last executing test programs: 197.712683ms ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r4, &(0x7f00000000c0)='./file1\x00') execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 67.315922ms ago: executing program 0: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x24ff, &(0x7f0000000080)={0x0, 0x6fad, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) setuid(0xee01) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0x1000, "d371396d001c11c3facc88a93b3ee7c6669204916b16778dce41e101756ce946"}) io_uring_enter(r5, 0x5c26, 0x0, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18e1000021000043000000a5000000230000009500000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r11}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000340)={0x595, "b4e9961b3c3c9476f5dcf60d0ba02116c09ba0c063b7bfefe9742e55ce11795b"}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r14) msgsnd(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x401, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 0s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="024886dd030327000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. 2024/06/04 00:52:37 fuzzer started 2024/06/04 00:52:38 dialing manager at 10.128.0.169:30026 [ 183.549153][ T5047] cgroup: Unknown subsys name 'net' [ 183.777704][ T5047] cgroup: Unknown subsys name 'rlimit' [ 224.222106][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.229327][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/04 00:53:33 starting 5 executor processes [ 237.657417][ T5051] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 240.067607][ T5071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.094750][ T5071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.108144][ T5071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.161541][ T5071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.174483][ T5071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 240.187426][ T5071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.391160][ T4429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.401345][ T4429] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.423361][ T5078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.441555][ T5078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.455211][ T5078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 240.466054][ T5078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.481965][ T5078] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.493409][ T5078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.559561][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.658884][ T5081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.675055][ T5078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.685483][ T5078] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 240.697432][ T5078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.707114][ T5078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.722587][ T5078] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.739424][ T5078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.769238][ T5078] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 240.783454][ T5078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.880215][ T4429] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.973202][ T4429] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.005636][ T4429] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.041177][ T4429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.072363][ T4429] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.099462][ T4429] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.826908][ T5070] chnl_net:caif_netlink_parms(): no params data found [ 241.972750][ T5075] chnl_net:caif_netlink_parms(): no params data found [ 242.287548][ T4429] Bluetooth: hci0: command tx timeout [ 242.686700][ T4429] Bluetooth: hci1: command tx timeout [ 242.847961][ T4429] Bluetooth: hci2: command tx timeout [ 242.894795][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 242.927802][ T4429] Bluetooth: hci3: command tx timeout [ 243.223989][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.232062][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.240117][ T5075] bridge_slave_0: entered allmulticast mode [ 243.248531][ T4429] Bluetooth: hci4: command tx timeout [ 243.250428][ T5075] bridge_slave_0: entered promiscuous mode [ 243.278791][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 243.302031][ T5083] chnl_net:caif_netlink_parms(): no params data found [ 243.374351][ T5070] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.382355][ T5070] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.390191][ T5070] bridge_slave_0: entered allmulticast mode [ 243.399808][ T5070] bridge_slave_0: entered promiscuous mode [ 243.420067][ T5070] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.428153][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.435882][ T5070] bridge_slave_1: entered allmulticast mode [ 243.445502][ T5070] bridge_slave_1: entered promiscuous mode [ 243.531248][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.539290][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.547226][ T5075] bridge_slave_1: entered allmulticast mode [ 243.556565][ T5075] bridge_slave_1: entered promiscuous mode [ 243.785113][ T5070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.903787][ T5075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.929898][ T5070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.974804][ T5075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.324869][ T5070] team0: Port device team_slave_0 added [ 244.341219][ T5075] team0: Port device team_slave_0 added [ 244.357582][ T5070] team0: Port device team_slave_1 added [ 244.387591][ T4429] Bluetooth: hci0: command tx timeout [ 244.422486][ T5075] team0: Port device team_slave_1 added [ 244.730325][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.737735][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.764324][ T5070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.773641][ T4429] Bluetooth: hci1: command tx timeout [ 244.788893][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.796863][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.804643][ T5080] bridge_slave_0: entered allmulticast mode [ 244.814244][ T5080] bridge_slave_0: entered promiscuous mode [ 244.897589][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.904802][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.929486][ T4429] Bluetooth: hci2: command tx timeout [ 244.932804][ T5070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.972570][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.980520][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.989843][ T5080] bridge_slave_1: entered allmulticast mode [ 244.998711][ T5080] bridge_slave_1: entered promiscuous mode [ 245.006660][ T4429] Bluetooth: hci3: command tx timeout [ 245.046630][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.053853][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.080460][ T5075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.213566][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.221537][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.229610][ T5076] bridge_slave_0: entered allmulticast mode [ 245.239175][ T5076] bridge_slave_0: entered promiscuous mode [ 245.254757][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.262160][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.289230][ T5075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.326536][ T4429] Bluetooth: hci4: command tx timeout [ 245.403942][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.419532][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.430328][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.438209][ T5076] bridge_slave_1: entered allmulticast mode [ 245.447795][ T5076] bridge_slave_1: entered promiscuous mode [ 245.467951][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.551762][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.559832][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.567966][ T5083] bridge_slave_0: entered allmulticast mode [ 245.577173][ T5083] bridge_slave_0: entered promiscuous mode [ 245.754664][ T5070] hsr_slave_0: entered promiscuous mode [ 245.764313][ T5070] hsr_slave_1: entered promiscuous mode [ 245.777454][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.785437][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.793658][ T5083] bridge_slave_1: entered allmulticast mode [ 245.803208][ T5083] bridge_slave_1: entered promiscuous mode [ 245.863668][ T5080] team0: Port device team_slave_0 added [ 245.887861][ T5075] hsr_slave_0: entered promiscuous mode [ 245.898463][ T5075] hsr_slave_1: entered promiscuous mode [ 245.907425][ T5075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.915209][ T5075] Cannot create hsr debugfs directory [ 245.975901][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.994448][ T5080] team0: Port device team_slave_1 added [ 246.011831][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.269683][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.360931][ T5076] team0: Port device team_slave_0 added [ 246.445525][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.446625][ T4429] Bluetooth: hci0: command tx timeout [ 246.461080][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.468411][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.494746][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.514931][ T5076] team0: Port device team_slave_1 added [ 246.625185][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.632552][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.658963][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.761305][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.768853][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.795290][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.828479][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.835680][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.863729][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.869455][ T4429] Bluetooth: hci1: command tx timeout [ 246.902890][ T5083] team0: Port device team_slave_0 added [ 246.996187][ T5083] team0: Port device team_slave_1 added [ 247.007723][ T4429] Bluetooth: hci2: command tx timeout [ 247.117870][ T4429] Bluetooth: hci3: command tx timeout [ 247.218437][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.225625][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.252416][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.366507][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.373693][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.400263][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.411124][ T4429] Bluetooth: hci4: command tx timeout [ 247.461565][ T5080] hsr_slave_0: entered promiscuous mode [ 247.472621][ T5080] hsr_slave_1: entered promiscuous mode [ 247.481500][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.489441][ T5080] Cannot create hsr debugfs directory [ 247.616942][ T5076] hsr_slave_0: entered promiscuous mode [ 247.626186][ T5076] hsr_slave_1: entered promiscuous mode [ 247.635584][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.644378][ T5076] Cannot create hsr debugfs directory [ 248.155520][ T5070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.206167][ T5083] hsr_slave_0: entered promiscuous mode [ 248.215931][ T5083] hsr_slave_1: entered promiscuous mode [ 248.228289][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.236024][ T5083] Cannot create hsr debugfs directory [ 248.259650][ T5070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.374480][ T5070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.479193][ T5070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.579041][ T4429] Bluetooth: hci0: command tx timeout [ 248.744794][ T5075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.862619][ T5075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.899780][ T5075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.936805][ T4429] Bluetooth: hci1: command tx timeout [ 249.014501][ T5075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.086926][ T4429] Bluetooth: hci2: command tx timeout [ 249.168181][ T4429] Bluetooth: hci3: command tx timeout [ 249.268459][ T5080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.313220][ T5080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.409134][ T5076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.433521][ T5080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.472134][ T5080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.490079][ T4429] Bluetooth: hci4: command tx timeout [ 249.534600][ T5076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.675266][ T5076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.762282][ T5076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.312250][ T5083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.359757][ T5083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.403204][ T5070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.443644][ T5083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.556076][ T5083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.629650][ T5070] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.785705][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.793949][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.839085][ T5075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.025518][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.033426][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.131177][ T5075] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.278647][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.286633][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.375934][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.405151][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.413024][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.698143][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.767429][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.906882][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.914663][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.024768][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.123553][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.131354][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.271155][ T5075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.392023][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.399876][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.426614][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.434365][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.041100][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.375297][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.522465][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.530391][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.676842][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.684624][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.232172][ T5070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.938156][ T5075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.265771][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.323290][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.754972][ T5075] veth0_vlan: entered promiscuous mode [ 255.978860][ T5076] veth0_vlan: entered promiscuous mode [ 255.989917][ T5075] veth1_vlan: entered promiscuous mode [ 256.110879][ T5080] veth0_vlan: entered promiscuous mode [ 256.228578][ T5076] veth1_vlan: entered promiscuous mode [ 256.292796][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.334675][ T5080] veth1_vlan: entered promiscuous mode [ 256.597661][ T5075] veth0_macvtap: entered promiscuous mode [ 256.713754][ T5075] veth1_macvtap: entered promiscuous mode [ 256.935424][ T5080] veth0_macvtap: entered promiscuous mode [ 256.964367][ T5076] veth0_macvtap: entered promiscuous mode [ 257.050437][ T5080] veth1_macvtap: entered promiscuous mode [ 257.063681][ T5076] veth1_macvtap: entered promiscuous mode [ 257.085349][ T5083] veth0_vlan: entered promiscuous mode [ 257.144172][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.254428][ T5083] veth1_vlan: entered promiscuous mode [ 257.314237][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.373680][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.386027][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.402075][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.436748][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.447528][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.457815][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.468589][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.484263][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.538872][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.549751][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.565373][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.635295][ T5076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.646038][ T5076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.657008][ T5076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.666057][ T5076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.747099][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.758062][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.768294][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.779076][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.794726][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.847213][ T5075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.857812][ T5075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.867034][ T5075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.876118][ T5075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.916001][ T5080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.929369][ T5080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.940524][ T5080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.951534][ T5080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.083286][ T5070] veth0_vlan: entered promiscuous mode [ 258.138152][ T5083] veth0_macvtap: entered promiscuous mode [ 258.235836][ T5070] veth1_vlan: entered promiscuous mode [ 258.281216][ T5083] veth1_macvtap: entered promiscuous mode [ 258.566078][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.579285][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.589545][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.600337][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.614979][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.626916][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.642636][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.750229][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.764492][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.775664][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.789607][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.799820][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.810620][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.826638][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.989144][ T5070] veth0_macvtap: entered promiscuous mode [ 259.091156][ T5083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.100414][ T5083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.109675][ T5083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.118902][ T5083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.152940][ T5070] veth1_macvtap: entered promiscuous mode [ 259.373889][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.384733][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.395028][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.405887][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.420122][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.433315][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.443559][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.454445][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.473142][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.645333][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.657386][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.668549][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.679376][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.689524][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.700377][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.710544][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.721446][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.737450][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.897384][ T5070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.906669][ T5070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.915720][ T5070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.925020][ T5070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.246129][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.256743][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.591274][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.600021][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.735883][ T4603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.745404][ T4603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.846626][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.854613][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.004795][ T2867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.015435][ T2867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.038107][ T5128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.046213][ T5128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.168786][ T5255] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 267.200067][ T5254] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 267.236932][ T5255] ===================================================== [ 267.246761][ T5255] BUG: KMSAN: uninit-value in io_req_cqe_overflow+0x193/0x1c0 [ 267.254536][ T5255] io_req_cqe_overflow+0x193/0x1c0 [ 267.264082][ T5255] __io_submit_flush_completions+0x7eb/0x1be0 [ 267.271210][ T5255] ctx_flush_and_put+0x16c/0x360 [ 267.276666][ T5255] io_handle_tw_list+0x58b/0x5c0 [ 267.281884][ T5255] tctx_task_work_run+0xf8/0x3d0 2024/06/04 00:54:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 267.287296][ T5255] tctx_task_work+0x6d/0xc0 [ 267.292519][ T5255] task_work_run+0x268/0x310 [ 267.297693][ T5255] get_signal+0x143/0x2d00 [ 267.302344][ T5255] arch_do_signal_or_restart+0x53/0xcb0 [ 267.308340][ T5255] syscall_exit_to_user_mode+0x5d/0x160 [ 267.314219][ T5255] __do_fast_syscall_32+0xc4/0x120 [ 267.319794][ T5255] do_fast_syscall_32+0x38/0x80 [ 267.324913][ T5255] do_SYSENTER_32+0x1f/0x30 [ 267.330068][ T5255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.338701][ T5255] [ 267.343315][ T5255] Uninit was stored to memory at: [ 267.349555][ T5255] io_recv_finish+0xf10/0x1560 [ 267.354547][ T5255] io_recv+0x12ec/0x1ea0 [ 267.359308][ T5255] io_issue_sqe+0x429/0x22c0 [ 267.364196][ T5255] io_poll_issue+0x32/0x40 [ 267.369056][ T5255] io_poll_task_func+0x5f9/0x14d0 [ 267.374310][ T5255] io_handle_tw_list+0x23a/0x5c0 [ 267.379713][ T5255] tctx_task_work_run+0xf8/0x3d0 [ 267.384926][ T5255] tctx_task_work+0x6d/0xc0 [ 267.390829][ T5255] task_work_run+0x268/0x310 [ 267.395776][ T5255] get_signal+0x143/0x2d00 [ 267.400588][ T5255] arch_do_signal_or_restart+0x53/0xcb0 [ 267.406579][ T5255] syscall_exit_to_user_mode+0x5d/0x160 [ 267.412382][ T5255] __do_fast_syscall_32+0xc4/0x120 [ 267.418045][ T5255] do_fast_syscall_32+0x38/0x80 [ 267.423153][ T5255] do_SYSENTER_32+0x1f/0x30 [ 267.428062][ T5255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.434776][ T5255] [ 267.437391][ T5255] Uninit was created at: [ 267.441899][ T5255] __kmalloc+0x6e4/0x1060 [ 267.448747][ T5255] io_alloc_async_data+0xc0/0x220 [ 267.454079][ T5255] io_recvmsg_prep+0xbe8/0x1a20 [ 267.459987][ T5255] io_submit_sqes+0x1135/0x2f10 [ 267.465002][ T5255] __se_sys_io_uring_enter+0x40f/0x3c80 [ 267.465133][ T5255] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 267.465264][ T5255] ia32_sys_call+0x2c0/0x40a0 [ 267.481760][ T5255] __do_fast_syscall_32+0xb4/0x120 [ 267.487322][ T5255] do_fast_syscall_32+0x38/0x80 [ 267.492416][ T5255] do_SYSENTER_32+0x1f/0x30 [ 267.497359][ T5255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.503980][ T5255] [ 267.506550][ T5255] CPU: 0 PID: 5255 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 267.517005][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 267.527403][ T5255] ===================================================== [ 267.528238][ T2867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.534406][ T5255] Disabling lock debugging due to kernel taint [ 267.534465][ T5255] Kernel panic - not syncing: kmsan.panic set ... [ 267.534518][ T5255] CPU: 0 PID: 5255 Comm: syz-executor.0 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 267.534653][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 267.534727][ T5255] Call Trace: [ 267.534774][ T5255] [ 267.534815][ T5255] dump_stack_lvl+0x216/0x2d0 [ 267.535006][ T5255] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 267.535167][ T5255] dump_stack+0x1e/0x30 [ 267.535342][ T5255] panic+0x4e2/0xcd0 [ 267.535514][ T5255] ? kmsan_get_metadata+0xf1/0x1d0 [ 267.535672][ T5255] kmsan_report+0x2d5/0x2e0 [ 267.535818][ T5255] ? __msan_warning+0x95/0x120 [ 267.535933][ T5255] ? io_req_cqe_overflow+0x193/0x1c0 [ 267.536136][ T5255] ? __io_submit_flush_completions+0x7eb/0x1be0 [ 267.536342][ T5255] ? ctx_flush_and_put+0x16c/0x360 [ 267.536519][ T5255] ? io_handle_tw_list+0x58b/0x5c0 [ 267.536696][ T5255] ? tctx_task_work_run+0xf8/0x3d0 [ 267.536873][ T5255] ? tctx_task_work+0x6d/0xc0 [ 267.537051][ T5255] ? task_work_run+0x268/0x310 [ 267.537223][ T5255] ? get_signal+0x143/0x2d00 [ 267.537360][ T5255] ? arch_do_signal_or_restart+0x53/0xcb0 [ 267.537560][ T5255] ? syscall_exit_to_user_mode+0x5d/0x160 [ 267.537723][ T5255] ? __do_fast_syscall_32+0xc4/0x120 [ 267.537897][ T5255] ? do_fast_syscall_32+0x38/0x80 [ 267.538071][ T5255] ? do_SYSENTER_32+0x1f/0x30 [ 267.538237][ T5255] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.538440][ T5255] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 267.538593][ T5255] ? io_recv+0x19e8/0x1ea0 [ 267.538733][ T5255] ? kmsan_get_metadata+0x146/0x1d0 [ 267.538873][ T5255] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 267.539083][ T5255] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 267.539278][ T5255] ? kmsan_get_metadata+0x146/0x1d0 [ 267.539415][ T5255] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 267.539564][ T5255] __msan_warning+0x95/0x120 [ 267.539682][ T5255] io_req_cqe_overflow+0x193/0x1c0 [ 267.539893][ T5255] __io_submit_flush_completions+0x7eb/0x1be0 [ 267.540148][ T5255] ctx_flush_and_put+0x16c/0x360 [ 267.540338][ T5255] io_handle_tw_list+0x58b/0x5c0 [ 267.540536][ T5255] tctx_task_work_run+0xf8/0x3d0 [ 267.540717][ T5255] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 267.540865][ T5255] ? __pfx_tctx_task_work+0x10/0x10 [ 267.541052][ T5255] tctx_task_work+0x6d/0xc0 [ 267.541230][ T5255] task_work_run+0x268/0x310 [ 267.541419][ T5255] get_signal+0x143/0x2d00 [ 267.541561][ T5255] ? filter_irq_stacks+0x164/0x1a0 [ 267.541755][ T5255] ? stack_depot_save_flags+0x2c/0x6e0 [ 267.541895][ T5255] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 267.542108][ T5255] ? arch_do_signal_or_restart+0x43/0xcb0 [ 267.542299][ T5255] ? syscall_exit_to_user_mode+0x5d/0x160 [ 267.815612][ T5255] arch_do_signal_or_restart+0x53/0xcb0 [ 267.821492][ T5255] ? __ia32_sys_futex_time32+0x11d/0x1a0 [ 267.827440][ T5255] syscall_exit_to_user_mode+0x5d/0x160 [ 267.833261][ T5255] __do_fast_syscall_32+0xc4/0x120 [ 267.838648][ T5255] ? switch_fpu_return+0x17/0x20 [ 267.843862][ T5255] do_fast_syscall_32+0x38/0x80 [ 267.849032][ T5255] do_SYSENTER_32+0x1f/0x30 [ 267.853802][ T5255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.860443][ T5255] RIP: 0023:0xf73b9579 [ 267.864688][ T5255] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.884549][ T5255] RSP: 002b:00000000f5e4265c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 267.893223][ T5255] RAX: fffffffffffffe00 RBX: 00000000f73defc8 RCX: 0000000000000080 [ 267.901419][ T5255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73defcc [ 267.909582][ T5255] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 267.917748][ T5255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.926000][ T5255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.934200][ T5255] [ 267.937730][ T5255] Kernel Offset: disabled [ 267.942159][ T5255] Rebooting in 86400 seconds..