15182] siw_newlink+0xea/0xe00 [ 598.410477][T15182] nldev_newlink+0x5be/0x650 [ 598.410513][T15182] ? __pfx_nldev_newlink+0x10/0x10 [ 598.410648][T15182] ? lock_acquire+0x115/0x350 [ 598.410695][T15182] ? cap_capable+0x123/0x460 [ 598.410733][T15182] ? security_capable+0x7e/0x2c0 [ 598.410762][T15182] ? __pfx_nldev_newlink+0x10/0x10 [ 598.410793][T15182] rdma_nl_rcv+0x6f6/0xa40 [ 598.410838][T15182] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 598.410895][T15182] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.410929][T15182] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.410988][T15182] netlink_unicast+0x90c/0xac0 [ 598.411042][T15182] netlink_sendmsg+0x813/0xb40 [ 598.411065][T15182] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 598.411102][T15182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.411128][T15182] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 598.411167][T15182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.411200][T15182] sock_sendmsg_nosec+0x13a/0x180 [ 598.411228][T15182] ____sys_sendmsg+0x565/0x870 [ 598.411270][T15182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.411311][T15182] ? import_iovec+0x73/0xa0 [ 598.411340][T15182] ___sys_sendmsg+0x2a5/0x360 [ 598.411396][T15182] ? __lock_acquire+0x747/0x2de0 [ 598.411433][T15182] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.411473][T15182] ? futex_wait+0x2a2/0x390 [ 598.411536][T15182] ? __fget_files+0x2a/0x420 [ 598.411564][T15182] ? __fget_files+0x3a8/0x420 [ 598.411605][T15182] __x64_sys_sendmsg+0x1b7/0x290 [ 598.411643][T15182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.411702][T15182] do_syscall_64+0x166/0x520 [ 598.411734][T15182] ? trace_irq_disable+0x3b/0x140 [ 598.411766][T15182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.411790][T15182] ? clear_bhb_loop+0x70/0xc0 [ 598.411820][T15182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.411843][T15182] RIP: 0033:0x7f1ef98be559 [ 598.411866][T15182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.411885][T15182] RSP: 002b:00007f1ef7b16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.411911][T15182] RAX: ffffffffffffffda RBX: 00007f1ef9b45fa0 RCX: 00007f1ef98be559 [ 598.411928][T15182] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 598.411943][T15182] RBP: 00007f1ef9955ab8 R08: 0000000000000000 R09: 0000000000000000 [ 598.411958][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.411972][T15182] R13: 00007f1ef9b46038 R14: 00007f1ef9b45fa0 R15: 00007ffe5b30a198 [ 598.412010][T15182] [ 598.527294][ T5598] Bluetooth: hci0: command tx timeout [ 599.361409][ T7646] bridge_slave_1: left allmulticast mode [ 599.361697][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.827313][ T7646] bridge_slave_0: left allmulticast mode [ 599.830518][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.054481][T14629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.126872][T14629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.272524][T14629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.275955][T14629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.277243][T14629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.607069][ T5598] Bluetooth: hci0: command tx timeout [ 602.367474][ T5598] Bluetooth: hci4: command tx timeout [ 602.697560][ T5598] Bluetooth: hci0: command tx timeout [ 603.402009][T15205] overlayfs: failed to clone upperpath [ 603.877493][ T7646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.989945][ T7646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.109360][ T7646] bond0 (unregistering): (slave team0): Releasing backup interface [ 604.185351][ T7646] team0: left promiscuous mode [ 604.323131][ T7646] bond0 (unregistering): Released all slaves [ 604.357536][ T7646] bond1 (unregistering): Released all slaves [ 604.391703][ T7646] bond2 (unregistering): Released all slaves [ 604.424565][ T7646] bond3 (unregistering): Released all slaves [ 604.450673][ T5598] Bluetooth: hci4: command tx timeout [ 605.304100][T15187] syzkaller0: entered promiscuous mode [ 605.304131][T15187] syzkaller0: entered allmulticast mode [ 606.537548][ T5598] Bluetooth: hci4: command tx timeout [ 607.109686][ T1015] netdevsim netdevsim2 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.113185][ T7647] netdevsim netdevsim2 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.115108][ T7647] netdevsim netdevsim2 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.115597][ T7647] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.347007][T15149] rxe_eth0 speed is unknown, defaulting to 1000 [ 607.597054][ T149] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.597149][ T149] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.597201][ T149] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.597242][ T149] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.597282][ T149] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.597322][ T149] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.597361][ T149] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.618513][ T5598] Bluetooth: hci4: command tx timeout [ 609.517860][T14969] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.040724][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 610.058453][T15192] rxe_eth0 speed is unknown, defaulting to 1000 [ 614.661825][T15149] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.662052][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.662287][T15149] bridge_slave_0: entered allmulticast mode [ 614.703506][T15149] bridge_slave_0: entered promiscuous mode [ 614.735996][T15149] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.736192][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.736355][T15149] bridge_slave_1: entered allmulticast mode [ 614.773151][T15149] bridge_slave_1: entered promiscuous mode [ 615.005258][T15149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.028850][T15149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.200078][T15149] team0: Port device team_slave_0 added [ 615.203994][T15149] team0: Port device team_slave_1 added [ 615.658575][T14629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.722740][T14629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.726491][T14629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.732448][ T4908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.734422][ T4908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 616.575076][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 616.659319][T15149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.659340][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.659372][T15149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.719719][T15149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.719737][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.719761][T15149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.035357][T15149] hsr_slave_0: entered promiscuous mode [ 617.036833][T15149] hsr_slave_1: entered promiscuous mode [ 617.075544][T15149] debugfs: 'hsr0' already exists in 'hsr' [ 617.075573][T15149] Cannot create hsr debugfs directory [ 617.906362][ T5598] Bluetooth: hci3: command tx timeout [ 618.404117][T15337] ref_ctr_offset mismatch. inode: 0xccb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 619.970791][ T5598] Bluetooth: hci3: command tx timeout [ 620.332782][ T5253] 8021q: adding VLAN 0 to HW filter on device eth10 [ 620.712965][T14969] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.194819][T15192] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.194967][T15192] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.195181][T15192] bridge_slave_0: entered allmulticast mode [ 621.261277][T15192] bridge_slave_0: entered promiscuous mode [ 622.047249][ T5598] Bluetooth: hci3: command tx timeout [ 622.140940][T15368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3160'. [ 622.826524][T15192] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.826647][T15192] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.826853][T15192] bridge_slave_1: entered allmulticast mode [ 622.863571][T15192] bridge_slave_1: entered promiscuous mode [ 624.127101][ T5598] Bluetooth: hci3: command tx timeout [ 624.855065][T15376] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3163'. [ 625.195517][T15310] rxe_eth0 speed is unknown, defaulting to 1000 [ 625.355226][T15192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.469563][T15192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.499470][T15382] 9p: Bad value for 'rfdno' [ 626.710779][T15192] team0: Port device team_slave_0 added [ 626.815294][T15192] team0: Port device team_slave_1 added [ 627.398936][T15192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.398956][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.398985][T15192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.491537][T15192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.491558][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.491588][T15192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.830011][T15192] hsr_slave_0: entered promiscuous mode [ 627.831526][T15192] hsr_slave_1: entered promiscuous mode [ 627.833016][T15192] debugfs: 'hsr0' already exists in 'hsr' [ 627.833043][T15192] Cannot create hsr debugfs directory [ 628.152087][T14969] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 628.405109][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.722640][T14969] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 628.887490][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.813742][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.968560][ T4908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 630.021796][ T4908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 630.039909][ T4908] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.041150][ T4908] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 630.041859][ T4908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 631.216233][T15149] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.919680][ T5253] 8021q: adding VLAN 0 to HW filter on device eth11 [ 632.207638][ T5598] Bluetooth: hci5: command tx timeout [ 634.276742][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.296028][ T5598] Bluetooth: hci5: command tx timeout [ 634.470830][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.367392][ T5598] Bluetooth: hci5: command tx timeout [ 638.403371][ T7646] team0 (unregistering): Port device team_slave_1 removed [ 638.447279][ T5598] Bluetooth: hci5: command tx timeout [ 638.602094][ T7646] team0 (unregistering): Port device team_slave_0 removed [ 639.952550][T15418] rxe_eth0 speed is unknown, defaulting to 1000 [ 641.165165][T15149] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.189572][T15539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3188'. [ 645.693727][T15149] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.551242][T15310] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.551834][T15310] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.552015][T15310] bridge_slave_0: entered allmulticast mode [ 646.554646][T15310] bridge_slave_0: entered promiscuous mode [ 646.583545][T15310] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.583819][T15310] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.584312][T15310] bridge_slave_1: entered allmulticast mode [ 646.600699][T15310] bridge_slave_1: entered promiscuous mode [ 646.874413][T15310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.930481][T15310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.132594][T15310] team0: Port device team_slave_0 added [ 647.263717][T15310] team0: Port device team_slave_1 added [ 650.225233][T15149] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.319933][T15310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.319952][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.319980][T15310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.397863][T15310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.397881][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.397910][T15310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.798973][T15310] hsr_slave_0: entered promiscuous mode [ 650.805332][T15310] hsr_slave_1: entered promiscuous mode [ 650.815321][T15310] debugfs: 'hsr0' already exists in 'hsr' [ 650.815407][T15310] Cannot create hsr debugfs directory [ 652.210343][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.210561][T15418] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.210761][T15418] bridge_slave_0: entered allmulticast mode [ 652.214018][T15418] bridge_slave_0: entered promiscuous mode [ 652.403574][T15418] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.403706][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.403892][T15418] bridge_slave_1: entered allmulticast mode [ 652.431483][T15418] bridge_slave_1: entered promiscuous mode [ 652.759361][T15418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.898320][T15418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.133106][T15418] team0: Port device team_slave_0 added [ 653.165223][T15418] team0: Port device team_slave_1 added [ 653.384375][T15418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.384396][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.384430][T15418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.431435][T15418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.431454][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.431485][T15418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.954520][ T4908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 654.015809][ T4908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 654.029301][ T4908] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 654.031097][ T4908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 654.092472][ T4908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 656.285804][T15192] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.291791][ T5598] Bluetooth: hci2: command tx timeout [ 656.977190][ T7646] IPVS: stop unused estimator thread 0... [ 657.882324][T15418] hsr_slave_0: entered promiscuous mode [ 657.893494][T15418] hsr_slave_1: entered promiscuous mode [ 657.896155][T15418] debugfs: 'hsr0' already exists in 'hsr' [ 657.896183][T15418] Cannot create hsr debugfs directory [ 658.367628][ T5598] Bluetooth: hci2: command tx timeout [ 658.701833][T15681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.792853][T15682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.057467][T15649] rxe_eth0 speed is unknown, defaulting to 1000 [ 659.850857][T15685] netlink: 'syz.5.3203': attribute type 1 has an invalid length. [ 660.002397][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3203'. [ 660.029315][T15685] 8021q: adding VLAN 0 to HW filter on device bond5 [ 660.458879][ T5598] Bluetooth: hci2: command tx timeout [ 660.691259][ T4908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 660.797725][ T4908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 660.803658][ T4908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 660.818954][ T4908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 660.850942][ T4908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 662.538100][ T4908] Bluetooth: hci2: command tx timeout [ 662.763617][T15649] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.763834][T15649] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.764060][T15649] bridge_slave_0: entered allmulticast mode [ 662.788350][T15649] bridge_slave_0: entered promiscuous mode [ 662.791488][T15649] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.791705][T15649] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.791904][T15649] bridge_slave_1: entered allmulticast mode [ 662.794473][T15649] bridge_slave_1: entered promiscuous mode [ 662.973408][ T4908] Bluetooth: hci0: command tx timeout [ 663.094078][T15649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.144847][T15649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.355774][T15649] team0: Port device team_slave_0 added [ 663.374130][T15649] team0: Port device team_slave_1 added [ 663.374209][T15693] rxe_eth0 speed is unknown, defaulting to 1000 [ 664.398153][T15649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.398173][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.398203][T15649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.491063][T15649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.491084][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.491115][T15649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.007356][ T4908] Bluetooth: hci0: command tx timeout [ 666.910554][T15192] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.936593][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3207'. [ 667.061785][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a412800: rx timeout, send abort [ 667.087280][ T4908] Bluetooth: hci0: command tx timeout [ 667.561882][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a412800: abort rx timeout. Force session deactivation [ 667.562033][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a412c00: rx timeout, send abort [ 668.062122][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a412c00: abort rx timeout. Force session deactivation [ 669.179600][ T4908] Bluetooth: hci0: command tx timeout [ 669.291542][T15649] hsr_slave_0: entered promiscuous mode [ 669.296724][T15649] hsr_slave_1: entered promiscuous mode [ 669.309336][T15649] debugfs: 'hsr0' already exists in 'hsr' [ 669.309373][T15649] Cannot create hsr debugfs directory [ 671.692214][T15693] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.695793][T15693] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.696001][T15693] bridge_slave_0: entered allmulticast mode [ 671.698899][T15693] bridge_slave_0: entered promiscuous mode [ 671.759589][T15693] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.759725][T15693] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.761988][T15693] bridge_slave_1: entered allmulticast mode [ 671.790993][T15693] bridge_slave_1: entered promiscuous mode [ 672.028885][T15693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.033391][T15693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.171247][T15693] team0: Port device team_slave_0 added [ 672.175131][T15693] team0: Port device team_slave_1 added [ 672.239151][T15693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.239170][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.239197][T15693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.241630][T15693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.241646][T15693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.241677][T15693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.496364][T15693] hsr_slave_0: entered promiscuous mode [ 673.506082][T15693] hsr_slave_1: entered promiscuous mode [ 673.514770][T15693] debugfs: 'hsr0' already exists in 'hsr' [ 673.514801][T15693] Cannot create hsr debugfs directory [ 674.444582][T15192] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.760460][ T5598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 674.939917][ T5598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 674.962347][ T5598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 674.986652][ T5598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 675.026093][ T5598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 677.167293][ T4908] Bluetooth: hci6: command tx timeout [ 678.066065][T15192] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.823103][T15789] rxe_eth0 speed is unknown, defaulting to 1000 [ 679.247271][ T4908] Bluetooth: hci6: command tx timeout [ 681.330117][ T4908] Bluetooth: hci6: command tx timeout [ 683.285559][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3218'. [ 683.409935][ T4908] Bluetooth: hci6: command tx timeout [ 684.769038][T15848] netlink: 'syz.5.3221': attribute type 12 has an invalid length. [ 685.559770][T15789] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.559884][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.560167][T15789] bridge_slave_0: entered allmulticast mode [ 685.562757][T15789] bridge_slave_0: entered promiscuous mode [ 685.566540][T15789] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.566706][T15789] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.610451][T15789] bridge_slave_1: entered allmulticast mode [ 685.613125][T15789] bridge_slave_1: entered promiscuous mode [ 685.677353][T15789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.680548][T15789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.743695][T15789] team0: Port device team_slave_0 added [ 685.753320][T15789] team0: Port device team_slave_1 added [ 685.805669][T15789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.805689][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.805720][T15789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.864461][T15789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.864481][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.864513][T15789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.991086][T15789] hsr_slave_0: entered promiscuous mode [ 685.992437][T15789] hsr_slave_1: entered promiscuous mode [ 685.993371][T15789] debugfs: 'hsr0' already exists in 'hsr' [ 685.993405][T15789] Cannot create hsr debugfs directory [ 689.798883][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 689.837165][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 689.858595][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 689.876735][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 691.197911][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 691.256356][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.054599][T15310] netdevsim netdevsim3 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.657124][ T4908] Bluetooth: hci4: command tx timeout [ 695.729751][ T4908] Bluetooth: hci4: command tx timeout [ 697.816655][ T4908] Bluetooth: hci4: command tx timeout [ 699.244794][T15883] rxe_eth0 speed is unknown, defaulting to 1000 [ 699.887040][ T4908] Bluetooth: hci4: command tx timeout [ 700.462416][T15883] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.462645][T15883] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.462844][T15883] bridge_slave_0: entered allmulticast mode [ 700.466258][T15883] bridge_slave_0: entered promiscuous mode [ 700.485179][T15883] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.485913][T15883] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.488362][T15883] bridge_slave_1: entered allmulticast mode [ 700.496092][T15883] bridge_slave_1: entered promiscuous mode [ 700.580919][T15883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.595442][T15883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.683347][T15883] team0: Port device team_slave_0 added [ 700.692596][T15883] team0: Port device team_slave_1 added [ 700.750742][T15883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.750761][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.750791][T15883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.753595][T15883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.753610][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.753639][T15883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.903008][T15883] hsr_slave_0: entered promiscuous mode [ 700.904549][T15883] hsr_slave_1: entered promiscuous mode [ 700.905656][T15883] debugfs: 'hsr0' already exists in 'hsr' [ 700.905683][T15883] Cannot create hsr debugfs directory [ 712.398286][T15888] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 712.463827][T15888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 712.465502][T15888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 712.473526][T15888] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 712.477404][T15888] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 713.245295][T15888] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 713.310023][T15888] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 713.315371][T15888] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 713.352671][T15888] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 713.375714][T15888] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 714.105988][T15310] netdevsim netdevsim3 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.607254][T15888] Bluetooth: hci7: command tx timeout [ 715.410254][T15888] Bluetooth: hci8: command tx timeout [ 715.504211][T15968] rxe_eth0 speed is unknown, defaulting to 1000 [ 716.271892][T15959] rxe_eth0 speed is unknown, defaulting to 1000 [ 716.687323][T15888] Bluetooth: hci7: command tx timeout [ 717.487285][T15888] Bluetooth: hci8: command tx timeout [ 718.768147][ T4908] Bluetooth: hci7: command tx timeout [ 719.567287][T15888] Bluetooth: hci8: command tx timeout [ 720.320099][T15968] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.320258][T15968] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.320476][T15968] bridge_slave_0: entered allmulticast mode [ 720.349376][T15968] bridge_slave_0: entered promiscuous mode [ 720.372805][T15968] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.373037][T15968] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.373264][T15968] bridge_slave_1: entered allmulticast mode [ 720.376481][T15968] bridge_slave_1: entered promiscuous mode [ 720.502706][T15968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.521674][T15968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.635243][T15968] team0: Port device team_slave_0 added [ 720.687811][T15968] team0: Port device team_slave_1 added [ 720.847287][T15888] Bluetooth: hci7: command tx timeout [ 720.922268][T15968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.922288][T15968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.922318][T15968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.924750][T15968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.924766][T15968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.924798][T15968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.134947][ T4908] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 721.196172][ T4908] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 721.236791][ T4908] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 721.248987][ T4908] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 721.249883][ T4908] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 721.647633][ T4908] Bluetooth: hci8: command tx timeout [ 721.883781][T15968] hsr_slave_0: entered promiscuous mode [ 721.897174][T15968] hsr_slave_1: entered promiscuous mode [ 721.901491][T15968] debugfs: 'hsr0' already exists in 'hsr' [ 721.901521][T15968] Cannot create hsr debugfs directory [ 722.597329][T15959] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.597469][T15959] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.597694][T15959] bridge_slave_0: entered allmulticast mode [ 722.600746][T15959] bridge_slave_0: entered promiscuous mode [ 722.660228][T15959] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.673711][T15959] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.706111][T15959] bridge_slave_1: entered allmulticast mode [ 722.710240][T15959] bridge_slave_1: entered promiscuous mode [ 722.925793][T15959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.940723][T16050] rxe_eth0 speed is unknown, defaulting to 1000 [ 723.000549][T15959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.304209][T15959] team0: Port device team_slave_0 added [ 723.384285][T15959] team0: Port device team_slave_1 added [ 723.487286][ T4908] Bluetooth: hci9: command tx timeout [ 723.535433][T15959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.535455][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.535487][T15959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.608107][T15959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.608127][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.608158][T15959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.835276][T15959] hsr_slave_0: entered promiscuous mode [ 723.836789][T15959] hsr_slave_1: entered promiscuous mode [ 723.850407][T15959] debugfs: 'hsr0' already exists in 'hsr' [ 723.850435][T15959] Cannot create hsr debugfs directory [ 725.420680][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.420888][T16050] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.421068][T16050] bridge_slave_0: entered allmulticast mode [ 725.423807][T16050] bridge_slave_0: entered promiscuous mode [ 725.469770][T16050] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.470033][T16050] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.470258][T16050] bridge_slave_1: entered allmulticast mode [ 725.473101][T16050] bridge_slave_1: entered promiscuous mode [ 725.548561][T16050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.567240][ T4908] Bluetooth: hci9: command tx timeout [ 725.567742][T16050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.635666][T16050] team0: Port device team_slave_0 added [ 725.646034][T16050] team0: Port device team_slave_1 added [ 725.696812][T16050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.696946][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.696977][T16050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.699501][T16050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.699518][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.699549][T16050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.929257][T16050] hsr_slave_0: entered promiscuous mode [ 725.934733][T16050] hsr_slave_1: entered promiscuous mode [ 725.948511][T16050] debugfs: 'hsr0' already exists in 'hsr' [ 725.948542][T16050] Cannot create hsr debugfs directory [ 727.647529][ T4908] Bluetooth: hci9: command tx timeout [ 729.727286][ T4908] Bluetooth: hci9: command tx timeout [ 734.752859][T15888] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 734.817365][T15888] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 734.825173][T15888] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 734.842369][T15888] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 734.844947][T15888] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 735.939850][T16075] rxe_eth0 speed is unknown, defaulting to 1000 [ 737.087130][T15888] Bluetooth: hci10: command tx timeout [ 738.436770][T16075] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.442502][T16075] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.442686][T16075] bridge_slave_0: entered allmulticast mode [ 738.444600][T16075] bridge_slave_0: entered promiscuous mode [ 738.465583][T16075] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.466192][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.466804][T16075] bridge_slave_1: entered allmulticast mode [ 738.480690][T16075] bridge_slave_1: entered promiscuous mode [ 739.167285][T14629] Bluetooth: hci10: command tx timeout [ 739.318888][T16075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.322175][T16075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.407277][T14629] Bluetooth: hci3: command 0x0406 tx timeout [ 741.085450][T16075] team0: Port device team_slave_0 added [ 741.096208][T16075] team0: Port device team_slave_1 added [ 741.248841][T15888] Bluetooth: hci10: command tx timeout [ 741.416303][T16075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.416323][T16075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.416352][T16075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.509606][T16075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.509627][T16075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.509659][T16075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.622624][T16075] hsr_slave_0: entered promiscuous mode [ 741.624017][T16075] hsr_slave_1: entered promiscuous mode [ 741.625098][T16075] debugfs: 'hsr0' already exists in 'hsr' [ 741.625127][T16075] Cannot create hsr debugfs directory [ 743.327459][T15888] Bluetooth: hci10: command tx timeout [ 748.498505][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.577236][ T1015] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.743638][ T1273] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.982993][ T1015] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.050672][T14629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.106397][T14629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.121007][T14629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 750.122643][T14629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 750.123562][T14629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.124146][ T7646] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.124191][ T7646] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.712818][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 752.207489][T15888] Bluetooth: hci1: command tx timeout [ 752.394167][T16111] rxe_eth0 speed is unknown, defaulting to 1000 [ 752.691904][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.905376][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 754.287285][T15888] Bluetooth: hci1: command tx timeout [ 754.767681][T15888] Bluetooth: hci5: command 0x0406 tx timeout [ 754.926699][T16111] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.936303][T16111] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.936545][T16111] bridge_slave_0: entered allmulticast mode [ 754.968333][T16111] bridge_slave_0: entered promiscuous mode [ 754.987095][T16111] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.988681][T16111] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.988894][T16111] bridge_slave_1: entered allmulticast mode [ 755.021293][T16111] bridge_slave_1: entered promiscuous mode [ 755.199374][T16111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.220225][T16111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.821850][T16111] team0: Port device team_slave_0 added [ 755.838246][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 755.843321][T16111] team0: Port device team_slave_1 added [ 755.922566][T16111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.922586][T16111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.922615][T16111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.924997][T16111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.925015][T16111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.925047][T16111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.122897][T16111] hsr_slave_0: entered promiscuous mode [ 756.124351][T16111] hsr_slave_1: entered promiscuous mode [ 756.125385][T16111] debugfs: 'hsr0' already exists in 'hsr' [ 756.125414][T16111] Cannot create hsr debugfs directory [ 756.367357][T14629] Bluetooth: hci1: command tx timeout [ 758.064969][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 758.458487][T14629] Bluetooth: hci1: command tx timeout [ 772.701143][T15888] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 772.749503][T15888] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 772.773702][T15888] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 772.776367][T15888] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 772.778198][T15888] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 773.741234][T16242] rxe_eth0 speed is unknown, defaulting to 1000 [ 773.926682][T15888] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 773.972795][T15888] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 773.976929][T15888] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 773.992343][T15888] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 773.993071][T15888] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 774.928938][T14629] Bluetooth: hci11: command tx timeout [ 775.781369][T16255] rxe_eth0 speed is unknown, defaulting to 1000 [ 775.959893][T16242] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.961651][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.961882][T16242] bridge_slave_0: entered allmulticast mode [ 775.990959][T16242] bridge_slave_0: entered promiscuous mode [ 776.010172][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.010400][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.010623][T16242] bridge_slave_1: entered allmulticast mode [ 776.016599][T16242] bridge_slave_1: entered promiscuous mode [ 776.176727][T16242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.209383][T14629] Bluetooth: hci12: command tx timeout [ 776.259875][T16242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.473429][T16242] team0: Port device team_slave_0 added [ 776.512566][T16242] team0: Port device team_slave_1 added [ 776.609453][T16242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.609474][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.609501][T16242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.624825][T16242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.624844][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.624877][T16242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.859631][T16242] hsr_slave_0: entered promiscuous mode [ 776.862729][T16242] hsr_slave_1: entered promiscuous mode [ 776.865355][T16242] debugfs: 'hsr0' already exists in 'hsr' [ 776.865384][T16242] Cannot create hsr debugfs directory [ 777.007386][T15888] Bluetooth: hci11: command tx timeout [ 778.086682][T16255] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.094756][T16255] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.095008][T16255] bridge_slave_0: entered allmulticast mode [ 778.112668][T16255] bridge_slave_0: entered promiscuous mode [ 778.116239][T16255] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.116467][T16255] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.116672][T16255] bridge_slave_1: entered allmulticast mode [ 778.145945][T16255] bridge_slave_1: entered promiscuous mode [ 778.204557][T16255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.225069][T16255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.286428][T16255] team0: Port device team_slave_0 added [ 778.289542][T15888] Bluetooth: hci12: command tx timeout [ 778.341719][T16255] team0: Port device team_slave_1 added [ 778.395470][T16255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.395491][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.395520][T16255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.448366][T16255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.448384][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.448419][T16255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.097019][T15888] Bluetooth: hci11: command tx timeout [ 779.282890][T16255] hsr_slave_0: entered promiscuous mode [ 779.284422][T16255] hsr_slave_1: entered promiscuous mode [ 779.285586][T16255] debugfs: 'hsr0' already exists in 'hsr' [ 779.285613][T16255] Cannot create hsr debugfs directory [ 780.377153][ T4908] Bluetooth: hci12: command tx timeout [ 780.379289][T15888] Bluetooth: hci2: command 0x0406 tx timeout [ 781.167626][T14629] Bluetooth: hci11: command tx timeout [ 781.613134][T15888] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 781.671630][T15888] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 781.673411][T15888] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 781.715149][T15888] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 781.716072][T15888] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 782.456987][T15888] Bluetooth: hci12: command tx timeout [ 782.516286][T16283] rxe_eth0 speed is unknown, defaulting to 1000 [ 783.967158][T15888] Bluetooth: hci13: command tx timeout [ 784.089911][T16283] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.090145][T16283] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.090377][T16283] bridge_slave_0: entered allmulticast mode [ 784.093206][T16283] bridge_slave_0: entered promiscuous mode [ 784.143613][T16283] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.143840][T16283] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.144458][T16283] bridge_slave_1: entered allmulticast mode [ 784.178113][T16283] bridge_slave_1: entered promiscuous mode [ 784.251876][T16283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.256671][T16283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.351159][T16283] team0: Port device team_slave_0 added [ 784.355973][T16283] team0: Port device team_slave_1 added [ 784.429254][T16283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.429275][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.429309][T16283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.433261][T16283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.433279][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.433310][T16283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.612323][T16283] hsr_slave_0: entered promiscuous mode [ 784.615612][T16283] hsr_slave_1: entered promiscuous mode [ 784.616797][T16283] debugfs: 'hsr0' already exists in 'hsr' [ 784.635765][T16283] Cannot create hsr debugfs directory [ 785.487015][T15888] Bluetooth: hci0: command 0x0406 tx timeout [ 786.048382][T15888] Bluetooth: hci13: command tx timeout [ 788.127215][T14629] Bluetooth: hci13: command tx timeout [ 790.207225][T14629] Bluetooth: hci13: command tx timeout [ 792.506280][T15310] netdevsim netdevsim3 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.787789][T15888] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 795.838854][T15888] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 795.845472][T15888] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 795.920564][T15888] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 795.921653][T15888] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 797.430332][T16347] rxe_eth0 speed is unknown, defaulting to 1000 [ 798.048682][T15888] Bluetooth: hci14: command tx timeout [ 799.583093][T16347] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.583325][T16347] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.583552][T16347] bridge_slave_0: entered allmulticast mode [ 799.617128][T16347] bridge_slave_0: entered promiscuous mode [ 799.620732][T16347] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.620865][T16347] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.621129][T16347] bridge_slave_1: entered allmulticast mode [ 799.625614][T16347] bridge_slave_1: entered promiscuous mode [ 799.774550][T16347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.882299][T16347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.100236][T16347] team0: Port device team_slave_0 added [ 800.110532][T16347] team0: Port device team_slave_1 added [ 800.128600][T15888] Bluetooth: hci14: command tx timeout [ 800.272058][T16347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.272081][T16347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.272112][T16347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.274776][T16347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.274794][T16347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.274827][T16347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.478065][T16347] hsr_slave_0: entered promiscuous mode [ 800.481810][T16347] hsr_slave_1: entered promiscuous mode [ 800.482830][T16347] debugfs: 'hsr0' already exists in 'hsr' [ 800.482855][T16347] Cannot create hsr debugfs directory [ 800.850646][T15888] Bluetooth: hci6: command 0x0406 tx timeout [ 802.207632][T14629] Bluetooth: hci14: command tx timeout [ 804.299787][T14629] Bluetooth: hci14: command tx timeout [ 810.405211][T15888] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 810.487820][T15888] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 810.537751][T15888] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 810.540745][T15888] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 810.543109][T15888] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 811.131594][ T7646] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.131633][ T7646] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.619439][T16382] rxe_eth0 speed is unknown, defaulting to 1000 [ 812.207505][ T38] INFO: task syz-executor:15418 blocked for more than 143 seconds. [ 812.207536][ T38] Not tainted syzkaller #0 [ 812.207550][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.207562][ T38] task:syz-executor state:D stack:22360 pid:15418 tgid:15418 ppid:1 task_flags:0x400140 flags:0x00080002 [ 812.207628][ T38] Call Trace: [ 812.207637][ T38] [ 812.207652][ T38] __schedule+0x16d9/0x5700 [ 812.207701][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 812.207746][ T38] ? __pfx___schedule+0x10/0x10 [ 812.207792][ T38] rt_mutex_schedule+0x76/0xf0 [ 812.207824][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 812.207867][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 812.207898][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 812.207927][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 812.207974][ T38] ? del_device_store+0xd6/0x370 [ 812.208007][ T38] ? del_device_store+0xd6/0x370 [ 812.208042][ T38] mutex_lock_nested+0x168/0x1d0 [ 812.208066][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 812.208096][ T38] del_device_store+0xd6/0x370 [ 812.208122][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 812.208148][ T38] ? __pfx_del_device_store+0x10/0x10 [ 812.208173][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 812.208200][ T38] ? sysfs_kf_write+0x166/0x260 [ 812.208231][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 812.208265][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 812.208295][ T38] vfs_write+0x61e/0xbb0 [ 812.208334][ T38] ? __pfx_vfs_write+0x10/0x10 [ 812.208365][ T38] ? do_sys_openat2+0x14e/0x200 [ 812.208386][ T38] ? kmem_cache_free+0x187/0x6d0 [ 812.208425][ T38] ksys_write+0x156/0x270 [ 812.208457][ T38] ? __pfx_ksys_write+0x10/0x10 [ 812.208498][ T38] do_syscall_64+0x166/0x520 [ 812.208530][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.208553][ T38] ? clear_bhb_loop+0x70/0xc0 [ 812.208599][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.208623][ T38] RIP: 0033:0x7fd7c30eed8e [ 812.208644][ T38] RSP: 002b:00007fffe42a7758 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 812.208667][ T38] RAX: fffff ** replaying previous printk message ** [ 812.208667][ T38] RAX: ffffffffffffffda RBX: 0000555563eca500 RCX: 00007fd7c30eed8e [ 812.208684][ T38] RDX: 0000000000000001 RSI: 00007fffe42a77e0 RDI: 0000000000000005 [ 812.208700][ T38] RBP: 00007fd7c31c637c R08: 0000000000000000 R09: 0000000000000000 [ 812.208715][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.208730][ T38] R13: 00007fffe42a77e0 R14: 00007fffe42a8020 R15: 0000000000000003 [ 812.208771][ T38] [ 812.208870][ T38] [ 812.208870][ T38] Showing all locks held in the system: [ 812.208883][ T38] locks held by rcuc/0/19: 4, last CPU#0: [ 812.208902][ T38] #0: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 812.208973][ T38] #1: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 812.209036][ T38] #2: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 812.209099][ T38] #3: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 812.209158][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 812.209176][ T38] #0: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 812.209278][ T38] locks held by getty/5343: 2, on CPU#1: [ 812.209296][ T38] #0: ffff8880338e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 812.209364][ T38] #1: ffffc900044f32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 812.209428][ T38] locks held by kworker/u8:24/7646: 6, on CPU#0: [ 812.209446][ T38] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 812.209513][ T38] #1: ffffc900067c7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 812.209580][ T38] #2: ffffffff905c8240 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 812.209643][ T38] #3: ffff88801c3b8160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 812.209707][ T38] #4: ffff88805f096310 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 812.209778][ T38] #5: ffffffff8f1c9fb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 812.209850][ T38] locks held by syz-executor/15310: 7, on CPU#1: [ 812.209868][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.209937][ T38] #1: ffff88805a412078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.209997][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.210073][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.210131][ T38] #4: ffff888025c13160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 812.210194][ T38] #5: ffff888026aba310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 812.210268][ T38] #6: ffffffff8f1c9fb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 812.210325][ T38] locks held by syz-executor/15418: 4, on CPU#1: [ 812.210342][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.210409][ T38] #1: ffff88803709f478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.210465][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.210528][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.210587][ T38] locks held by syz-executor/15649: 4, on CPU#1: [ 812.210604][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.210671][ T38] #1: ffff888057981c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.210728][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.210792][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.210851][ T38] locks held by syz-executor/15693: 4, on CPU#0: [ 812.210868][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.210933][ T38] #1: ffff888063b38c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.210990][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.211053][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.211111][ T38] locks held by syz-executor/15789: 4, on CPU#0: [ 812.211128][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.211195][ T38] #1: ffff888063b39878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.211259][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.211322][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.211380][ T38] locks held by syz-executor/15883: 4, on CPU#0: [ 812.211397][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.211464][ T38] #1: ffff88806eaa4478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.211521][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.211584][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.211651][ T38] locks held by syz-executor/15959: 4, on CPU#0: [ 812.211667][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.211729][ T38] #1: ffff88806135f478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.211783][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.211842][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.211894][ T38] locks held by syz-executor/15968: 4, on CPU#0: [ 812.211909][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.211972][ T38] #1: ffff88807f3e2878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.212026][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.212085][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.212140][ T38] locks held by syz-executor/16050: 4, on CPU#0: [ 812.212156][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.212218][ T38] #1: ffff888080468878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.212278][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.212337][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.212392][ T38] locks held by syz-executor/16075: 4, on CPU#0: [ 812.212408][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.212470][ T38] #1: ffff88807b5e4878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.212524][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.212583][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.212638][ T38] locks held by syz-executor/16111: 4, on CPU#0: [ 812.212654][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.212715][ T38] #1: ffff88807d7a3878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.212770][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.212850][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.212909][ T38] locks held by syz-executor/16242: 4, on CPU#0: [ 812.212926][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.212992][ T38] #1: ffff88806a785878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.213049][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.213112][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.213169][ T38] locks held by syz-executor/16255: 4, on CPU#0: [ 812.213186][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.213288][ T38] #1: ffff8880802c5478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.213345][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.213408][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.213468][ T38] locks held by syz-executor/16283: 4, on CPU#0: [ 812.213485][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.213551][ T38] #1: ffff88806bf16c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.213607][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.213679][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.213733][ T38] locks held by syz-executor/16347: 4, on CPU#1: [ 812.213748][ T38] #0: ffff888036580510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 812.213810][ T38] #1: ffff88807c70ec78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 812.213863][ T38] #2: ffff88802aa924b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 812.213922][ T38] #3: ffffffff8fe46db8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 812.213976][ T38] locks held by syz-executor/16382: 4, last CPU#1: [ 812.213992][ T38] #0: ffffffff905c8240 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 812.214046][ T38] #1: ffffffff90320420 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 812.214121][ T38] #2: ffffffff90320660 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 812.214199][ T38] #3: ffff8880274f9208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 812.214267][ T38] [ 812.214274][ T38] ============================================= [ 812.214274][ T38] [ 812.214287][ T38] NMI backtrace for cpu 0 [ 812.214308][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 812.214361][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 812.214387][ T38] Call Trace: [ 812.214404][ T38] [ 812.214423][ T38] dump_stack_lvl+0xe8/0x150 [ 812.214490][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 812.214546][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 812.214601][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 812.214664][ T38] sys_info+0x135/0x170 [ 812.214711][ T38] watchdog+0xfd7/0x1030 [ 812.214772][ T38] ? watchdog+0x1c7/0x1030 [ 812.214812][ T38] kthread+0x38b/0x470 [ 812.214838][ T38] ? __pfx_watchdog+0x10/0x10 [ 812.214869][ T38] ? __pfx_kthread+0x10/0x10 [ 812.214896][ T38] ret_from_fork+0x514/0xb70 [ 812.214931][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 812.214956][ T38] ? __switch_to+0xc89/0x1420 [ 812.214994][ T38] ? __pfx_kthread+0x10/0x10 [ 812.215021][ T38] ret_from_fork_asm+0x1a/0x30 [ 812.215068][ T38] [ 812.215077][ T38] Sending NMI from CPU 0 to CPUs 1: [ 812.215117][ C1] NMI backtrace for cpu 1 [ 812.215133][ C1] CPU: 1 UID: 0 PID: 1015 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 812.215155][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 812.215169][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 812.215200][ C1] RIP: 0010:rcu_is_watching+0x3b/0xb0 [ 812.215219][ C1] Code: e8 0a 5b af 09 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 b7 b7 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 8b 3f 88 00 48 c7 c3 98 ae a7 93 49 03 1e 48 89 [ 812.215236][ C1] RSP: 0018:ffffc90006737378 EFLAGS: 00000246 [ 812.215253][ C1] RAX: 1ffffffff1b6f6fb RBX: 0000000000000001 RCX: 8000000000000001 [ 812.215268][ C1] RDX: ffffc90006737401 RSI: ffffffff8bcc6a60 RDI: ffffffff8bcc6a20 [ 812.215283][ C1] RBP: 1ffffffff22a1c01 R08: ffffc90006737820 R09: 0000000000000000 [ 812.215297][ C1] R10: ffffc900067374f8 R11: fffff52000ce6ea1 R12: ffffc90006730000 [ 812.215312][ C1] R13: ffffffff817801bf R14: ffffffff8db7b7d8 R15: dffffc0000000000 [ 812.215327][ C1] FS: 0000000000000000(0000) GS:ffff888124ab9000(0000) knlGS:0000000000000000 [ 812.215343][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.215357][ C1] CR2: 00007efd7781fe9c CR3: 00000000807be000 CR4: 00000000003526f0 [ 812.215376][ C1] Call Trace: [ 812.215383][ C1] [ 812.215393][ C1] lock_release+0x4b/0x3c0 [ 812.215419][ C1] ? deref_stack_reg+0x18e/0x220 [ 812.215444][ C1] ? unwind_next_frame+0x8f/0x2550 [ 812.215467][ C1] unwind_next_frame+0x1baa/0x2550 [ 812.215494][ C1] ? kasan_save_track+0x3e/0x80 [ 812.215522][ C1] ? unwind_next_frame+0x8f/0x2550 [ 812.215547][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.215573][ C1] arch_stack_walk+0x11b/0x150 [ 812.215599][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 812.215619][ C1] stack_trace_save+0xa9/0x100 [ 812.215643][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 812.215671][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.215697][ C1] ? arch_stack_walk+0x11b/0x150 [ 812.215720][ C1] kasan_save_track+0x3e/0x80 [ 812.215747][ C1] ? kasan_save_track+0x3e/0x80 [ 812.215813][ C1] __kasan_kmalloc+0x93/0xb0 [ 812.215831][ C1] __kmalloc_node_track_caller_noprof+0x56e/0x7b0 [ 812.215863][ C1] ? batadv_skb_head_push+0x169/0x200 [ 812.215889][ C1] ? batadv_skb_head_push+0x169/0x200 [ 812.215921][ C1] pskb_expand_head+0x22c/0x13a0 [ 812.215953][ C1] ? __asan_memcpy+0x40/0x70 [ 812.215978][ C1] ? __skb_clone+0x5c/0x6c0 [ 812.216006][ C1] batadv_skb_head_push+0x169/0x200 [ 812.216036][ C1] batadv_send_skb_packet+0xce/0x650 [ 812.216065][ C1] ? skb_clone+0x246/0x3a0 [ 812.216094][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x590/0x740 [ 812.216127][ C1] ? process_scheduled_works+0x97a/0x1630 [ 812.216153][ C1] process_scheduled_works+0xc3d/0x1630 [ 812.216197][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 812.216237][ C1] ? assign_work+0x3cf/0x5d0 [ 812.216264][ C1] worker_thread+0xa47/0xfb0 [ 812.216295][ C1] ? __kthread_parkme+0x71/0x1f0 [ 812.216325][ C1] kthread+0x38b/0x470 [ 812.216343][ C1] ? __pfx_worker_thread+0x10/0x10 [ 812.216366][ C1] ? __pfx_kthread+0x10/0x10 [ 812.216383][ C1] ret_from_fork+0x514/0xb70 [ 812.216402][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 812.216419][ C1] ? __switch_to+0xc89/0x1420 [ 812.216444][ C1] ? __pfx_kthread+0x10/0x10 [ 812.216462][ C1] ret_from_fork_asm+0x1a/0x30 [ 812.216487][ C1] [ 812.431880][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 812.434497][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 813.870711][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 813.880782][ T38] Call Trace: [ 813.884111][ T38] [ 813.887068][ T38] vpanic+0x56d/0xa60 [ 813.891066][ T38] ? __pfx___schedule+0x10/0x10 [ 813.895940][ T38] ? __pfx_vpanic+0x10/0x10 [ 813.900466][ T38] panic+0xc5/0xd0 [ 813.904208][ T38] ? __pfx_panic+0x10/0x10 [ 813.908658][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 813.914193][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 813.919599][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 813.925777][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 813.931961][ T38] watchdog+0x1030/0x1030 [ 813.936325][ T38] ? watchdog+0x1c7/0x1030 [ 813.940783][ T38] kthread+0x38b/0x470 [ 813.944873][ T38] ? __pfx_watchdog+0x10/0x10 [ 813.949573][ T38] ? __pfx_kthread+0x10/0x10 [ 813.954188][ T38] ret_from_fork+0x514/0xb70 [ 813.958799][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 813.963931][ T38] ? __switch_to+0xc89/0x1420 [ 813.968634][ T38] ? __pfx_kthread+0x10/0x10 [ 813.973245][ T38] ret_from_fork_asm+0x1a/0x30 [ 813.978078][ T38] [ 813.981716][ T38] Kernel Offset: disabled [ 813.986060][ T38] Rebooting in 86400 seconds..