Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. 2026/01/20 05:42:41 parsed 1 programs [ 99.586569][ T30] audit: type=1400 audit(1768887761.298:62): avc: denied { node_bind } for pid=5825 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 101.384580][ T30] audit: type=1400 audit(1768887763.098:63): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 101.407765][ T30] audit: type=1400 audit(1768887763.118:64): avc: denied { mount } for pid=5836 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.409918][ T5836] cgroup: Unknown subsys name 'net' [ 101.437643][ T30] audit: type=1400 audit(1768887763.148:65): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.615165][ T5836] cgroup: Unknown subsys name 'cpuset' [ 101.623304][ T5836] cgroup: Unknown subsys name 'rlimit' [ 101.812628][ T30] audit: type=1400 audit(1768887763.518:66): avc: denied { setattr } for pid=5836 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.855907][ T30] audit: type=1400 audit(1768887763.528:67): avc: denied { create } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.876602][ T30] audit: type=1400 audit(1768887763.528:68): avc: denied { write } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.897238][ T30] audit: type=1400 audit(1768887763.528:69): avc: denied { read } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.917600][ T30] audit: type=1400 audit(1768887763.528:70): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 101.922247][ T5842] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 101.942614][ T30] audit: type=1400 audit(1768887763.528:71): avc: denied { mount } for pid=5836 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 102.885099][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.622022][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 104.622035][ T30] audit: type=1400 audit(1768887766.328:80): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/root/syzkaller.FfA7WG/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 104.652298][ T30] audit: type=1400 audit(1768887766.348:81): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.674242][ T30] audit: type=1400 audit(1768887766.348:82): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/root/syzkaller.FfA7WG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.699368][ T30] audit: type=1400 audit(1768887766.358:83): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 104.721143][ T30] audit: type=1400 audit(1768887766.358:84): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/root/syzkaller.FfA7WG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 104.747679][ T30] audit: type=1400 audit(1768887766.358:85): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/root/syzkaller.FfA7WG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 104.780624][ T30] audit: type=1400 audit(1768887766.418:86): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.800263][ T30] audit: type=1400 audit(1768887766.438:87): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 104.858821][ T30] audit: type=1400 audit(1768887766.458:88): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="gadgetfs" ino=5413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 104.859801][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.881246][ T30] audit: type=1400 audit(1768887766.458:89): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.363889][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.371928][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.467310][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.490230][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.725674][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.743831][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.752255][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.760665][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.769507][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.024442][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 106.527659][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.535081][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.542138][ T5874] bridge_slave_0: entered allmulticast mode [ 106.549060][ T5874] bridge_slave_0: entered promiscuous mode [ 106.569306][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.577015][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.584267][ T5874] bridge_slave_1: entered allmulticast mode [ 106.590825][ T5874] bridge_slave_1: entered promiscuous mode [ 106.649314][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.694607][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.832536][ T5874] team0: Port device team_slave_0 added [ 106.878755][ T5874] team0: Port device team_slave_1 added [ 107.002650][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.032893][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.059863][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.082978][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.091283][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.117408][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.198533][ T5874] hsr_slave_0: entered promiscuous mode [ 107.224199][ T5874] hsr_slave_1: entered promiscuous mode [ 107.649948][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.660307][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.671692][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.680617][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.757557][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.788689][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.806373][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.813529][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.824572][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.831658][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.948734][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.979860][ T5874] veth0_vlan: entered promiscuous mode [ 107.988777][ T5874] veth1_vlan: entered promiscuous mode [ 108.007569][ T5874] veth0_macvtap: entered promiscuous mode [ 108.015936][ T5874] veth1_macvtap: entered promiscuous mode [ 108.028920][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.041113][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.055310][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.065157][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.074696][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.086050][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/20 05:42:49 executed programs: 0 [ 108.194707][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.205395][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.215129][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.226930][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.235218][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.253452][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.260840][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.273830][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.305555][ T5889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.313247][ T5889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.323799][ T5889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.331366][ T5889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.332758][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.338917][ T5889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.347646][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.353382][ T5889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.366767][ T5889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.374586][ T5955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.382439][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.390703][ T5955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.404338][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.412839][ T5955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.420109][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.422031][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.427806][ T5957] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.446228][ T5950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.565887][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.632174][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.683707][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.928666][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 108.979175][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 109.087858][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 109.162866][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 109.211293][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.219555][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.227549][ T5946] bridge_slave_0: entered allmulticast mode [ 109.234186][ T5946] bridge_slave_0: entered promiscuous mode [ 109.241704][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.248853][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.256333][ T5948] bridge_slave_0: entered allmulticast mode [ 109.263011][ T5948] bridge_slave_0: entered promiscuous mode [ 109.272924][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.280105][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.287234][ T5948] bridge_slave_1: entered allmulticast mode [ 109.294037][ T5948] bridge_slave_1: entered promiscuous mode [ 109.313781][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.320852][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.328092][ T5946] bridge_slave_1: entered allmulticast mode [ 109.334745][ T5946] bridge_slave_1: entered promiscuous mode [ 109.348072][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 109.409893][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.426558][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.436146][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.445645][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.453264][ T5951] bridge_slave_0: entered allmulticast mode [ 109.459847][ T5951] bridge_slave_0: entered promiscuous mode [ 109.470926][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.488423][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.508118][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.515417][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.522533][ T5951] bridge_slave_1: entered allmulticast mode [ 109.529495][ T5951] bridge_slave_1: entered promiscuous mode [ 109.588593][ T5948] team0: Port device team_slave_0 added [ 109.601229][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.608440][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.616115][ T5942] bridge_slave_0: entered allmulticast mode [ 109.622670][ T5942] bridge_slave_0: entered promiscuous mode [ 109.630444][ T5946] team0: Port device team_slave_0 added [ 109.644529][ T5948] team0: Port device team_slave_1 added [ 109.651730][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.661328][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.668575][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.676069][ T5942] bridge_slave_1: entered allmulticast mode [ 109.682623][ T5942] bridge_slave_1: entered promiscuous mode [ 109.699331][ T5946] team0: Port device team_slave_1 added [ 109.719415][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.750830][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.758645][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.765981][ T5954] bridge_slave_0: entered allmulticast mode [ 109.772533][ T5954] bridge_slave_0: entered promiscuous mode [ 109.798112][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.814723][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.821782][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.829475][ T5954] bridge_slave_1: entered allmulticast mode [ 109.836638][ T5954] bridge_slave_1: entered promiscuous mode [ 109.852762][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.859729][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.886112][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.898318][ T5951] team0: Port device team_slave_0 added [ 109.905701][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.915305][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.922211][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.948503][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.960637][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.967707][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.994289][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.012390][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.019572][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.045535][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.057424][ T5951] team0: Port device team_slave_1 added [ 110.082043][ T5942] team0: Port device team_slave_0 added [ 110.089422][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.123855][ T5942] team0: Port device team_slave_1 added [ 110.130541][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.141606][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.148813][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.175248][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.220965][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.228160][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.255351][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.275828][ T5954] team0: Port device team_slave_0 added [ 110.303253][ T5946] hsr_slave_0: entered promiscuous mode [ 110.309217][ T5946] hsr_slave_1: entered promiscuous mode [ 110.315702][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 110.321451][ T5946] Cannot create hsr debugfs directory [ 110.327697][ T5956] Bluetooth: hci0: command tx timeout [ 110.333558][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.340486][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.366563][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.378565][ T5954] team0: Port device team_slave_1 added [ 110.387472][ T5948] hsr_slave_0: entered promiscuous mode [ 110.394184][ T5948] hsr_slave_1: entered promiscuous mode [ 110.400918][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 110.406982][ T5956] Bluetooth: hci1: command tx timeout [ 110.412509][ T5948] Cannot create hsr debugfs directory [ 110.429506][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.436445][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.463177][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.473023][ T5956] Bluetooth: hci2: command tx timeout [ 110.479381][ T5950] Bluetooth: hci4: command tx timeout [ 110.479386][ T5957] Bluetooth: hci3: command tx timeout [ 110.538955][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.546674][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.572737][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.614959][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.621888][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.648201][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.663470][ T5951] hsr_slave_0: entered promiscuous mode [ 110.669435][ T5951] hsr_slave_1: entered promiscuous mode [ 110.675541][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 110.681242][ T5951] Cannot create hsr debugfs directory [ 110.736260][ T5942] hsr_slave_0: entered promiscuous mode [ 110.744472][ T5942] hsr_slave_1: entered promiscuous mode [ 110.750293][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 110.756393][ T5942] Cannot create hsr debugfs directory [ 110.859835][ T13] bridge_slave_1: left allmulticast mode [ 110.865911][ T13] bridge_slave_1: left promiscuous mode [ 110.871890][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.881625][ T13] bridge_slave_0: left allmulticast mode [ 110.887936][ T13] bridge_slave_0: left promiscuous mode [ 110.893881][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.062191][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.072937][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.082195][ T13] bond0 (unregistering): Released all slaves [ 111.107577][ T5954] hsr_slave_0: entered promiscuous mode [ 111.114974][ T5954] hsr_slave_1: entered promiscuous mode [ 111.120795][ T5954] debugfs: 'hsr0' already exists in 'hsr' [ 111.126726][ T5954] Cannot create hsr debugfs directory [ 111.238836][ T13] hsr_slave_0: left promiscuous mode [ 111.244820][ T13] hsr_slave_1: left promiscuous mode [ 111.250387][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.258323][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.268706][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.276135][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.288932][ T13] veth1_macvtap: left promiscuous mode [ 111.294611][ T13] veth0_macvtap: left promiscuous mode [ 111.300114][ T13] veth1_vlan: left promiscuous mode [ 111.305637][ T13] veth0_vlan: left promiscuous mode [ 111.472051][ T13] team0 (unregistering): Port device team_slave_1 removed [ 111.490884][ T13] team0 (unregistering): Port device team_slave_0 removed [ 112.005922][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.025672][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.048201][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.129539][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.174592][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.187719][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.204798][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.219879][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.303943][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.316639][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.326364][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.342485][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.354969][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.393013][ T5950] Bluetooth: hci0: command tx timeout [ 112.421017][ T5948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.446277][ T5948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.455567][ T5948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.472971][ T5950] Bluetooth: hci1: command tx timeout [ 112.489698][ T5948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.509726][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.555951][ T4583] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.563046][ T4583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.572973][ T5950] Bluetooth: hci4: command tx timeout [ 112.572988][ T5956] Bluetooth: hci2: command tx timeout [ 112.578342][ T5957] Bluetooth: hci3: command tx timeout [ 112.621776][ T3859] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.628917][ T3859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.695708][ T5954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.719715][ T5954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.732465][ T5954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.760495][ T5954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.800903][ T5951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.812136][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.907095][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.944531][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.966563][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.991448][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.998556][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.022350][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.037313][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.044426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.061540][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.076178][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.083333][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.106892][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.113954][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.126114][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.146532][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.153609][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.166532][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.181583][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.188671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.247718][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.330873][ T5951] veth0_vlan: entered promiscuous mode [ 113.347260][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.383524][ T4583] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.390891][ T4583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.415336][ T5951] veth1_vlan: entered promiscuous mode [ 113.456628][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.463766][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.541986][ T5951] veth0_macvtap: entered promiscuous mode [ 113.558749][ T5951] veth1_macvtap: entered promiscuous mode [ 113.571775][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.611887][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.628114][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.666482][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.685551][ T4583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.705826][ T4583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.735648][ T4583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.748161][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.761403][ T4583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.775490][ T5942] veth0_vlan: entered promiscuous mode [ 113.799514][ T5942] veth1_vlan: entered promiscuous mode [ 113.842114][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.881500][ T4583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.902239][ T4583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.903038][ T5946] veth0_vlan: entered promiscuous mode [ 113.946858][ T5942] veth0_macvtap: entered promiscuous mode [ 113.961752][ T5948] veth0_vlan: entered promiscuous mode [ 113.970974][ T5942] veth1_macvtap: entered promiscuous mode [ 113.978400][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.990361][ T5946] veth1_vlan: entered promiscuous mode [ 113.994363][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.016968][ T5948] veth1_vlan: entered promiscuous mode 2026/01/20 05:42:55 executed programs: 10 [ 114.047958][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.090081][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.100266][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 114.100278][ T30] audit: type=1400 audit(1768887775.808:105): avc: denied { create } for pid=6074 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.130100][ T3859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.142332][ C1] hrtimer: interrupt took 338914 ns [ 114.154059][ T30] audit: type=1400 audit(1768887775.838:106): avc: denied { ioctl } for pid=6074 comm="syz.3.20" path="socket:[8866]" dev="sockfs" ino=8866 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.245925][ T3859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.258028][ T3859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.315942][ T4355] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.357257][ T5946] veth0_macvtap: entered promiscuous mode [ 114.373584][ T5948] veth0_macvtap: entered promiscuous mode [ 114.382515][ T5948] veth1_macvtap: entered promiscuous mode [ 114.399773][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.410403][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.447515][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.456226][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.541828][ T5957] Bluetooth: hci0: command tx timeout [ 114.551289][ T5946] veth1_macvtap: entered promiscuous mode [ 114.557769][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.566592][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.595497][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.612483][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.635314][ T5957] Bluetooth: hci2: command tx timeout [ 114.676773][ T5957] Bluetooth: hci1: command tx timeout [ 114.678249][ T5950] Bluetooth: hci3: command tx timeout [ 114.682585][ T5956] Bluetooth: hci4: command tx timeout [ 114.711697][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.738034][ T5954] veth0_vlan: entered promiscuous mode [ 114.819705][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.852791][ T4176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.860609][ T4176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.895810][ T5954] veth1_vlan: entered promiscuous mode [ 114.902659][ T4355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.935061][ T4355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.964490][ T4355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.973836][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.021877][ T4355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.030947][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.256149][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.263984][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.713572][ T5954] veth0_macvtap: entered promiscuous mode [ 115.722386][ T5954] veth1_macvtap: entered promiscuous mode [ 115.738155][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.228148][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.235976][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.243428][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.251214][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.483052][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.534264][ T1127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.543721][ T1127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.552475][ T1127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.928512][ T1127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.948543][ T5957] Bluetooth: hci0: command tx timeout [ 116.948730][ T5950] Bluetooth: hci1: command tx timeout [ 116.953921][ T5955] Bluetooth: hci4: command tx timeout [ 116.959258][ T5889] Bluetooth: hci2: command tx timeout [ 116.969947][ T5956] Bluetooth: hci3: command tx timeout [ 293.469699][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 293.476319][ C0] rcu: 0-...!: (2 ticks this GP) idle=b09c/1/0x4000000000000000 softirq=16231/16231 fqs=0 [ 293.486675][ C0] rcu: (t=10577 jiffies g=9141 q=797 ncpus=2) [ 293.492812][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10576 jiffies! g9141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 293.505029][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=5708 [ 293.512809][ C0] rcu: rcu_preempt kthread starved for 10577 jiffies! g9141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 293.524067][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 293.534015][ C0] rcu: RCU grace-period kthread stack dump: [ 293.539890][ C0] task:rcu_preempt state:I stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 293.551806][ C0] Call Trace: [ 293.555074][ C0] [ 293.557998][ C0] ? __schedule+0x10b9/0x5ee0 [ 293.562668][ C0] __schedule+0x1138/0x5ee0 [ 293.567160][ C0] ? __lock_acquire+0x436/0x2890 [ 293.572097][ C0] ? __pfx___schedule+0x10/0x10 [ 293.576936][ C0] ? find_held_lock+0x2b/0x80 [ 293.581607][ C0] ? schedule+0x2d7/0x3a0 [ 293.585931][ C0] schedule+0xe7/0x3a0 [ 293.589988][ C0] schedule_timeout+0x123/0x290 [ 293.594829][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 293.600191][ C0] ? __pfx_process_timeout+0x10/0x10 [ 293.605466][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 293.611264][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 293.616715][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 293.621476][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 293.626752][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.631940][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 293.636866][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 293.641709][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 293.647508][ C0] rcu_gp_kthread+0x26d/0x380 [ 293.652179][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 293.657368][ C0] ? rcu_is_watching+0x12/0xc0 [ 293.662120][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.667311][ C0] ? __kthread_parkme+0x19e/0x250 [ 293.672323][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 293.677508][ C0] kthread+0x3c5/0x780 [ 293.681566][ C0] ? __pfx_kthread+0x10/0x10 [ 293.686144][ C0] ? rcu_is_watching+0x12/0xc0 [ 293.690892][ C0] ? __pfx_kthread+0x10/0x10 [ 293.695469][ C0] ret_from_fork+0x983/0xb10 [ 293.700050][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 293.705150][ C0] ? __switch_to+0x7af/0x10d0 [ 293.709817][ C0] ? __pfx_kthread+0x10/0x10 [ 293.714397][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.719165][ C0] [ 293.722663][ C0] CPU: 0 UID: 0 PID: 5940 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 293.722682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.722691][ C0] RIP: 0010:smp_call_function_many_cond+0xdfd/0x15e0 [ 293.722713][ C0] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 45 5f 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 [ 293.722727][ C0] RSP: 0018:ffffc900038676d0 EFLAGS: 00000293 [ 293.722740][ C0] RAX: 0000000000000000 RBX: ffff8880b8540cc0 RCX: ffffffff81b2a071 [ 293.722749][ C0] RDX: ffff888030f90000 RSI: ffffffff81b2a04b RDI: 0000000000000005 [ 293.722759][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 293.722767][ C0] R10: 0000000000000001 R11: ffff888030f90b30 R12: dffffc0000000000 [ 293.722777][ C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001 [ 293.722786][ C0] FS: 0000000000000000(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000 [ 293.722801][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.722811][ C0] CR2: 00005647f51dcbe0 CR3: 000000000e184000 CR4: 00000000003526f0 [ 293.722820][ C0] Call Trace: [ 293.722826][ C0] [ 293.722836][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 293.722860][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 293.722888][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 293.722906][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 293.722926][ C0] flush_tlb_mm_range+0x2f0/0x12c0 [ 293.722946][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 293.722967][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 293.722990][ C0] tlb_finish_mmu+0x3c9/0x7c0 [ 293.723016][ C0] exit_mmap+0x3f9/0xb60 [ 293.723039][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 293.723065][ C0] ? __lock_acquire+0x436/0x2890 [ 293.723093][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 293.723118][ C0] __mmput+0x12a/0x410 [ 293.723141][ C0] mmput+0x62/0x70 [ 293.723162][ C0] do_exit+0x7d7/0x2bd0 [ 293.723183][ C0] ? __pfx_do_exit+0x10/0x10 [ 293.723198][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 293.723217][ C0] ? find_held_lock+0x2b/0x80 [ 293.723243][ C0] do_group_exit+0xd3/0x2a0 [ 293.723261][ C0] get_signal+0x2671/0x26d0 [ 293.723283][ C0] ? __pfx_kernel_wait4+0x10/0x10 [ 293.723302][ C0] ? __pfx_child_wait_callback+0x10/0x10 [ 293.723320][ C0] ? __pfx_get_signal+0x10/0x10 [ 293.723348][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 293.723369][ C0] ? __pfx___do_sys_wait4+0x10/0x10 [ 293.723386][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 293.723421][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 293.723446][ C0] do_syscall_64+0x4ee/0xf80 [ 293.723469][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.723484][ C0] RIP: 0033:0x7f728f585853 [ 293.723496][ C0] Code: Unable to access opcode bytes at 0x7f728f585829. [ 293.723503][ C0] RSP: 002b:00007ffc1847d6b8 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 293.723516][ C0] RAX: fffffffffffffe00 RBX: 000000000000173a RCX: 00007f728f585853 [ 293.723526][ C0] RDX: 0000000040000000 RSI: 00007ffc1847d6cc RDI: 00000000ffffffff [ 293.723535][ C0] RBP: 00007ffc1847d6cc R08: 0000000000000000 R09: 0000000000000000 [ 293.723549][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 293.723557][ C0] R13: 00007ffc1847d738 R14: 00007ffc1847d9b8 R15: 0000000000000000 [ 293.723580][ C0] [ 293.723586][ C0] Sending NMI from CPU 0 to CPUs 1: [ 293.723607][ C1] NMI backtrace for cpu 1 [ 293.723615][ C1] CPU: 1 UID: 0 PID: 3892 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 293.723629][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.723636][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 293.723655][ C1] RIP: 0010:check_preemption_disabled+0x25/0xe0 [ 293.723673][ C1] Code: 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d d5 11 3a 08 65 8b 05 ca 11 3a 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d <41> 5c c3 cc cc cc cc 9c 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 8a [ 293.723683][ C1] RSP: 0018:ffffc90000a08d40 EFLAGS: 00000096 [ 293.723692][ C1] RAX: 0000000000000001 RBX: ffff888034148c20 RCX: 0000000000000001 [ 293.723699][ C1] RDX: 0000000000000000 RSI: ffffffff8daa92f6 RDI: ffffffff8bf2b280 [ 293.723707][ C1] RBP: ffff88807501b2c0 R08: 0000000000000005 R09: 0000000000000000 [ 293.723714][ C1] R10: 0000000000000001 R11: ffff888034148b30 R12: ffff888034148000 [ 293.723721][ C1] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000006 [ 293.723728][ C1] FS: 0000000000000000(0000) GS:ffff8881249f1000(0000) knlGS:0000000000000000 [ 293.723741][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.723748][ C1] CR2: 00005647f51dcbe0 CR3: 000000000e184000 CR4: 00000000003526f0 [ 293.723756][ C1] Call Trace: [ 293.723761][ C1] [ 293.723765][ C1] lock_is_held_type+0xdf/0x150 [ 293.723781][ C1] ? __pfx_advance_sched+0x10/0x10 [ 293.723799][ C1] advance_sched+0x7b1/0xc80 [ 293.723816][ C1] ? find_held_lock+0x2b/0x80 [ 293.723834][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 293.723850][ C1] ? __pfx_advance_sched+0x10/0x10 [ 293.723866][ C1] __hrtimer_run_queues+0x202/0xc40 [ 293.723886][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 293.723903][ C1] ? read_tsc+0x9/0x20 [ 293.723921][ C1] hrtimer_interrupt+0x397/0x8e0 [ 293.723936][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 293.723952][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 293.723967][ C1] [ 293.723971][ C1] [ 293.723975][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.723988][ C1] RIP: 0010:filemap_get_folios_tag+0x234/0xae0 [ 293.724006][ C1] Code: 0f b6 04 38 84 c0 74 06 0f 8e ec 07 00 00 45 0f b6 65 00 48 8b 44 24 60 bf 3f 00 00 00 44 89 e6 48 89 44 24 10 e8 3c 12 c7 ff <41> 80 fc 3f 0f 87 c2 d4 28 ff e8 ed 17 c7 ff 48 8b 44 24 10 44 89 [ 293.724016][ C1] RSP: 0018:ffffc9000d986e08 EFLAGS: 00000293 [ 293.724025][ C1] RAX: 0000000000000000 RBX: ffffea0001cc43c0 RCX: ffffffff81f7e794 [ 293.724032][ C1] RDX: ffff888034148000 RSI: 000000000000003f RDI: 0000000000000001 [ 293.724040][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000000000003f [ 293.724047][ C1] R10: 0000000000000000 R11: ffff888034148b30 R12: 0000000000000000 [ 293.724054][ C1] R13: ffff8880274a0000 R14: ffffc9000d986fe8 R15: dffffc0000000000 [ 293.724064][ C1] ? filemap_get_folios_tag+0x234/0xae0 [ 293.724082][ C1] ? filemap_get_folios_tag+0x234/0xae0 [ 293.724100][ C1] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 293.724119][ C1] ? __pfx___might_resched+0x10/0x10 [ 293.724132][ C1] mpage_prepare_extent_to_map+0x399/0x1510 [ 293.724151][ C1] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 293.724183][ C1] ? __ext4_journal_start_sb+0x195/0x640 [ 293.724197][ C1] ? __ext4_journal_start_sb+0x19e/0x640 [ 293.724210][ C1] ? ext4_do_writepages+0xc23/0x3c80 [ 293.724226][ C1] ext4_do_writepages+0xd1b/0x3c80 [ 293.724247][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 293.724266][ C1] ? ext4_writepages+0x37a/0x7d0 [ 293.724279][ C1] ext4_writepages+0x37a/0x7d0 [ 293.724298][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 293.724316][ C1] ? __lock_acquire+0x436/0x2890 [ 293.724329][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 293.724344][ C1] do_writepages+0x27a/0x600 [ 293.724360][ C1] ? __pfx_do_writepages+0x10/0x10 [ 293.724374][ C1] ? reacquire_held_locks+0xcd/0x1f0 [ 293.724389][ C1] __writeback_single_inode+0x168/0x14a0 [ 293.724403][ C1] ? wbc_attach_and_unlock_inode+0xee/0x110 [ 293.724418][ C1] ? __pfx___writeback_single_inode+0x10/0x10 [ 293.724432][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 293.724449][ C1] writeback_sb_inodes+0x72e/0x1ce0 [ 293.724466][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 293.724481][ C1] ? __lock_acquire+0x436/0x2890 [ 293.724502][ C1] ? _raw_spin_unlock+0x28/0x50 [ 293.724515][ C1] ? move_expired_inodes+0x5ee/0x8f0 [ 293.724529][ C1] __writeback_inodes_wb+0xf8/0x2d0 [ 293.724545][ C1] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 293.724559][ C1] ? queue_io+0x3f6/0x4f0 [ 293.724571][ C1] wb_writeback+0x799/0xae0 [ 293.724587][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 293.724603][ C1] ? get_nr_dirty_inodes+0x170/0x1e0 [ 293.724617][ C1] wb_workfn+0x8a0/0xbb0 [ 293.724632][ C1] ? try_to_wake_up+0x160/0x1860 [ 293.724649][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 293.724666][ C1] ? rcu_is_watching+0x12/0xc0 [ 293.724679][ C1] process_one_work+0x9ba/0x1b20 [ 293.724696][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 293.724715][ C1] ? __pfx_process_one_work+0x10/0x10 [ 293.724731][ C1] ? assign_work+0x1a0/0x250 [ 293.724745][ C1] worker_thread+0x6c8/0xf10 [ 293.724762][ C1] ? __kthread_parkme+0x19e/0x250 [ 293.724774][ C1] ? __pfx_worker_thread+0x10/0x10 [ 293.724788][ C1] kthread+0x3c5/0x780 [ 293.724802][ C1] ? __pfx_kthread+0x10/0x10 [ 293.724815][ C1] ? rcu_is_watching+0x12/0xc0 [ 293.724826][ C1] ? __pfx_kthread+0x10/0x10 [ 293.724839][ C1] ret_from_fork+0x983/0xb10 [ 293.724852][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 293.724865][ C1] ? __switch_to+0x7af/0x10d0 [ 293.724879][ C1] ? __pfx_kthread+0x10/0x10 [ 293.724892][ C1] ret_from_fork_asm+0x1a/0x30 [ 293.724913][ C1]