last executing test programs: 8.119350783s ago: executing program 3 (id=698): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x5c9002, 0x0) r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/tracing/dynamic_events\x00', 0x42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x2, 0x3, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0x7, 0x2817, 0x4, 0x200004, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x7, 0x5, 0x8}, 0x10) r2 = getpid() close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x1, 0x1, 0x1) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000480)="0a451f44a544", 0x6) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 7.572005406s ago: executing program 3 (id=699): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, 0x0) setreuid$auto(0x2, 0x87) r1 = timerfd_create$auto(0x6, 0x0) futimesat$auto(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x40, 0xffffffffffffffff}) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0xa, 0x3, 0x2c) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000001c0), 0x189002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/blkio.bfq.weight_device\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c02, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)=0x6) read$auto(r3, 0x0, 0x5) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109206, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) 6.036059898s ago: executing program 3 (id=704): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1dcb, 0x18) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r0 = fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff) mlockall$auto(0x7) write$auto_sg_fops_sg(r0, &(0x7f0000000000)="92b950ae6e5742a21461bf8c2cd2899e154adb6eac4c585aab943301a10a409d5af515b1f2b5802ddcab27975026ccfdab32ada2b8fc7660d6a53b3ec6df8095a8e2ee51c3136f76a65732ad87243441", 0x50) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, 0x0) socketpair$auto(0x7, 0x1fffffe, 0x315, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x1c) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) pselect6$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 6.035193078s ago: executing program 2 (id=712): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x5c9002, 0x0) r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/tracing/dynamic_events\x00', 0x42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x2, 0x3, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0x7, 0x2817, 0x4, 0x200004, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x7, 0x5, 0x8}, 0x10) r2 = getpid() close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x1, 0x1, 0x1) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000480)="0a451f44a544", 0x6) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 5.578185195s ago: executing program 0 (id=705): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x4, 0x2, 0x6, 0x400000000010, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x3, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) 5.578048654s ago: executing program 1 (id=706): syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, 0x0, 0x51) shutdown$auto(0x200000003, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2a, 0xffffffffffffffff, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000240), 0xd2082, 0x0) socket(0x1d, 0x2, 0x3) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5.427668439s ago: executing program 2 (id=707): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)=""/218, 0xda) socket(0x10, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mlockall$auto(0x7) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2512000000a500138056cbfa42c40766659aa29e5e977fd8c0c5ea07452724775bbe2a991a68ffcde27d30d9539f5af41857c946a10ab75d4455ff05a8c7e2dd82a1b193c14603e7d524459341b3e50ef2aa9f0036e435055f7ced71ecabd242d2772183e1ecccd5862bebfb0c8f2d4aeb08712114c79f828805a9f502ad2cf56faf93edaa4aed6a9f231f9ebe64ef8a62707c3d2a42aedbf90b43fa34f4d09b7d0ddf851881011ee196000000369d7c7bb77a80ef34d5264f437c77dc3c5801be321b62f55347c95a130d67"], 0xbc}, 0x1, 0x0, 0x0, 0x8800}, 0x40404c8) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) socket(0x1e, 0x4, 0x0) epoll_create$auto(0x3f) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) write$auto(r3, &(0x7f0000000180)='/de\xef\xe7audio1\x00', 0x47a) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800000001) write$auto(0x3, 0x0, 0xfffffdef) 4.121059992s ago: executing program 1 (id=708): unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) socket(0x11, 0xa, 0x300) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01032cb57000fbdbdf250a0000400600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) 3.183035203s ago: executing program 1 (id=709): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create$auto(0x4) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0xfffffffffffffffb}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0x7}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044800}, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r3, 0x7, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) 2.604187079s ago: executing program 0 (id=710): close_range$auto(0x2, 0x8, 0x0) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) socket(0xa, 0x2, 0x88) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8100) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x80044944, 0x0) close_range$auto(0x2, 0x8, 0x0) getuid() socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x1, 0xd4, 0x7fffffff, 0x6, 0x0, 0xa89e, 0x3690, 0x2, {0xfffffffc, 0x10000}, 0xa81e, 0x6, 0xffffffffffffffff, 0x1008000, 0x0, 0x80000080000004, 0x84, 0xffffffffffff6291, 0xffff, 0xdeb1, 0x806}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/igmp6\x00', 0x101d41, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x240803, 0x0) read$auto_ptdump_curusr_fops_(r1, &(0x7f0000000100)=""/25, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0xff9e, &(0x7f0000001400)={&(0x7f0000000240)={0x34, r3, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x7, 0x4, "eb96e1"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 2.379391233s ago: executing program 0 (id=711): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create$auto(0x4) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0xfffffffffffffffb}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0x7}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044800}, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r3, 0x7, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) 2.109353921s ago: executing program 3 (id=713): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x6, 0xffffffffffff0001, 0xde1a) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, &(0x7f0000000100)={0x0, 0x9d, 0x1, [0x0]}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000004180)=""/104, 0x68) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(0x3, 0x400c4d00, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, 0x0, 0x1) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7j\x00\x00\x00\x00\x00\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94-\xbb\x995\x1e\xcas\x99\xbb\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea6J\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8fW\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) connect$auto(0x3, 0x0, 0x55) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r0, 0x0, 0x0) 2.073799671s ago: executing program 2 (id=714): unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x7}, 0xff, 0x3, 0xfffffffffffffffd, 0x1008000, 0x0, 0x6, 0x81, 0xbfffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) socket(0x11, 0xa, 0x300) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a0000400600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) 1.764306907s ago: executing program 1 (id=715): unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) socket(0x11, 0xa, 0x300) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01032cb57000fbdbdf250a0000400600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) 1.369065844s ago: executing program 2 (id=716): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) write$auto(r0, 0x0, 0x3f00) 1.123486902s ago: executing program 2 (id=717): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy$auto(0x9, &(0x7f0000000240)=0x7, 0x7) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mprotect$auto(0xa1f, 0x5, 0x3) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) socket(0x1a, 0x80000, 0x84) unshare$auto(0x40000080) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffe) mmap$auto(0xffffffffffffffff, 0x4000002020009, 0x3, 0x1010, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) bind$auto(r1, &(0x7f0000000040)=@l2={0x1f, 0x400, @any, 0xff01, 0x3}, 0x7) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setsockopt$auto(r0, 0x1, 0x45, 0x0, 0x4009) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r2, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b41, 0x7) 864.340037ms ago: executing program 3 (id=718): set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5}, 0x3) mbind$auto(0x0, 0x100000004, 0x100000003, 0x0, 0x6, 0x2) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0xff0f200000000000, 0x400004, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000) madvise$auto(0x1, 0xffffffffffff0005, 0x3) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) 801.975709ms ago: executing program 0 (id=719): set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r0, 0x0, 0x2) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5}, 0x3) mbind$auto(0x0, 0x100000004, 0x100000003, 0x0, 0x6, 0x2) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0xff0f200000000000, 0x400004, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000) madvise$auto(0x1, 0xffffffffffff0005, 0x3) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) 233.576671ms ago: executing program 3 (id=720): mmap$auto(0x2, 0x400008, 0x4000000081, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x40000080) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x42a81, 0x0) pwrite64$auto(r1, 0x0, 0x1, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close_range$auto(0xffffffffffffffff, 0x8000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_uring_setup$auto(0xa, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x23, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) 232.511626ms ago: executing program 0 (id=728): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) socket(0xa, 0x2, 0x88) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8100) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80044944, 0x0) close_range$auto(0x2, 0x8, 0x0) getuid() socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x1, 0xd4, 0x7fffffff, 0x6, 0x0, 0xa89e, 0x3690, 0x2, {0xfffffffc, 0x10000}, 0xa81e, 0x6, 0xffffffffffffffff, 0x1008000, 0x0, 0x80000080000004, 0x84, 0xffffffffffff6291, 0xffff, 0xdeb1, 0x806}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/igmp6\x00', 0x101d41, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x240803, 0x0) read$auto_ptdump_curusr_fops_(r2, &(0x7f0000000100)=""/25, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000001440)={0x0, 0xff9e, &(0x7f0000001400)={&(0x7f0000000240)={0x34, r4, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x7, 0x4, "eb96e1"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 146.852936ms ago: executing program 1 (id=721): madvise$auto(0x0, 0xffffffffffff0005, 0x19) 6.684458ms ago: executing program 0 (id=722): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1dcb, 0x18) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r0 = fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff) mlockall$auto(0x7) write$auto_sg_fops_sg(r0, &(0x7f0000000000)="92b950ae6e5742a21461bf8c2cd2899e154adb6eac4c585aab943301a10a409d5af515b1f2b5802ddcab27975026ccfdab32ada2b8fc7660d6a53b3ec6df8095a8e2ee51c3136f76a65732ad87243441", 0x50) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, 0x0) socketpair$auto(0x7, 0x1fffffe, 0x315, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) getpeername$auto(0xffffffffffffffff, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x1c) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) pselect6$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 899.017µs ago: executing program 1 (id=723): unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x7}, 0xff, 0x3, 0xfffffffffffffffd, 0x1008000, 0x0, 0x6, 0x81, 0xbfffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) socket(0x11, 0xa, 0x300) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a0000400600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) 0s ago: executing program 2 (id=731): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create$auto(0x4) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0xfffffffffffffffb}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0x7}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044800}, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r3, 0x7, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 93.270576][ T5818] cgroup: Unknown subsys name 'net' [ 93.448009][ T5818] cgroup: Unknown subsys name 'cpuset' [ 93.459683][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.295110][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.674325][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.703523][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.711927][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.721437][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.729965][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.765246][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.784119][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.797947][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.810135][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.818844][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.934677][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.943631][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.951785][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.960861][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.969459][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.994577][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.006255][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.023505][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.033130][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.043265][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.612490][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 98.655087][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 98.781517][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 98.873224][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 99.041321][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.049634][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.057835][ T5832] bridge_slave_0: entered allmulticast mode [ 99.066156][ T5832] bridge_slave_0: entered promiscuous mode [ 99.076188][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.083690][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.090931][ T5827] bridge_slave_0: entered allmulticast mode [ 99.099397][ T5827] bridge_slave_0: entered promiscuous mode [ 99.107700][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.115093][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.122435][ T5827] bridge_slave_1: entered allmulticast mode [ 99.130337][ T5827] bridge_slave_1: entered promiscuous mode [ 99.153404][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.160598][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.168503][ T5835] bridge_slave_0: entered allmulticast mode [ 99.176844][ T5835] bridge_slave_0: entered promiscuous mode [ 99.187419][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.194670][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.201888][ T5832] bridge_slave_1: entered allmulticast mode [ 99.210382][ T5832] bridge_slave_1: entered promiscuous mode [ 99.240447][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.251282][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.258602][ T5835] bridge_slave_1: entered allmulticast mode [ 99.267345][ T5835] bridge_slave_1: entered promiscuous mode [ 99.370713][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.386635][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.398059][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.405593][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.413666][ T5837] bridge_slave_0: entered allmulticast mode [ 99.421141][ T5837] bridge_slave_0: entered promiscuous mode [ 99.446133][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.475484][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.485554][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.492893][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.500129][ T5837] bridge_slave_1: entered allmulticast mode [ 99.507829][ T5837] bridge_slave_1: entered promiscuous mode [ 99.518722][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.591212][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.605406][ T5832] team0: Port device team_slave_0 added [ 99.645219][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.657943][ T5832] team0: Port device team_slave_1 added [ 99.696003][ T5827] team0: Port device team_slave_0 added [ 99.706882][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.718566][ T5827] team0: Port device team_slave_1 added [ 99.742063][ T5835] team0: Port device team_slave_0 added [ 99.781452][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.788831][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.794438][ T5141] Bluetooth: hci0: command tx timeout [ 99.815522][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.835424][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.842427][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.869668][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.880617][ T5141] Bluetooth: hci1: command tx timeout [ 99.886763][ T5835] team0: Port device team_slave_1 added [ 99.949920][ T5837] team0: Port device team_slave_0 added [ 99.960007][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.967553][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.993728][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.007632][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.014691][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.041168][ T5141] Bluetooth: hci2: command tx timeout [ 100.041208][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.071578][ T5837] team0: Port device team_slave_1 added [ 100.102991][ T5141] Bluetooth: hci3: command tx timeout [ 100.123644][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.130661][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.157001][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.218247][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.225352][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.252048][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.280034][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.287267][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.313701][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.331327][ T5832] hsr_slave_0: entered promiscuous mode [ 100.338018][ T5832] hsr_slave_1: entered promiscuous mode [ 100.345910][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.355775][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.382574][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.399595][ T5827] hsr_slave_0: entered promiscuous mode [ 100.406857][ T5827] hsr_slave_1: entered promiscuous mode [ 100.414459][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.422353][ T5827] Cannot create hsr debugfs directory [ 100.582023][ T5835] hsr_slave_0: entered promiscuous mode [ 100.588771][ T5835] hsr_slave_1: entered promiscuous mode [ 100.598180][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.606221][ T5835] Cannot create hsr debugfs directory [ 100.694441][ T5837] hsr_slave_0: entered promiscuous mode [ 100.701464][ T5837] hsr_slave_1: entered promiscuous mode [ 100.708490][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.716344][ T5837] Cannot create hsr debugfs directory [ 101.169517][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.188951][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.201426][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.229205][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.299596][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.311109][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.348859][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.373681][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.446265][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.470544][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.497131][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.540741][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.612557][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.625825][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.657941][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.669527][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.759557][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.821137][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.859400][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.866902][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.876352][ T5141] Bluetooth: hci0: command tx timeout [ 101.911319][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.918990][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.943507][ T5141] Bluetooth: hci1: command tx timeout [ 102.005316][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.061910][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.103070][ T5141] Bluetooth: hci2: command tx timeout [ 102.126270][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.154704][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.180655][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.188523][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.196566][ T5141] Bluetooth: hci3: command tx timeout [ 102.245779][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.253062][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.266705][ T24] cfg80211: failed to load regulatory.db [ 102.300604][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.307897][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.369032][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.376363][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.407666][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.486555][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.520519][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.527894][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.560041][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.567321][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.701566][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.037862][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.052108][ T5827] veth0_vlan: entered promiscuous mode [ 103.085630][ T5827] veth1_vlan: entered promiscuous mode [ 103.101139][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.215210][ T5827] veth0_macvtap: entered promiscuous mode [ 103.240382][ T5827] veth1_macvtap: entered promiscuous mode [ 103.253034][ T5832] veth0_vlan: entered promiscuous mode [ 103.285688][ T5832] veth1_vlan: entered promiscuous mode [ 103.351664][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.377275][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.387242][ T5835] veth0_vlan: entered promiscuous mode [ 103.403736][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.442134][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.458268][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.468297][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.478200][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.491101][ T5832] veth0_macvtap: entered promiscuous mode [ 103.503972][ T5835] veth1_vlan: entered promiscuous mode [ 103.528877][ T5832] veth1_macvtap: entered promiscuous mode [ 103.624990][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.636779][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.648745][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.668582][ T5837] veth0_vlan: entered promiscuous mode [ 103.676542][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.688726][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.700692][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.778592][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.788167][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.797108][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.806376][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.833307][ T5837] veth1_vlan: entered promiscuous mode [ 103.847634][ T5835] veth0_macvtap: entered promiscuous mode [ 103.860074][ T5835] veth1_macvtap: entered promiscuous mode [ 103.890335][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.912199][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.932112][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.944958][ T5141] Bluetooth: hci0: command tx timeout [ 103.950238][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.961202][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.974495][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.986858][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.025768][ T5141] Bluetooth: hci1: command tx timeout [ 104.038507][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.049159][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.059523][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.071735][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.084378][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.147383][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.157485][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.166700][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.175860][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.192495][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.203508][ T5141] Bluetooth: hci2: command tx timeout [ 104.205081][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.240070][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.254781][ T5837] veth0_macvtap: entered promiscuous mode [ 104.264908][ T5141] Bluetooth: hci3: command tx timeout [ 104.275970][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.289943][ T5837] veth1_macvtap: entered promiscuous mode [ 104.365826][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.392395][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.404453][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.414864][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.429488][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.439635][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.450345][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.463594][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.521152][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.536412][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.558289][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.574024][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.584610][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.596351][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.611628][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.623421][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.635974][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.690101][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.713246][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.722185][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.732554][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.783548][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.795424][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.943866][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.969399][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.154290][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.162206][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.347836][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.367361][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.636888][ T5899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 105.866652][ T5899] Zero length message leads to an empty skb [ 106.033246][ T5141] Bluetooth: hci0: command tx timeout [ 106.104591][ T5141] Bluetooth: hci1: command tx timeout [ 106.263331][ T5141] Bluetooth: hci2: command tx timeout [ 106.348996][ T5141] Bluetooth: hci3: command tx timeout [ 106.613091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.368918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.983604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 108.495214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.623025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.672974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.697891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.007038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.813005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.743421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.777058][ T5950] capability: warning: `syz.3.10' uses 32-bit capabilities (legacy support in use) [ 114.570740][ T5982] Invalid ELF header magic: != ELF [ 115.175404][ T5991] FAULT_INJECTION: forcing a failure. [ 115.175404][ T5991] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 115.200092][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.3.19 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 115.200149][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 115.200173][ T5991] Call Trace: [ 115.200184][ T5991] [ 115.200200][ T5991] dump_stack_lvl+0x16c/0x1f0 [ 115.200255][ T5991] should_fail_ex+0x512/0x640 [ 115.200308][ T5991] should_fail_alloc_page+0xe7/0x130 [ 115.200350][ T5991] prepare_alloc_pages+0x3c2/0x610 [ 115.200394][ T5991] ? rcu_is_watching+0x12/0xc0 [ 115.200428][ T5991] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 115.200467][ T5991] ? kasan_save_stack+0x33/0x60 [ 115.200507][ T5991] ? __lock_acquire+0xaa4/0x1ba0 [ 115.200554][ T5991] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.200596][ T5991] ? look_up_lock_class+0x59/0x150 [ 115.200647][ T5991] ? __lock_acquire+0x5ca/0x1ba0 [ 115.200691][ T5991] ? __lock_acquire+0x5ca/0x1ba0 [ 115.200729][ T5991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.200771][ T5991] ? policy_nodemask+0xea/0x4e0 [ 115.200810][ T5991] alloc_pages_mpol+0x1fb/0x550 [ 115.200847][ T5991] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 115.200885][ T5991] ? __lock_acquire+0x5ca/0x1ba0 [ 115.200931][ T5991] folio_alloc_mpol_noprof+0x36/0x2f0 [ 115.200978][ T5991] vma_alloc_folio_noprof+0xed/0x1e0 [ 115.201021][ T5991] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 115.201074][ T5991] do_pte_missing+0x223d/0x3fb0 [ 115.201123][ T5991] __handle_mm_fault+0x103d/0x2a40 [ 115.201164][ T5991] ? __pfx___handle_mm_fault+0x10/0x10 [ 115.201191][ T5991] ? __pte_offset_map_lock+0x155/0x2f0 [ 115.201234][ T5991] ? find_held_lock+0x2b/0x80 [ 115.201259][ T5991] ? find_held_lock+0x2b/0x80 [ 115.201310][ T5991] handle_mm_fault+0x3fe/0xad0 [ 115.201345][ T5991] __get_user_pages+0x771/0x36f0 [ 115.201402][ T5991] ? __pfx_mt_find+0x10/0x10 [ 115.201446][ T5991] ? __pfx___get_user_pages+0x10/0x10 [ 115.201506][ T5991] populate_vma_page_range+0x278/0x3a0 [ 115.201536][ T5991] ? __pfx_populate_vma_page_range+0x10/0x10 [ 115.201583][ T5991] ? __pfx_find_vma_intersection+0x10/0x10 [ 115.201627][ T5991] ? do_mmap+0x69c/0x11b0 [ 115.201674][ T5991] __mm_populate+0x1d8/0x380 [ 115.201706][ T5991] ? __pfx___mm_populate+0x10/0x10 [ 115.201738][ T5991] ? up_write+0x1b2/0x520 [ 115.201787][ T5991] vm_mmap_pgoff+0x362/0x450 [ 115.201837][ T5991] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 115.201894][ T5991] ? __x64_sys_futex+0x1e0/0x4c0 [ 115.201926][ T5991] ? __x64_sys_futex+0x1e9/0x4c0 [ 115.201966][ T5991] ksys_mmap_pgoff+0x7d/0x5c0 [ 115.202013][ T5991] ? rcu_is_watching+0x12/0xc0 [ 115.202045][ T5991] __x64_sys_mmap+0x125/0x190 [ 115.202082][ T5991] do_syscall_64+0xcd/0x230 [ 115.202141][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.202173][ T5991] RIP: 0033:0x7f1011f8e969 [ 115.202198][ T5991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.202228][ T5991] RSP: 002b:00007f1012d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 115.202259][ T5991] RAX: ffffffffffffffda RBX: 00007f10121b5fa0 RCX: 00007f1011f8e969 [ 115.202279][ T5991] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 115.202299][ T5991] RBP: 00007f1012010ab1 R08: 0000000000000002 R09: 0000000000008000 [ 115.202318][ T5991] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 115.202338][ T5991] R13: 0000000000000000 R14: 00007f10121b5fa0 R15: 00007ffddf2f5188 [ 115.202380][ T5991] [ 115.914138][ T5992] netlink: 186 bytes leftover after parsing attributes in process `syz.3.19'. [ 120.425666][ T6050] can: request_module (can-proto-3) failed. [ 120.938642][ T6057] mmap: syz.3.27 (6057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. syzkaller syzkaller login: [ 128.388933][ T6115] can: request_module (can-proto-3) failed. [ 129.407241][ T6126] can: request_module (can-proto-3) failed. [ 137.626913][ T6209] openvswitch: netlink: Key type 261 is out of range max 32 [ 140.339107][ T6237] can: request_module (can-proto-3) failed. syzkaller syzkaller login: [ 142.248125][ T3003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.460491][ T3003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.630563][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.640689][ T3003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.661859][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.670941][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.679902][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.691784][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.819582][ T3003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.224815][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.240330][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.415242][ T6270] openvswitch: netlink: Key type 261 is out of range max 32 [ 143.682052][ T3003] bridge_slave_1: left allmulticast mode [ 143.724835][ T3003] bridge_slave_1: left promiscuous mode [ 143.750707][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.819449][ T3003] bridge_slave_0: left allmulticast mode [ 143.833988][ T3003] bridge_slave_0: left promiscuous mode [ 143.850450][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.974676][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.989686][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.011331][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.023342][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.033842][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.734366][ T5141] Bluetooth: hci0: command tx timeout [ 144.799145][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.811246][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.822128][ T3003] bond0 (unregistering): Released all slaves [ 144.869333][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 145.427998][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.439214][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.446641][ T6258] bridge_slave_0: entered allmulticast mode [ 145.459824][ T6258] bridge_slave_0: entered promiscuous mode [ 145.483785][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.491094][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.507107][ T6258] bridge_slave_1: entered allmulticast mode [ 145.516236][ T6258] bridge_slave_1: entered promiscuous mode [ 145.601244][ T3003] hsr_slave_0: left promiscuous mode [ 145.609278][ T3003] hsr_slave_1: left promiscuous mode [ 145.622107][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.629883][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.645953][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.661533][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.700152][ T3003] veth1_macvtap: left promiscuous mode [ 145.711210][ T3003] veth0_macvtap: left promiscuous mode [ 145.718589][ T3003] veth1_vlan: left promiscuous mode [ 145.725169][ T3003] veth0_vlan: left promiscuous mode [ 146.093680][ T5141] Bluetooth: hci3: command tx timeout [ 146.199274][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 146.240770][ T3003] team0 (unregistering): Port device team_slave_0 removed [ 146.643619][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.712658][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.814033][ T5141] Bluetooth: hci0: command tx timeout [ 146.850351][ T6258] team0: Port device team_slave_0 added [ 146.861225][ T6258] team0: Port device team_slave_1 added [ 146.943220][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.950353][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.030817][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.055799][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.071491][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.104605][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.329427][ T6258] hsr_slave_0: entered promiscuous mode [ 147.348096][ T6258] hsr_slave_1: entered promiscuous mode [ 147.361412][ T6258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.373255][ T6258] Cannot create hsr debugfs directory [ 147.389181][ T6275] chnl_net:caif_netlink_parms(): no params data found [ 147.593251][ T3003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.677301][ T3003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.778039][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.785400][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.792985][ T6275] bridge_slave_0: entered allmulticast mode [ 147.800404][ T6275] bridge_slave_0: entered promiscuous mode [ 147.827786][ T3003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.865258][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.875740][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.883256][ T6275] bridge_slave_1: entered allmulticast mode [ 147.890757][ T6275] bridge_slave_1: entered promiscuous mode [ 147.936975][ T3003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.998064][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.056335][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.172565][ T5141] Bluetooth: hci3: command tx timeout [ 148.183028][ T6275] team0: Port device team_slave_0 added [ 148.281240][ T6275] team0: Port device team_slave_1 added [ 148.498723][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.508223][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.537720][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.554465][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.561474][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.602381][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.778647][ T6275] hsr_slave_0: entered promiscuous mode [ 148.787323][ T6275] hsr_slave_1: entered promiscuous mode [ 148.795239][ T6275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.803355][ T6275] Cannot create hsr debugfs directory [ 148.845829][ T3003] bridge_slave_1: left allmulticast mode [ 148.851683][ T3003] bridge_slave_1: left promiscuous mode [ 148.862722][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.874779][ T3003] bridge_slave_0: left allmulticast mode [ 148.880693][ T3003] bridge_slave_0: left promiscuous mode [ 148.887225][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.896177][ T5141] Bluetooth: hci0: command tx timeout [ 149.231434][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.244761][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.255622][ T3003] bond0 (unregistering): Released all slaves [ 149.473209][ T6258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 149.506105][ T6258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 149.522489][ T6258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 149.618040][ T6258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 149.699021][ T3003] hsr_slave_0: left promiscuous mode [ 149.709076][ T3003] hsr_slave_1: left promiscuous mode [ 149.717649][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.729536][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.742847][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.750447][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.792343][ T3003] veth1_macvtap: left promiscuous mode [ 149.799483][ T3003] veth0_macvtap: left promiscuous mode [ 149.805946][ T3003] veth1_vlan: left promiscuous mode [ 149.811357][ T3003] veth0_vlan: left promiscuous mode [ 150.253674][ T5141] Bluetooth: hci3: command tx timeout [ 150.391406][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 150.430792][ T3003] team0 (unregistering): Port device team_slave_0 removed [ 150.971679][ T5141] Bluetooth: hci0: command tx timeout [ 151.085329][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.139732][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.162535][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.169828][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.201962][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.209269][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.356995][ T6275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.385055][ T6275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.398303][ T6275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.422032][ T6275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.676766][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.717101][ T6275] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.738373][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.745825][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.777959][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.785199][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.926235][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.045670][ T6258] veth0_vlan: entered promiscuous mode [ 152.067046][ T6258] veth1_vlan: entered promiscuous mode [ 152.154191][ T6258] veth0_macvtap: entered promiscuous mode [ 152.179386][ T6258] veth1_macvtap: entered promiscuous mode [ 152.234190][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.254005][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.280441][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.300302][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.322038][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.336671][ T5141] Bluetooth: hci3: command tx timeout [ 152.379057][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.395424][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.405721][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.417617][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.429645][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.463681][ T6258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.474987][ T6258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.485877][ T6258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.495933][ T6258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.531560][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.714849][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.725438][ T6275] veth0_vlan: entered promiscuous mode [ 152.737834][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.764330][ T6275] veth1_vlan: entered promiscuous mode [ 152.834163][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.846322][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.889007][ T6275] veth0_macvtap: entered promiscuous mode [ 152.928044][ T6275] veth1_macvtap: entered promiscuous mode [ 153.004234][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.015581][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.029198][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.040232][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.051282][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.066274][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.085375][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.121439][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.154010][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.199272][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.214271][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.231040][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.256397][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.277019][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.323972][ T6275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.373470][ T6275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.383303][ T6275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.396762][ T6275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.664404][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.672887][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.845216][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.868065][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 syzkaller syzkaller login: [ 158.843894][ T6476] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.311050][ T6482] openvswitch: netlink: Key type 261 is out of range max 32 [ 159.754112][ T6486] random: crng reseeded on system resumption [ 160.100854][ T6496] bond0: option all_slaves_active: invalid value () [ 161.270061][ T6505] openvswitch: netlink: Key type 261 is out of range max 32 [ 162.164465][ T6517] random: crng reseeded on system resumption syzkaller syzkaller login: [ 166.290859][ T6567] openvswitch: netlink: Key type 261 is out of range max 32 [ 166.733354][ T5141] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 167.517173][ T6578] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 171.041668][ T6616] process 'syz.1.108' launched ':,' with NULL argv: empty string added [ 180.298194][ T6702] FAULT_INJECTION: forcing a failure. [ 180.298194][ T6702] name failslab, interval 1, probability 0, space 0, times 1 [ 180.298328][ T6702] CPU: 1 UID: 0 PID: 6702 Comm: syz.0.116 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 180.298370][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 180.298394][ T6702] Call Trace: [ 180.298404][ T6702] [ 180.298416][ T6702] dump_stack_lvl+0x16c/0x1f0 [ 180.298471][ T6702] should_fail_ex+0x512/0x640 [ 180.298518][ T6702] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 180.298561][ T6702] should_failslab+0xc2/0x120 [ 180.298612][ T6702] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 180.298650][ T6702] ? __pfx___might_resched+0x10/0x10 [ 180.298688][ T6702] ? __anon_vma_prepare+0xae/0x5e0 [ 180.298731][ T6702] __anon_vma_prepare+0xae/0x5e0 [ 180.298765][ T6702] ? __pfx___pte_alloc+0x10/0x10 [ 180.298813][ T6702] __vmf_anon_prepare+0x11c/0x240 [ 180.298864][ T6702] do_pte_missing+0x1194/0x3fb0 [ 180.298901][ T6702] ? _raw_spin_unlock+0x28/0x50 [ 180.298934][ T6702] ? __pmd_alloc+0x3c2/0x870 [ 180.298984][ T6702] __handle_mm_fault+0x103d/0x2a40 [ 180.299029][ T6702] ? __pfx___handle_mm_fault+0x10/0x10 [ 180.299100][ T6702] handle_mm_fault+0x3fe/0xad0 [ 180.299140][ T6702] __get_user_pages+0x771/0x36f0 [ 180.299201][ T6702] ? __pfx_mt_find+0x10/0x10 [ 180.299248][ T6702] ? __pfx___get_user_pages+0x10/0x10 [ 180.299316][ T6702] populate_vma_page_range+0x278/0x3a0 [ 180.299350][ T6702] ? __pfx_populate_vma_page_range+0x10/0x10 [ 180.299402][ T6702] ? __pfx_find_vma_intersection+0x10/0x10 [ 180.299453][ T6702] ? do_mmap+0x69c/0x11b0 [ 180.299504][ T6702] __mm_populate+0x1d8/0x380 [ 180.299535][ T6702] ? __pfx___mm_populate+0x10/0x10 [ 180.299569][ T6702] ? up_write+0x1b2/0x520 [ 180.299629][ T6702] vm_mmap_pgoff+0x362/0x450 [ 180.299686][ T6702] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 180.299745][ T6702] ? __x64_sys_futex+0x1e0/0x4c0 [ 180.299781][ T6702] ? __x64_sys_futex+0x1e9/0x4c0 [ 180.299821][ T6702] ksys_mmap_pgoff+0x7d/0x5c0 [ 180.299868][ T6702] ? rcu_is_watching+0x12/0xc0 [ 180.299903][ T6702] __x64_sys_mmap+0x125/0x190 [ 180.299939][ T6702] do_syscall_64+0xcd/0x230 [ 180.299988][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.300021][ T6702] RIP: 0033:0x7fb42998e969 [ 180.300047][ T6702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.300089][ T6702] RSP: 002b:00007fb42a854038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 180.300125][ T6702] RAX: ffffffffffffffda RBX: 00007fb429bb5fa0 RCX: 00007fb42998e969 [ 180.300146][ T6702] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 180.300167][ T6702] RBP: 00007fb429a10ab1 R08: 0000000000000002 R09: 0000000000008000 [ 180.300187][ T6702] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 180.300207][ T6702] R13: 0000000000000000 R14: 00007fb429bb5fa0 R15: 00007ffdf52c50b8 [ 180.300252][ T6702] [ 180.395124][ T6702] netlink: 186 bytes leftover after parsing attributes in process `syz.0.116'. [ 187.694565][ T6787] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 188.908599][ T6791] random: crng reseeded on system resumption [ 188.930558][ T6798] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7ffa74eed pfn:0x79400 [ 188.967671][ T6798] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 189.006952][ T6798] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 189.095481][ T6798] raw: 00000007ffa74eed 0000000000000000 0000000400000002 0000000000000000 [ 189.148891][ T6798] page dumped because: unmovable page [ 189.160736][ T6798] page_owner tracks the page as allocated [ 189.170560][ T6798] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5825, tgid 5825 (syz-executor), ts 97035598978, free_ts 96837784274 [ 189.311431][ T6798] post_alloc_hook+0x181/0x1b0 [ 189.354533][ T6798] get_page_from_freelist+0x135c/0x3920 [ 189.364458][ T6798] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 189.431091][ T6798] alloc_pages_mpol+0x1fb/0x550 [ 189.448940][ T6798] alloc_pages_noprof+0x131/0x390 [ 189.468619][ T6798] __vmalloc_node_range_noprof+0x732/0x1540 [ 189.487849][ T6798] vmalloc_user_noprof+0x6b/0x90 [ 189.505745][ T6798] kcov_ioctl+0x4c/0x730 [ 189.532667][ T6798] __x64_sys_ioctl+0x190/0x200 [ 189.537610][ T6798] do_syscall_64+0xcd/0x230 [ 189.589832][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.598497][ T6798] page last free pid 5818 tgid 5818 stack trace: [ 189.619331][ T6798] free_unref_folios+0x999/0x1630 [ 189.640765][ T6798] folios_put_refs+0x56f/0x740 [ 189.650209][ T6798] free_pages_and_swap_cache+0x245/0x4a0 [ 189.855245][ T6798] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 190.009573][ T6798] tlb_finish_mmu+0x168/0x7b0 [ 190.065718][ T6798] vms_clear_ptes+0x55e/0x770 [ 190.070566][ T6798] vms_complete_munmap_vmas+0x1ca/0x970 [ 190.212936][ T6798] do_vmi_align_munmap+0x43b/0x7d0 [ 190.218185][ T6798] do_vmi_munmap+0x208/0x3e0 [ 190.316157][ T6798] __vm_munmap+0x19a/0x390 [ 190.361933][ T6798] __x64_sys_munmap+0x59/0x80 [ 190.366798][ T6798] do_syscall_64+0xcd/0x230 [ 190.371514][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f syzkaller syzkaller login: [ 198.610426][ T6909] netlink: 186 bytes leftover after parsing attributes in process `syz.2.168'. [ 204.628353][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.644281][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: [ 217.213400][ T7129] Invalid ELF header magic: != ELF [ 217.701393][ T7132] 0x000200000001-0xa29656a63616329 : "" [ 217.707296][ T7132] mtd: partition "" is out of reach -- disabled [ 217.803901][ T7132] ftl_cs: FTL header not found. [ 218.625322][ T7145] smc: net device syz_tun applied user defined pnetid ETHTOOL syzkaller syzkaller login: [ 222.058155][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 222.066396][ T5831] Bluetooth: hci1: command 0x0406 tx timeout syzkaller syzkaller login: [ 224.287058][ T7204] syz.3.231: vmalloc error: size 1835008, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 224.303635][ T7204] CPU: 0 UID: 0 PID: 7204 Comm: syz.3.231 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 224.303682][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 224.303702][ T7204] Call Trace: [ 224.303713][ T7204] [ 224.303726][ T7204] dump_stack_lvl+0x16c/0x1f0 [ 224.303780][ T7204] warn_alloc+0x248/0x3a0 [ 224.303821][ T7204] ? __pfx_warn_alloc+0x10/0x10 [ 224.303872][ T7204] ? alloc_pages_mpol+0x25a/0x550 [ 224.303917][ T7204] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 224.303961][ T7204] ? trace_kmalloc+0x2b/0xd0 [ 224.304021][ T7204] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 224.304093][ T7204] ? __snd_dma_alloc_pages+0x50/0x90 [ 224.304157][ T7204] ? do_alloc_pages+0xd7/0x280 [ 224.304208][ T7204] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.304262][ T7204] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 224.304312][ T7204] ? __snd_dma_alloc_pages+0x50/0x90 [ 224.304363][ T7204] vmalloc_noprof+0x6b/0x90 [ 224.304410][ T7204] ? __snd_dma_alloc_pages+0x50/0x90 [ 224.304455][ T7204] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 224.304484][ T7204] __snd_dma_alloc_pages+0x50/0x90 [ 224.304535][ T7204] snd_dma_alloc_dir_pages+0x151/0x240 [ 224.304587][ T7204] do_alloc_pages+0x115/0x280 [ 224.304635][ T7204] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 224.304688][ T7204] snd_pcm_hw_params+0x15e1/0x1b40 [ 224.304747][ T7204] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 224.304797][ T7204] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 224.304858][ T7204] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 224.304907][ T7204] ? __asan_memset+0x23/0x50 [ 224.304965][ T7204] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 224.305019][ T7204] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 224.305087][ T7204] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 224.305135][ T7204] ? snd_pcm_oss_sync+0x30c/0x840 [ 224.305208][ T7204] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 224.305257][ T7204] snd_pcm_oss_sync+0x32e/0x840 [ 224.305305][ T7204] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 224.305351][ T7204] snd_pcm_oss_release+0x28b/0x310 [ 224.305399][ T7204] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 224.305442][ T7204] __fput+0x3ff/0xb70 [ 224.305493][ T7204] task_work_run+0x14d/0x240 [ 224.305544][ T7204] ? __pfx_task_work_run+0x10/0x10 [ 224.305595][ T7204] ? __pfx___do_sys_close_range+0x10/0x10 [ 224.305626][ T7204] ? rcu_is_watching+0x12/0xc0 [ 224.305665][ T7204] syscall_exit_to_user_mode+0x27b/0x2a0 [ 224.305713][ T7204] do_syscall_64+0xda/0x230 [ 224.305765][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.305798][ T7204] RIP: 0033:0x7f1f4238e969 [ 224.305825][ T7204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.305865][ T7204] RSP: 002b:00007f1f43178038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 224.305897][ T7204] RAX: 0000000000000000 RBX: 00007f1f425b5fa0 RCX: 00007f1f4238e969 [ 224.305920][ T7204] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 224.305940][ T7204] RBP: 00007f1f42410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 224.305958][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.305977][ T7204] R13: 0000000000000000 R14: 00007f1f425b5fa0 R15: 00007ffd46c70e78 [ 224.306020][ T7204] [ 224.675507][ T7204] Mem-Info: [ 224.734122][ T7204] active_anon:16762 inactive_anon:0 isolated_anon:0 [ 224.734122][ T7204] active_file:11215 inactive_file:39027 isolated_file:0 [ 224.734122][ T7204] unevictable:768 dirty:500 writeback:0 [ 224.734122][ T7204] slab_reclaimable:10086 slab_unreclaimable:94976 [ 224.734122][ T7204] mapped:24035 shmem:1442 pagetables:822 [ 224.734122][ T7204] sec_pagetables:0 bounce:0 [ 224.734122][ T7204] kernel_misc_reclaimable:0 [ 224.734122][ T7204] free:1340717 free_pcp:1345 free_cma:0 [ 224.781076][ T7204] Node 0 active_anon:67048kB inactive_anon:0kB active_file:44860kB inactive_file:156028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96140kB dirty:1996kB writeback:0kB shmem:4232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10452kB pagetables:3288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB                                                                                                                                                                                                                                   [ 225.013428][ T7204] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 225.064323][ T7204] Node 0 DMA32: 53*4kB (UME) 88*8kB (UE) 599*16kB (UME) 360*32kB (UME) 376*64kB (UME) 152*128kB (UME) 82*256kB (UME) 47*512kB (UME) 24*1024kB (UM) 12*2048kB (UME) 312*4096kB (UM) = 1437700kB syzkaller syzkaller login: [ 225.213169][ T7204] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 225.243012][ T7204] Node 1 Normal: 56*4kB (UE) 45*8kB (UME) 29*16kB (UE) 174*32kB (UE) 93*64kB (UME) 28*128kB (UE) 8*256kB (UE) 7*512kB (UM) 6*1024kB (UME) 5*2048kB (UE) 945*4096kB (UM) = 3908888kB [ 225.269175][ T7204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.385899][ T7204] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.485803][ T7204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.497858][ T7204] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.519487][ T7204] 51682 total pagecache pages [ 225.525434][ T7204] 0 pages in swap cache [ 225.530292][ T7204] Free swap = 124996kB [ 225.535830][ T7204] Total swap = 124996kB [ 225.540679][ T7204] 2097051 pages RAM [ 225.545265][ T7204] 0 pages HighMem/MovableOnly [ 225.573846][ T7204] 428898 pages reserved [ 225.589512][ T7204] 0 pages cma reserved [ 226.534642][ T7227] 0x000200000001-0xa29656a63616329 : "" [ 226.553864][ T7227] mtd: partition "" is out of reach -- disabled [ 226.582975][ T7227] ftl_cs: FTL header not found. syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: [ 236.176806][ T7347] 0x000200000001-0xa29656a63616329 : "" [ 236.193830][ T7347] mtd: partition "" is out of reach -- disabled [ 236.238161][ T7347] ftl_cs: FTL header not found. syzkaller syzkaller login: [ 237.661872][ T7370] syz.0.267: vmalloc error: size 1839104, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.682089][ T7370] CPU: 1 UID: 0 PID: 7370 Comm: syz.0.267 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 237.682139][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.682162][ T7370] Call Trace: [ 237.682174][ T7370] [ 237.682187][ T7370] dump_stack_lvl+0x16c/0x1f0 [ 237.682243][ T7370] warn_alloc+0x248/0x3a0 [ 237.682286][ T7370] ? __pfx_warn_alloc+0x10/0x10 [ 237.682324][ T7370] ? alloc_pages_mpol+0x25a/0x550 [ 237.682377][ T7370] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 237.682422][ T7370] ? trace_kmalloc+0x2b/0xd0 [ 237.682483][ T7370] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 237.682558][ T7370] ? __snd_dma_alloc_pages+0x50/0x90 [ 237.682618][ T7370] ? do_alloc_pages+0xd7/0x280 [ 237.682669][ T7370] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.682725][ T7370] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 237.682778][ T7370] ? __snd_dma_alloc_pages+0x50/0x90 [ 237.682832][ T7370] vmalloc_noprof+0x6b/0x90 [ 237.682881][ T7370] ? __snd_dma_alloc_pages+0x50/0x90 [ 237.682931][ T7370] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 237.682963][ T7370] __snd_dma_alloc_pages+0x50/0x90 [ 237.683017][ T7370] snd_dma_alloc_dir_pages+0x151/0x240 [ 237.683076][ T7370] do_alloc_pages+0x115/0x280 [ 237.683131][ T7370] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 237.683193][ T7370] snd_pcm_hw_params+0x15e1/0x1b40 [ 237.683252][ T7370] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 237.683306][ T7370] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 237.683369][ T7370] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 237.683421][ T7370] ? __asan_memset+0x23/0x50 [ 237.683482][ T7370] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 237.683540][ T7370] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 237.683611][ T7370] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 237.683661][ T7370] ? snd_pcm_oss_sync+0x30c/0x840 [ 237.683737][ T7370] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 237.683787][ T7370] snd_pcm_oss_sync+0x32e/0x840 [ 237.683839][ T7370] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 237.683884][ T7370] snd_pcm_oss_release+0x28b/0x310 [ 237.683933][ T7370] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 237.683978][ T7370] __fput+0x3ff/0xb70 [ 237.684028][ T7370] task_work_run+0x14d/0x240 [ 237.684083][ T7370] ? __pfx_task_work_run+0x10/0x10 [ 237.684133][ T7370] ? __pfx___do_sys_close_range+0x10/0x10 [ 237.684164][ T7370] ? rcu_is_watching+0x12/0xc0 [ 237.684203][ T7370] syscall_exit_to_user_mode+0x27b/0x2a0 [ 237.684249][ T7370] do_syscall_64+0xda/0x230 [ 237.684298][ T7370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.684331][ T7370] RIP: 0033:0x7fb42998e969 [ 237.684367][ T7370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.684402][ T7370] RSP: 002b:00007fb42a854038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 237.684435][ T7370] RAX: 0000000000000000 RBX: 00007fb429bb5fa0 RCX: 00007fb42998e969 [ 237.684458][ T7370] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 237.684478][ T7370] RBP: 00007fb429a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 237.684499][ T7370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.684520][ T7370] R13: 0000000000000000 R14: 00007fb429bb5fa0 R15: 00007ffdf52c50b8 [ 237.684564][ T7370] [ 237.684576][ T7370] Mem-Info: [ 238.078663][ T7370] active_anon:17618 inactive_anon:0 isolated_anon:0 [ 238.078663][ T7370] active_file:11227 inactive_file:39035 isolated_file:0 [ 238.078663][ T7370] unevictable:768 dirty:717 writeback:0 [ 238.078663][ T7370] slab_reclaimable:9978 slab_unreclaimable:94669 [ 238.078663][ T7370] mapped:23993 shmem:1442 pagetables:809 [ 238.078663][ T7370] sec_pagetables:0 bounce:0 [ 238.078663][ T7370] kernel_misc_reclaimable:0 [ 238.078663][ T7370] free:1340125 free_pcp:1286 free_cma:0 syzkaller syzkaller login: [ 238.342561][ T7370] Node 0 active_anon:70872kB inactive_anon:0kB active_file:44908kB inactive_file:156060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95972kB dirty:2864kB writeback:0kB shmem:4232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10716kB pagetables:3232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 238.890097][ T7370] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:4kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 238.927424][ T7370] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 238.957651][ T7370] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 238.964073][ T7370] Node 0 DMA32 free:1431108kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:73824kB inactive_anon:0kB active_file:44908kB inactive_file:154228kB unevictable:1536kB writepending:2864kB present:3129332kB managed:2544188kB mlocked:0kB bounce:0kB free_pcp:4984kB local_pcp:2040kB free_cma:0kB [ 239.134892][ T7370] lowmem_reserve[]: 0 0 1 1 1 [ 239.143622][ T7370] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 239.174876][ T7370] lowmem_reserve[]: 0 0 0 0 0 [ 239.180608][ T7370] Node 1 Normal free:3908696kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1540kB local_pcp:596kB free_cma:0kB [ 239.214401][ T7370] lowmem_reserve[]: 0 0 0 0 0 [ 239.220133][ T7370] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.273434][ T7370] Node 0 DMA32: 58*4kB (UE) 60*8kB (UME) 90*16kB (UME) 385*32kB (UME) 402*64kB (UME) 153*128kB (UME) 81*256kB (UME) 46*512kB (UME) 23*1024kB (UM) 13*2048kB (UME) 312*4096kB (UM) = 1432200kB [ 239.370685][ T7370] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 239.384695][ T7370] Node 1 Normal: 106*4kB (UME) 14*8kB (UME) 30*16kB (UME) 163*32kB (UME) 92*64kB (UE) 28*128kB (UE) 9*256kB (UME) 7*512kB (UM) 6*1024kB (UME) 5*2048kB (UE) 945*4096kB (UM) = 3908696kB [ 239.419025][ T7370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.452390][ T7370] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.462981][ T7370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.475068][ T7370] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.525527][ T7370] 51704 total pagecache pages [ 239.581245][ T7370] 0 pages in swap cache [ 239.594174][ T7370] Free swap = 124996kB [ 239.601473][ T7370] Total swap = 124996kB [ 239.606179][ T7370] 2097051 pages RAM [ 239.615456][ T7370] 0 pages HighMem/MovableOnly [ 239.623527][ T7370] 428898 pages reserved [ 239.629163][ T7370] 0 pages cma reserved syzkaller syzkaller login: [ 240.997047][ T7409] random: crng reseeded on system resumption syzkaller syzkaller login: [ 245.059933][ T7448] 0x000200000001-0xa29656a63616329 : "" [ 245.093431][ T7448] mtd: partition "" is out of reach -- disabled [ 245.198559][ T7448] ftl_cs: FTL header not found. syzkaller syzkaller login: [ 247.163471][ T7473] random: crng reseeded on system resumption [ 248.046171][ T7495] syz.0.296: vmalloc error: size 1859584, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 248.067826][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz.0.296 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 248.067877][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 248.067898][ T7495] Call Trace: [ 248.067909][ T7495]                                                                                                                                                                                                                                                                                                        [ 248.588558][ T7495] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.622626][ T7495] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 248.629140][ T7495] Node 0 DMA32 free:1433624kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:77452kB inactive_anon:0kB active_file:44912kB inactive_file:154308kB unevictable:1536kB writepending:2864kB present:3129332kB managed:2544188kB mlocked:0kB bounce:0kB free_pcp:3872kB local_pcp:976kB free_cma:0kB [ 248.684357][ T7495] lowmem_reserve[]: 0 0 1 1 1 [ 248.689732][ T7495] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB syzkaller syzkaller login: [ 248.786125][ T7495] lowmem_reserve[]: 0 0 0 0 0 [ 248.802079][ T7495] Node 1 Normal free:3907776kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1964kB local_pcp:500kB free_cma:0kB [ 248.875562][ T7495] lowmem_reserve[]: 0 0 0 0 0 [ 248.891222][ T7495] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 248.908450][ T7495] Node 0 DMA32: 652*4kB (UME) 412*8kB (UME) 467*16kB (UME) 314*32kB (UME) 409*64kB (UME) 162*128kB (UME) 82*256kB (UME) 47*512kB (UME) 24*1024kB (UM) 12*2048kB (UME) 312*4096kB (UM) = 1442496kB [ 248.939575][ T7495] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 248.968104][ T7495] Node 1 Normal: 50*4kB (UME) 5*8kB (UME) 19*16kB (UME) 145*32kB (UME) 94*64kB (UME) 28*128kB (UE) 9*256kB (UME) 7*512kB (UM) 6*1024kB (UME) 5*2048kB (UE) 945*4096kB (UM) = 3907776kB [ 249.007974][ T7495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.019565][ T7495] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 249.030475][ T7495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.042124][ T7495] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 249.053807][ T7495] 51678 total pagecache pages [ 249.059031][ T7495] 0 pages in swap cache [ 249.065356][ T7495] Free swap = 124996kB [ 249.069988][ T7495] Total swap = 124996kB [ 249.074804][ T7495] 2097051 pages RAM [ 249.079062][ T7495] 0 pages HighMem/MovableOnly [ 249.084506][ T7495] 428898 pages reserved [ 249.089313][ T7495] 0 pages cma reserved syzkaller syzkaller login: syzkaller syzkaller login:         syzkaller syzkaller login: syzkaller syzkaller login: [ 261.483125][ T7661] random: crng reseeded on system resumption syzkaller syzkaller login: syzkaller syzkaller login: [ 266.038409][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.052404][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 267.147344][ T7746] bridge0: port 3(gretap0) entered blocking state [ 267.173006][ T7746] bridge0: port 3(gretap0) entered disabled state [ 267.206831][ T7746] gretap0: entered allmulticast mode [ 267.232372][ T7746] gretap0: entered promiscuous mode [ 267.286686][ T7746] bridge0: port 3(gretap0) entered blocking state [ 267.295363][ T7746] bridge0: port 3(gretap0) entered forwarding state [ 268.112795][ T7175] Bluetooth: hci3: command 0x0406 tx timeout [ 268.125430][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 268.472963][ T7767] rnbd_client L202: map_device: Unknown parameter or missing value '(' syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: [ 278.388826][ T7913] Setting dangerous option i915.mitigations - tainting kernel syzkaller syzkaller login: [ 282.903173][ T7987] rnbd_client L202: map_device: Unknown parameter or missing value '(' syzkaller syzkaller login: syzkaller syzkaller login: [ 287.477762][ T8054] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 288.245569][ T8060] bridge0: port 3(gretap0) entered blocking state [ 288.257198][ T8060] bridge0: port 3(gretap0) entered disabled state [ 288.281812][ T8060] gretap0: entered allmulticast mode [ 288.304123][ T8060] gretap0: entered promiscuous mode [ 288.310461][ T8060] bridge0: port 3(gretap0) entered blocking state [ 288.317742][ T8060] bridge0: port 3(gretap0) entered forwarding state syzkaller syzkaller login: [ 289.972435][ T8086] random: crng reseeded on system resumption [ 290.910554][ T8103] Setting dangerous option i915.mitigations - tainting kernel [ 293.074968][ T8125] bridge0: port 3(gretap0) entered blocking state [ 293.082600][ T8125] bridge0: port 3(gretap0) entered disabled state [ 293.090150][ T8125] gretap0: entered allmulticast mode [ 293.100713][ T8125] gretap0: entered promiscuous mode [ 293.107662][ T8125] bridge0: port 3(gretap0) entered blocking state [ 293.114938][ T8125] bridge0: port 3(gretap0) entered forwarding state [ 295.033469][ T8147] random: crng reseeded on system resumption syzkaller syzkaller login: [ 296.518294][ T8165] Setting dangerous option i915.mitigations - tainting kernel [ 296.989000][ T8172] random: crng reseeded on system resumption [ 299.164689][ T8202] random: crng reseeded on system resumption [ 303.078475][ T8253] random: crng reseeded on system resumption syzkaller syzkaller login: [ 303.315277][ T8260] netlink: 80 bytes leftover after parsing attributes in process `syz.1.463'. [ 303.872640][ T8268] random: crng reseeded on system resumption [ 305.058798][ T8290] Invalid ELF header magic: != ELF [ 305.507410][ T8301] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 305.507410][ T8301] The task syz.2.460 (8301) triggered the difference, watch for misbehavior. syzkaller syzkaller login: [ 307.006832][ T8327] random: crng reseeded on system resumption [ 307.940230][ T8339] random: crng reseeded on system resumption [ 310.547793][ T8377] random: crng reseeded on system resumption syzkaller syzkaller login: syzkaller syzkaller login: [ 314.268241][ T8436] random: crng reseeded on system resumption [ 316.142027][ T8459] random: crng reseeded on system resumption syzkaller syzkaller login: [ 317.333042][ T8484] random: crng reseeded on system resumption [ 318.713666][ T8513] random: crng reseeded on system resumption [ 320.328255][ T8538] random: crng reseeded on system resumption syzkaller syzkaller login: [ 321.409892][ T8556] random: crng reseeded on system resumption [ 322.533394][ T8561] random: crng reseeded on system resumption [ 323.769622][ T8585] random: crng reseeded on system resumption [ 327.026425][ T8631] random: crng reseeded on system resumption [ 327.449323][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.462757][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.126675][ T8669] random: crng reseeded on system resumption [ 330.667697][ T8677] random: crng reseeded on system resumption [ 331.898453][ T8702] random: crng reseeded on system resumption [ 334.218501][ T8731] random: crng reseeded on system resumption [ 335.861840][ T8758] random: crng reseeded on system resumption syzkaller syzkaller login: [ 337.470255][ T8772] Invalid ELF header magic: != ELF [ 339.148630][ T8800] random: crng reseeded on system resumption [ 340.309383][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 340.345898][ T8821] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 341.824641][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 344.088426][ T8875] random: crng reseeded on system resumption syzkaller syzkaller login: [ 348.993577][ T8936] random: crng reseeded on system resumption syzkaller syzkaller login: [ 352.978213][ T9009] random: crng reseeded on system resumption [ 353.286844][ T9015] Device name cannot be null; rc = [-22] syzkaller syzkaller login: [ 355.111815][ T9030] random: crng reseeded on system resumption [ 355.672280][ T9038] random: crng reseeded on system resumption syzkaller syzkaller login: [ 358.284448][ T30] audit: type=1800 audit(6041037915.967:2): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.622" name="dummy_udc" dev="gadgetfs" ino=6661 res=0 errno=0 syzkaller syzkaller login: syzkaller syzkaller login: [ 366.471386][ T9188] random: crng reseeded on system resumption syzkaller syzkaller login: syzkaller syzkaller login: [ 368.196384][ T9211] random: crng reseeded on system resumption syzkaller syzkaller login: [ 371.764073][ T9272] random: crng reseeded on system resumption syzkaller syzkaller login: [ 374.786076][ T9312] random: crng reseeded on system resumption [ 375.298929][ T9322] FAULT_INJECTION: forcing a failure. [ 375.298929][ T9322] name failslab, interval 1, probability 0, space 0, times 0 [ 375.466181][ T9322] CPU: 1 UID: 0 PID: 9322 Comm: syz.0.672 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 375.466239][ T9322] Tainted: [U]=USER [ 375.466251][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 375.466285][ T9322] Call Trace: [ 375.466297][ T9322] [ 375.466311][ T9322] dump_stack_lvl+0x16c/0x1f0 [ 375.466368][ T9322] should_fail_ex+0x512/0x640 [ 375.466418][ T9322] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 375.466466][ T9322] should_failslab+0xc2/0x120 [ 375.466507][ T9322] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 375.466551][ T9322] ? devinet_init_net+0xc3/0x910 [ 375.466614][ T9322] kmemdup_noprof+0x29/0x60 [ 375.466660][ T9322] devinet_init_net+0xc3/0x910 [ 375.466704][ T9322] ? __pfx_devinet_init_net+0x10/0x10 [ 375.466742][ T9322] ops_init+0x1df/0x5f0 [ 375.466786][ T9322] setup_net+0x21e/0x850 [ 375.466828][ T9322] ? __pfx_setup_net+0x10/0x10 [ 375.466863][ T9322] ? lockdep_init_map_type+0x5c/0x280 [ 375.466909][ T9322] ? __pfx_down_read_killable+0x10/0x10 [ 375.466966][ T9322] ? debug_mutex_init+0x37/0x70 [ 375.467024][ T9322] copy_net_ns+0x2a6/0x5f0 [ 375.467071][ T9322] create_new_namespaces+0x3ea/0xad0 [ 375.467119][ T9322] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 375.467159][ T9322] ksys_unshare+0x45b/0xa40 [ 375.467205][ T9322] ? __pfx_ksys_unshare+0x10/0x10 [ 375.467247][ T9322] ? xfd_validate_state+0x5d/0x180 [ 375.467303][ T9322] ? rcu_is_watching+0x12/0xc0 [ 375.467344][ T9322] __x64_sys_unshare+0x31/0x40 [ 375.467388][ T9322] do_syscall_64+0xcd/0x230 [ 375.467436][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.467469][ T9322] RIP: 0033:0x7fb42998e969 [ 375.467495][ T9322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.467527][ T9322] RSP: 002b:00007fb42a833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 375.467558][ T9322] RAX: ffffffffffffffda RBX: 00007fb429bb6080 RCX: 00007fb42998e969 [ 375.467588][ T9322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 375.467609][ T9322] RBP: 00007fb429a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 375.467629][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.467649][ T9322] R13: 0000000000000000 R14: 00007fb429bb6080 R15: 00007ffdf52c50b8 [ 375.467694][ T9322] syzkaller syzkaller login: syzkaller syzkaller login: [ 378.425395][ T9367] random: crng reseeded on system resumption [ 380.954536][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 381.025640][ T9418] netlink: 354 bytes leftover after parsing attributes in process `syz.0.695'. [ 381.228939][ T9421] random: crng reseeded on system resumption syzkaller syzkaller login: syzkaller syzkaller login: [ 384.430845][ T9476] can: request_module (can-proto-3) failed. [ 386.940720][ T9502] random: crng reseeded on system resumption [ 387.955314][ T9513] random: crng reseeded on system resumption [ 388.866047][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.881910][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.976238][ T9553] FAULT_INJECTION: forcing a failure. [ 389.976238][ T9553] name failslab, interval 1, probability 0, space 0, times 0 [ 390.071900][ T9562] random: crng reseeded on system resumption [ 390.097696][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.3.720 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 390.097754][ T9553] Tainted: [U]=USER [ 390.097765][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 390.097784][ T9553] Call Trace: [ 390.097796][ T9553] [ 390.097808][ T9553] dump_stack_lvl+0x16c/0x1f0 [ 390.097861][ T9553] should_fail_ex+0x512/0x640 [ 390.097907][ T9553] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 390.097948][ T9553] should_failslab+0xc2/0x120 [ 390.097989][ T9553] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 390.098024][ T9553] ? __proc_create+0xc3/0x8c0 [ 390.098057][ T9553] ? __proc_create+0x2ce/0x8c0 [ 390.098100][ T9553] __proc_create+0x2ce/0x8c0 [ 390.098139][ T9553] ? __pfx___proc_create+0x10/0x10 [ 390.098445][ T9553] ? _raw_write_unlock+0x28/0x50 syzkaller[ 390.098497][ T9553] ? proc_register+0x314/0x5f0 syzkaller log[ 390.098664][ T9553] proc_create_reg+0x7d/0x180 in: [ 390.098711][ T9553] proc_create_net_data+0x8e/0x1b0 [ 390.098753][ T9553] ? __pfx_proc_create_net_data+0x10/0x10 [ 390.098807][ T9553] nfs_fs_proc_net_init+0x141/0x1e0 [ 390.098859][ T9553] nfs_net_init+0x130/0x300 [ 390.098902][ T9553] ? __pfx_nfs_net_init+0x10/0x10 [ 390.098949][ T9553] ops_init+0x1df/0x5f0 [ 390.098993][ T9553] setup_net+0x21e/0x850 [ 390.099029][ T9553] ? __pfx_setup_net+0x10/0x10 [ 390.099060][ T9553] ? lockdep_init_map_type+0x5c/0x280 [ 390.099102][ T9553] ? __pfx_down_read_killable+0x10/0x10 [ 390.099156][ T9553] ? debug_mutex_init+0x37/0x70 [ 390.099208][ T9553] copy_net_ns+0x2a6/0x5f0 [ 390.099273][ T9553] create_new_namespaces+0x3ea/0xad0 [ 390.099324][ T9553] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 390.099365][ T9553] ksys_unshare+0x45b/0xa40 [ 390.099410][ T9553] ? __pfx_ksys_unshare+0x10/0x10 [ 390.099449][ T9553] ? xfd_validate_state+0x5d/0x180 [ 390.099504][ T9553] ? rcu_is_watching+0x12/0xc0 [ 390.099544][ T9553] __x64_sys_unshare+0x31/0x40 [ 390.099586][ T9553] do_syscall_64+0xcd/0x230 [ 390.099633][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.099667][ T9553] RIP: 0033:0x7f1f4238e969 [ 390.099694][ T9553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.099726][ T9553] RSP: 002b:00007f1f43157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 390.099757][ T9553] RAX: ffffffffffffffda RBX: 00007f1f425b6080 RCX: 00007f1f4238e969 [ 390.099778][ T9553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 390.099798][ T9553] RBP: 00007f1f42410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 390.099819][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.099840][ T9553] R13: 0000000000000000 R14: 00007f1f425b6080 R15: 00007ffd46c70e78 [ 390.099884][ T9553] [ 390.796373][ T9553] ------------[ cut here ]------------ [ 390.803031][ T9553] remove_proc_entry: removing non-empty directory 'net/rpc', leaking at least 'nfs' [ 390.875253][ T9553] WARNING: CPU: 1 PID: 9553 at fs/proc/generic.c:727 remove_proc_entry+0x45e/0x530 [ 390.886257][ T9553] Modules linked in: [ 390.891252][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.3.720 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 390.906504][ T9553] Tainted: [U]=USER [ 390.911343][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 390.923294][ T9553] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 390.929642][ T9553] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 c0 6b a2 8b 48 c7 c7 e0 6a a2 8b e8 83 f7 1f ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 64 16 60 ff 90 48 b8 00 00 00 00 00 [ 390.952085][ T9553] RSP: 0000:ffffc90005347b70 EFLAGS: 00010282 [ 390.959115][ T9553] RAX: 0000000000000000 RBX: ffff88807d2df3c0 RCX: ffffc9000d0dc000 [ 390.968537][ T9553] RDX: 0000000000080000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 390.977548][ T9553] RBP: ffff88814d61ee80 R08: 0000000000000001 R09: 0000000000000000 [ 390.986395][ T9553] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88814d61edc0 [ 390.995370][ T9553] R13: ffff88814d61eea4 R14: ffff8880330b35e4 R15: dffffc0000000000 [ 391.004319][ T9553] FS: 00007f1f431576c0(0000) GS:ffff888124aed000(0000) knlGS:0000000000000000 [ 391.014482][ T9553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.021967][ T9553] CR2: 0000001b332eaff8 CR3: 00000000353d2000 CR4: 00000000003526f0 [ 391.030822][ T9553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 391.040019][ T9553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 391.049139][ T9553] Call Trace: [ 391.053019][ T9553] [ 391.056325][ T9553] ? __pfx_remove_proc_entry+0x10/0x10 [ 391.062480][ T9553] ? kfree+0x2b6/0x4d0 [ 391.067028][ T9553] ? cache_destroy_net+0x31/0x50 [ 391.072733][ T9553] ? sunrpc_exit_net+0x37/0x90 [ 391.072829][ T9553] sunrpc_exit_net+0x46/0x90 [ 391.083773][ T9553] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 391.089850][ T9553] ops_exit_list+0xb0/0x180 [ 391.095145][ T9553] setup_net+0x4e8/0x850 [ 391.099899][ T9553] ? __pfx_setup_net+0x10/0x10 [ 391.105393][ T9553] ? lockdep_init_map_type+0x5c/0x280 [ 391.111737][ T9553] ? __pfx_down_read_killable+0x10/0x10 [ 391.118524][ T9553] ? debug_mutex_init+0x37/0x70 [ 391.124280][ T9553] copy_net_ns+0x2a6/0x5f0 [ 391.129236][ T9553] create_new_namespaces+0x3ea/0xad0 [ 391.135198][ T9553] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 391.141615][ T9553] ksys_unshare+0x45b/0xa40 [ 391.146649][ T9553] ? __pfx_ksys_unshare+0x10/0x10 [ 391.152423][ T9553] ? xfd_validate_state+0x5d/0x180 [ 391.158140][ T9553] ? rcu_is_watching+0x12/0xc0 [ 391.163495][ T9553] __x64_sys_unshare+0x31/0x40 [ 391.168803][ T9553] do_syscall_64+0xcd/0x230 [ 391.173895][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.180947][ T9553] RIP: 0033:0x7f1f4238e969 [ 391.185842][ T9553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.207683][ T9553] RSP: 002b:00007f1f43157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 391.217282][ T9553] RAX: ffffffffffffffda RBX: 00007f1f425b6080 RCX: 00007f1f4238e969 [ 391.226570][ T9553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 391.235569][ T9553] RBP: 00007f1f42410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 391.244436][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.253437][ T9553] R13: 0000000000000000 R14: 00007f1f425b6080 R15: 00007ffd46c70e78 [ 391.262418][ T9553] [ 391.265816][ T9553] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 391.273873][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.3.720 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 391.288767][ T9553] Tainted: [U]=USER [ 391.293075][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 391.304262][ T9553] Call Trace: [ 391.307909][ T9553] [ 391.311173][ T9553] dump_stack_lvl+0x3d/0x1f0 [ 391.316295][ T9553] panic+0x71c/0x800 [ 391.320649][ T9553] ? __pfx_panic+0x10/0x10 [ 391.325570][ T9553] ? show_trace_log_lvl+0x29b/0x3e0 [ 391.331349][ T9553] ? remove_proc_entry+0x45e/0x530 [ 391.337024][ T9553] check_panic_on_warn+0xab/0xb0 [ 391.342532][ T9553] __warn+0xf6/0x3c0 [ 391.346866][ T9553] ? preempt_schedule_notrace+0x62/0xe0 [ 391.353299][ T9553] ? remove_proc_entry+0x45e/0x530 [ 391.358991][ T9553] report_bug+0x3c3/0x580 [ 391.364010][ T9553] ? remove_proc_entry+0x45e/0x530 [ 391.369791][ T9553] handle_bug+0x184/0x210 [ 391.374962][ T9553] exc_invalid_op+0x17/0x50 [ 391.379976][ T9553] asm_exc_invalid_op+0x1a/0x20 [ 391.385444][ T9553] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 391.391881][ T9553] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 c0 6b a2 8b 48 c7 c7 e0 6a a2 8b e8 83 f7 1f ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 64 16 60 ff 90 48 b8 00 00 00 00 00 [ 391.414268][ T9553] RSP: 0000:ffffc90005347b70 EFLAGS: 00010282 [ 391.421009][ T9553] RAX: 0000000000000000 RBX: ffff88807d2df3c0 RCX: ffffc9000d0dc000 [ 391.429874][ T9553] RDX: 0000000000080000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 391.438693][ T9553] RBP: ffff88814d61ee80 R08: 0000000000000001 R09: 0000000000000000 [ 391.447987][ T9553] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88814d61edc0 [ 391.456811][ T9553] R13: ffff88814d61eea4 R14: ffff8880330b35e4 R15: dffffc0000000000 [ 391.465835][ T9553] ? __warn_printk+0x1a5/0x350 [ 391.471230][ T9553] ? __pfx_remove_proc_entry+0x10/0x10 [ 391.477305][ T9553] ? kfree+0x2b6/0x4d0 [ 391.481930][ T9553] ? cache_destroy_net+0x31/0x50 [ 391.487496][ T9553] ? sunrpc_exit_net+0x37/0x90 [ 391.492782][ T9553] sunrpc_exit_net+0x46/0x90 [ 391.497891][ T9553] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 391.503778][ T9553] ops_exit_list+0xb0/0x180 [ 391.508804][ T9553] setup_net+0x4e8/0x850 [ 391.513521][ T9553] ? __pfx_setup_net+0x10/0x10 [ 391.518797][ T9553] ? lockdep_init_map_type+0x5c/0x280 [ 391.524759][ T9553] ? __pfx_down_read_killable+0x10/0x10 [ 391.530968][ T9553] ? debug_mutex_init+0x37/0x70 [ 391.536384][ T9553] copy_net_ns+0x2a6/0x5f0 [ 391.541410][ T9553] create_new_namespaces+0x3ea/0xad0 [ 391.547380][ T9553] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 391.553733][ T9553] ksys_unshare+0x45b/0xa40 [ 391.558752][ T9553] ? __pfx_ksys_unshare+0x10/0x10 [ 391.564323][ T9553] ? xfd_validate_state+0x5d/0x180 [ 391.570117][ T9553] ? rcu_is_watching+0x12/0xc0 [ 391.575511][ T9553] __x64_sys_unshare+0x31/0x40 [ 391.580812][ T9553] do_syscall_64+0xcd/0x230 [ 391.585930][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.592475][ T9553] RIP: 0033:0x7f1f4238e969 [ 391.597368][ T9553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.619059][ T9553] RSP: 002b:00007f1f43157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 391.628359][ T9553] RAX: ffffffffffffffda RBX: 00007f1f425b6080 RCX: 00007f1f4238e969 [ 391.637385][ T9553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 391.646278][ T9553] RBP: 00007f1f42410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 391.655118][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.663917][ T9553] R13: 0000000000000000 R14: 00007f1f425b6080 R15: 00007ffd46c70e78 [ 391.672827][ T9553] [ 391.676521][ T9553] Kernel Offset: disabled [ 391.681348][ T9553] Rebooting in 86400 seconds..