last executing test programs: 6.58295235s ago: executing program 0 (id=1): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000004c0)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000019600)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x1, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x9, 0x0, 0x4000, 0x0, 0xee00, 0xee00, 0xd31, 0x1}}, {0x0, 0xa}}}, 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000400)=0x5) r3 = socket(0x2b, 0x80801, 0x1) listen(r3, 0x4) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r6, &(0x7f00000005c0)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f00000195c0)=0x7) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80002, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000100)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/221, 0xdd}, 0x0, 0x57}}], 0x30, 0xab85d5c0d4fddf40}, 0x0) 4.594395286s ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 3.999282067s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.752815253s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x5, 0x800, 0x0, 0x0, 0x93000010) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0xa, 0x0) ioctl$FIBMAP(r0, 0x2284, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) write(0xffffffffffffffff, &(0x7f0000008b80)='0', 0x1) socket$inet(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) 3.752689043s ago: executing program 2 (id=3): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x40003) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004809c) gettid() io_uring_setup(0x31e1, &(0x7f0000019800)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') pread64(r4, &(0x7f0000000040)=""/154, 0x9a, 0x4) 2.184220595s ago: executing program 2 (id=7): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000740)={0x11, 0x5, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) mmap(&(0x7f00000db000/0x3000)=nil, 0x3000, 0x1000008, 0x204031, 0xffffffffffffffff, 0x1bf5f000) setns(0xc9, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.164325717s ago: executing program 1 (id=2): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, 0x0, 0x0) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x28}, 0x0) setregid(0xffffffffffffffff, 0x0) listen(r1, 0x0) 1.920864982s ago: executing program 3 (id=8): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000cc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x10106, 0x2, 0x0) r2 = timerfd_create(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 985.267739ms ago: executing program 1 (id=9): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./config/usb_gadget/g1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing\x00', 0x1ff) 924.440215ms ago: executing program 1 (id=10): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88b15, 0x1, 0x0, 0x8000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fe3, 0x1000, 0x1, 0x368}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40006253, 0x4000, 0x0, 0x37d}}], 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a00010026bd7000ffd9df"], 0x14}, 0x1, 0x0, 0x0, 0x44891}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a80), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f00000008c0), 0xfffffffffffffffe, 0x22200) request_key(&(0x7f0000000b80)='asymmetric\x00', &(0x7f0000000bc0)={'syz', 0x2}, &(0x7f0000000c00)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d400000028000103a5bd7002fadbd72503"], 0xd4}}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r5) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="25010200"], 0x14}}, 0x2000000) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB='?6h', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf250100000008000200020000000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) 0s ago: executing program 1 (id=11): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000005c0)='./trace\x00', 0x246081, 0x0) syz_io_uring_setup(0x4175, &(0x7f0000000100)={0x0, 0x136f, 0x10000, 0x3, 0x2d0}, 0x0, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) fcntl$setown(r0, 0x8, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x56, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @period={0x5d, 0x5, 0xc, 0x7, 0x7ff, {0x0, 0x6, 0x4, 0x7ff}, 0x0, 0x0}}) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000280)="e2", 0xff0f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 78.857672][ T5779] cgroup: Unknown subsys name 'net' [ 78.990144][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.538433][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.206094][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.214809][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.222691][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.231168][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.249455][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.257751][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.264845][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.273234][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.281175][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.288860][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.296197][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.343349][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.343367][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.358424][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.367310][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.374531][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.375870][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.383377][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.395838][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.398096][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.410801][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.417963][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.429739][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.439195][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.487801][ T5792] (null): rxe_set_mtu: Set mtu to 1024 [ 82.499802][ T5791] (null): rxe_set_mtu: Set mtu to 1024 [ 82.514230][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.526702][ T5794] (null): rxe_set_mtu: Set mtu to 1024 [ 82.533385][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.537292][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.549433][ T5793] (null): rxe_set_mtu: Set mtu to 1024 [ 82.558867][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.568007][ T5793] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.576655][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.876249][ T5792] infiniband rxe0: set active [ 82.882543][ T5792] infiniband rxe0: added rxe_eth0 [ 82.907655][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.951698][ T5792] RDS/IB: rxe0: added [ 82.964164][ T5792] smc: adding ib device rxe0 with port count 1 [ 82.970443][ T5792] smc: ib device rxe0 port 1 has pnetid [ 83.008798][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.046322][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.148418][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 83.219482][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 83.237402][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 83.418623][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.431308][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.542019][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.549851][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.557606][ T5793] bridge_slave_0: entered allmulticast mode [ 83.567925][ T5793] bridge_slave_0: entered promiscuous mode [ 83.577822][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.587970][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.595631][ T5793] bridge_slave_1: entered allmulticast mode [ 83.606200][ T5793] bridge_slave_1: entered promiscuous mode [ 83.614099][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.621312][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.631797][ T5791] bridge_slave_0: entered allmulticast mode [ 83.639310][ T5791] bridge_slave_0: entered promiscuous mode [ 83.677227][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.684820][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.692033][ T5791] bridge_slave_1: entered allmulticast mode [ 83.699118][ T5791] bridge_slave_1: entered promiscuous mode [ 83.705916][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.798420][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.817474][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.830005][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.841593][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.849289][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.856839][ T5794] bridge_slave_0: entered allmulticast mode [ 83.866178][ T5794] bridge_slave_0: entered promiscuous mode [ 83.880816][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.900680][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.917192][ T5794] bridge_slave_1: entered allmulticast mode [ 83.926133][ T5794] bridge_slave_1: entered promiscuous mode [ 83.935603][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.012267][ T5793] team0: Port device team_slave_0 added [ 84.021512][ T5791] team0: Port device team_slave_0 added [ 84.034140][ T5791] team0: Port device team_slave_1 added [ 84.071677][ T5793] team0: Port device team_slave_1 added [ 84.093968][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.115473][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.131076][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.138354][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.164653][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.179342][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.186439][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.212717][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.225583][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.232688][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.262426][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.279795][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.290965][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.298476][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.325307][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.343053][ T5804] Bluetooth: hci0: command tx timeout [ 84.406776][ T5794] team0: Port device team_slave_0 added [ 84.454614][ T5794] team0: Port device team_slave_1 added [ 84.493624][ T5791] hsr_slave_0: entered promiscuous mode [ 84.500665][ T5791] hsr_slave_1: entered promiscuous mode [ 84.506893][ T5804] Bluetooth: hci1: command tx timeout [ 84.512812][ T5101] Bluetooth: hci3: command tx timeout [ 84.518873][ T5101] Bluetooth: hci2: command tx timeout [ 84.559240][ T5793] hsr_slave_0: entered promiscuous mode [ 84.568816][ T5793] hsr_slave_1: entered promiscuous mode [ 84.576099][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.587589][ T5793] Cannot create hsr debugfs directory [ 84.626342][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.634157][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.664107][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.718124][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.728157][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.757356][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.979814][ T5794] hsr_slave_0: entered promiscuous mode [ 84.986657][ T5794] hsr_slave_1: entered promiscuous mode [ 84.996983][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.004759][ T5794] Cannot create hsr debugfs directory [ 85.199425][ T5450] infiniband rxe0: set active [ 85.230791][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.374166][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.397739][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.408539][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 85.457952][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.468616][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.551234][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.561524][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.568783][ T5792] bridge_slave_0: entered allmulticast mode [ 85.579701][ T5792] bridge_slave_0: entered promiscuous mode [ 85.588760][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.597941][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.605318][ T5792] bridge_slave_1: entered allmulticast mode [ 85.612848][ T5792] bridge_slave_1: entered promiscuous mode [ 85.627290][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.661389][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.673851][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.683253][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.724056][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.751039][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.778634][ T5792] team0: Port device team_slave_0 added [ 85.790491][ T5792] team0: Port device team_slave_1 added [ 85.821759][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.833859][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.849702][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.856959][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.883514][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.896098][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.906307][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.935897][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.947736][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.975062][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.022160][ T5792] hsr_slave_0: entered promiscuous mode [ 86.029115][ T5792] hsr_slave_1: entered promiscuous mode [ 86.035736][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.043594][ T5792] Cannot create hsr debugfs directory [ 86.262186][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.339112][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.349475][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.365673][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.384054][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.391272][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.400286][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.414392][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.426349][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.433182][ T5101] Bluetooth: hci0: command tx timeout [ 86.449566][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.456733][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.512086][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.532081][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.559234][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.566414][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.587078][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.595280][ T5101] Bluetooth: hci2: command tx timeout [ 86.600709][ T5101] Bluetooth: hci1: command tx timeout [ 86.608018][ T5804] Bluetooth: hci3: command tx timeout [ 86.620611][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.627890][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.667919][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.675107][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.707828][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.715053][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.814510][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.831402][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.918033][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.952337][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.970367][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.977624][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.023456][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.030616][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.250855][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.391376][ T5793] veth0_vlan: entered promiscuous mode [ 87.450157][ T5793] veth1_vlan: entered promiscuous mode [ 87.581577][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.617499][ T5793] veth0_macvtap: entered promiscuous mode [ 87.650332][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.666578][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.680392][ T5793] veth1_macvtap: entered promiscuous mode [ 87.768608][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.781363][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.829024][ T5791] veth0_vlan: entered promiscuous mode [ 87.865016][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.874988][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.883774][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.892970][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.921394][ T5791] veth1_vlan: entered promiscuous mode [ 87.976310][ T5791] veth0_macvtap: entered promiscuous mode [ 87.993616][ T5794] veth0_vlan: entered promiscuous mode [ 88.008689][ T5792] veth0_vlan: entered promiscuous mode [ 88.020514][ T5791] veth1_macvtap: entered promiscuous mode [ 88.055939][ T5792] veth1_vlan: entered promiscuous mode [ 88.076225][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.087510][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.099109][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.115866][ T5794] veth1_vlan: entered promiscuous mode [ 88.165158][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.181006][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.193757][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.203269][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.215876][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.241561][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.254904][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.266736][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.278091][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.311579][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.323828][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.363669][ T5792] veth0_macvtap: entered promiscuous mode [ 88.390739][ T5794] veth0_macvtap: entered promiscuous mode [ 88.408225][ T5792] veth1_macvtap: entered promiscuous mode [ 88.436672][ T5793] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.461563][ T5794] veth1_macvtap: entered promiscuous mode [ 88.497314][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.511083][ T5101] Bluetooth: hci0: command tx timeout [ 88.519977][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.531053][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.541799][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.556298][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.567157][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.578812][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.589492][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.601953][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.613955][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.648094][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.660657][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.669787][ T5101] Bluetooth: hci1: command tx timeout [ 88.669830][ T5101] Bluetooth: hci3: command tx timeout [ 88.669861][ T5101] Bluetooth: hci2: command tx timeout [ 88.690984][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.700034][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.716813][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.512980][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.524123][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.534684][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.544734][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.555532][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.567143][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.582881][ T5101] Bluetooth: hci0: command tx timeout [ 90.629975][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.645152][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.656148][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.666808][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.680670][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.691244][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.707009][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.743905][ T5101] Bluetooth: hci2: command tx timeout [ 90.749432][ T5101] Bluetooth: hci3: command tx timeout [ 90.750914][ T5798] Bluetooth: hci1: command tx timeout [ 90.776603][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.778580][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.784850][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.801116][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.810025][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.818983][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.924664][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.937595][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.998984][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.032574][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.052852][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.060715][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.156488][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.170382][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.248700][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.301085][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.946328][ T27] cfg80211: failed to load regulatory.db [ 93.013840][ T5903] sd 0:0:1:0: device reset [ 96.125082][ T5927] ------------[ cut here ]------------ [ 96.130790][ T5927] failed to allocate ring buffer on CPU 1 [ 96.168523][ T5927] WARNING: CPU: 1 PID: 5927 at kernel/trace/ring_buffer.c:5860 trace_rb_cpu_prepare+0x2fa/0x330 [ 96.179364][ T5927] Modules linked in: [ 96.184003][ T5927] CPU: 1 PID: 5927 Comm: syz.0.5 Not tainted syzkaller #0 [ 96.191168][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.201364][ T5927] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 [ 96.207495][ T5927] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 00 fd ff 48 c7 c7 a0 f5 ee 8a 89 de e8 d6 a4 c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 18 00 fd ff e9 32 ff ff ff e8 0e 00 [ 96.227354][ T5927] RSP: 0018:ffffc90004c17ab8 EFLAGS: 00010246 [ 96.233540][ T5927] RAX: 1874f08cd620ba00 RBX: 0000000000000001 RCX: 0000000000080000 [ 96.241553][ T5927] RDX: ffffc9000bfd1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 96.250826][ T5927] RBP: 0000000000000001 R08: ffffc90004c176c7 R09: 1ffff92000982ed8 [ 96.259243][ T5927] R10: dffffc0000000000 R11: fffff52000982ed9 R12: 0000000000000000 [ 96.267559][ T5927] R13: ffff88801c681788 R14: ffff88802f733810 R15: ffff88802f7338b0 [ 96.275644][ T5927] FS: 00007fb76569b6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 96.284696][ T5927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.291322][ T5927] CR2: 0000563747aa7568 CR3: 00000000778b1000 CR4: 00000000003506e0 [ 96.299382][ T5927] Call Trace: [ 96.302762][ T5927] [ 96.305736][ T5927] ? rb_get_reader_page+0xd90/0xd90 [ 96.311007][ T5927] cpuhp_invoke_callback+0x481/0x7e0 [ 96.316419][ T5927] ? rb_get_reader_page+0xd90/0xd90 [ 96.321668][ T5927] ? mutex_lock_nested+0x20/0x20 [ 96.326928][ T5927] cpuhp_issue_call+0x3ed/0x740 [ 96.331845][ T5927] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 96.338614][ T5927] __cpuhp_state_add_instance+0x25/0x40 [ 96.344679][ T5927] __ring_buffer_alloc+0x30e/0x550 [ 96.349846][ T5927] allocate_trace_buffers+0x70/0x290 [ 96.356441][ T5927] ? __raw_spin_lock_init+0x45/0x100 [ 96.361789][ T5927] trace_array_create_systems+0x311/0xc70 [ 96.367767][ T5927] instance_mkdir+0xd1/0x130 [ 96.372486][ T5927] tracefs_syscall_mkdir+0x128/0x1a0 [ 96.377842][ T5927] vfs_mkdir+0x2a5/0x470 [ 96.382153][ T5927] do_mkdirat+0x1dc/0x450 [ 96.386604][ T5927] ? vfs_mkdir+0x470/0x470 [ 96.391082][ T5927] __x64_sys_mkdirat+0x89/0xa0 [ 96.395972][ T5927] do_syscall_64+0x55/0xb0 [ 96.400479][ T5927] ? clear_bhb_loop+0x40/0x90 [ 96.405283][ T5927] ? clear_bhb_loop+0x40/0x90 [ 96.410030][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.416033][ T5927] RIP: 0033:0x7fb76479f559 [ 96.420515][ T5927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.441218][ T5927] RSP: 002b:00007fb76569b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 96.449772][ T5927] RAX: ffffffffffffffda RBX: 00007fb764a25fa0 RCX: 00007fb76479f559 [ 96.459017][ T5927] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 96.467299][ T5927] RBP: 00007fb764836b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.475436][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.483502][ T5927] R13: 00007fb764a26038 R14: 00007fb764a25fa0 R15: 00007ffe699e0548 [ 96.491543][ T5927] [ 96.494689][ T5927] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.501986][ T5927] CPU: 1 PID: 5927 Comm: syz.0.5 Not tainted syzkaller #0 [ 96.509132][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.519212][ T5927] Call Trace: [ 96.522514][ T5927] [ 96.525466][ T5927] dump_stack_lvl+0x18c/0x250 [ 96.530165][ T5927] ? show_regs_print_info+0x20/0x20 [ 96.535382][ T5927] ? load_image+0x420/0x420 [ 96.539911][ T5927] panic+0x2ca/0x720 [ 96.543829][ T5927] ? bpf_jit_dump+0xd0/0xd0 [ 96.548354][ T5927] __warn+0x2e0/0x470 [ 96.552352][ T5927] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 96.557788][ T5927] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 96.563193][ T5927] report_bug+0x2be/0x4f0 [ 96.567567][ T5927] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 96.572960][ T5927] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 96.578363][ T5927] ? trace_rb_cpu_prepare+0x2fc/0x330 [ 96.583794][ T5927] handle_bug+0xcf/0x120 [ 96.588055][ T5927] exc_invalid_op+0x1a/0x50 [ 96.592583][ T5927] asm_exc_invalid_op+0x1a/0x20 [ 96.597468][ T5927] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 [ 96.603468][ T5927] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 00 fd ff 48 c7 c7 a0 f5 ee 8a 89 de e8 d6 a4 c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 18 00 fd ff e9 32 ff ff ff e8 0e 00 [ 96.623099][ T5927] RSP: 0018:ffffc90004c17ab8 EFLAGS: 00010246 [ 96.629187][ T5927] RAX: 1874f08cd620ba00 RBX: 0000000000000001 RCX: 0000000000080000 [ 96.637172][ T5927] RDX: ffffc9000bfd1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 96.645158][ T5927] RBP: 0000000000000001 R08: ffffc90004c176c7 R09: 1ffff92000982ed8 [ 96.653160][ T5927] R10: dffffc0000000000 R11: fffff52000982ed9 R12: 0000000000000000 [ 96.661168][ T5927] R13: ffff88801c681788 R14: ffff88802f733810 R15: ffff88802f7338b0 [ 96.669173][ T5927] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 96.674571][ T5927] ? rb_get_reader_page+0xd90/0xd90 [ 96.679794][ T5927] cpuhp_invoke_callback+0x481/0x7e0 [ 96.685103][ T5927] ? rb_get_reader_page+0xd90/0xd90 [ 96.690314][ T5927] ? mutex_lock_nested+0x20/0x20 [ 96.695280][ T5927] cpuhp_issue_call+0x3ed/0x740 [ 96.700161][ T5927] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 96.706881][ T5927] __cpuhp_state_add_instance+0x25/0x40 [ 96.712891][ T5927] __ring_buffer_alloc+0x30e/0x550 [ 96.718035][ T5927] allocate_trace_buffers+0x70/0x290 [ 96.723371][ T5927] ? __raw_spin_lock_init+0x45/0x100 [ 96.728686][ T5927] trace_array_create_systems+0x311/0xc70 [ 96.734452][ T5927] instance_mkdir+0xd1/0x130 [ 96.739104][ T5927] tracefs_syscall_mkdir+0x128/0x1a0 [ 96.744413][ T5927] vfs_mkdir+0x2a5/0x470 [ 96.748689][ T5927] do_mkdirat+0x1dc/0x450 [ 96.753062][ T5927] ? vfs_mkdir+0x470/0x470 [ 96.757511][ T5927] __x64_sys_mkdirat+0x89/0xa0 [ 96.762309][ T5927] do_syscall_64+0x55/0xb0 [ 96.766765][ T5927] ? clear_bhb_loop+0x40/0x90 [ 96.771512][ T5927] ? clear_bhb_loop+0x40/0x90 [ 96.776246][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.782172][ T5927] RIP: 0033:0x7fb76479f559 [ 96.786617][ T5927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.806244][ T5927] RSP: 002b:00007fb76569b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 96.814687][ T5927] RAX: ffffffffffffffda RBX: 00007fb764a25fa0 RCX: 00007fb76479f559 [ 96.822682][ T5927] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 96.830680][ T5927] RBP: 00007fb764836b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.838666][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.846670][ T5927] R13: 00007fb764a26038 R14: 00007fb764a25fa0 R15: 00007ffe699e0548 [ 96.854685][ T5927] [ 96.857853][ T5927] Kernel Offset: disabled [ 96.862256][ T5927] Rebooting in 86400 seconds..