last executing test programs: 2.733296341s ago: executing program 2 (id=3): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 2.515109125s ago: executing program 2 (id=5): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8}, {@utf8no}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x701000) 2.048228914s ago: executing program 2 (id=6): chdir(&(0x7f0000000000)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@bloom_filter={0x1e, 0x100, 0x5, 0x7bf, 0x4445, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x1000000000003}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x6, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './cgroup\x00'}) syz_open_dev$hiddev(&(0x7f0000000540), 0x228, 0x121081) io_submit(r5, 0x7, &(0x7f0000000d00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xb7, 0xffffffffffffffff, &(0x7f0000000340)="016ebe8e592c653409af908151f96703f11432733d243df3d9b2ce828f53e403f46f7049aba22d13150ae9255ef2913418caebfb56087dc035a53506ad72befc0a094d0bbb48d6886b8786fae1bcdb98f87b400f4e06f7e5c7c8f0cf55ee174e700bea8a3cea1c3aef741efbb6bcaefb01efea4d10be82963600280e8e57ad453be147a6b204beb7ef74fbd4fda901a69d3fc7855ced6d4d84faeb5386d9f15e6a1bda2ff6993ff45c918fc2b44a6bdd49abc129b748f43ccde407fd", 0xbc, 0xd2, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0xf801, r6, 0x0, 0x0, 0x5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, r6}, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2, 0xe, 0xffffffffffffffff, &(0x7f0000000940)="7f83f8290f2fdba92d9ba33b1aebd0768ed75f2e266f46be064bfad5de28295b3a9149a95172f5dde58516329f1ea2aea1b956a94e6a39768e26caadfb18698ecd51ac83ca5834513d526022c1d1f49f4da73e705c3e7d32d3fef1ae20f2643eb63341b94efcf9a3f422da5264219e11e0df88fd883c4982308fb9e2a75d7ae892fa4189323808885bdcb2033df3994f70b22c29d009353cc60881e5bb06e513028e9aed39630baa529798f61d8bba6d715bd473ba62c3f1a6552c9dbd87a478b81015847de7e1715a322c86c28e3f0b4703f1d680c46ef67c5584e7f8b41679056c2eccbc119db024", 0xe9, 0x7, 0x0, 0x0, r0}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0xb0, r2, &(0x7f0000000a80)="1f76372085fedebe28389c3ae39c99d0f276dc7c69dcb0231e761450618dd5e140449edf1222ad8e97aaaa1c33b3f141c3e2049acd9cd6635f7332d36fe511a58fa92572fa047dc20da0d7592451ff30deec5cfb8a8018bb26e65f7c9009dedfcb8cdd4ac6c9743cb311b2a804a38483e9e4d7b56c67960ee16a1bd97a0692e594afdcf5caac8c096fd04ce920cc7f7ba26f34801b18dac919fa3df7260cd41e832fd68c6b89e4ee6d3f83", 0xab, 0x7, 0x0, 0x0, r6}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000b80)="b276c5b1560e1b97313f31c0c08f75a6e446ab4d80111e35ee31f7fa10aea65486bb35456f622fb992a017bd9a3361cd88dc47aaa43d4fdcc01e31f6cc0347892e75b0e34eba4a232ca73418ddba5f2b0f4214239e5700171f800ccac0c7970822528938c4454e574d9ec2b851ba63c8f30c1d2165be2da94d0d3a01ca3a6f1c4b77739ff325ed8bc46fa1df80a6b2a5d8eb5232b50c29298c22486d98de89ce9021a88ef16312cac5747922368c1626c8a51441b5690c889af8f7244ae21daf19a886ad63f2273c84ee1d8c834fbd7ea355234b498af6d9cd694e06152a18169e", 0xe1, 0x7, 0x0, 0x3}]) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 727.670997ms ago: executing program 2 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1801, 0x931b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 496.594371ms ago: executing program 3 (id=4): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 352.243983ms ago: executing program 2 (id=8): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 47.709079ms ago: executing program 3 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x10) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6bfffff4", @ANYRES16=r2, @ANYBLOB="00012abd7000fbdbdf251300000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000f0000000e0000000c004300020000000300000006001200540f00000e001300069684091207ec368548000005001900000000000500c2000900000006001401e00c0000060012010c000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x40) 17.825619ms ago: executing program 2 (id=10): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4096, 0x1000) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0xfffffffffffffee6, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 98.382397][ T5779] cgroup: Unknown subsys name 'net' [ 98.525845][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.365925][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.708173][ T54] cfg80211: failed to load regulatory.db [ 103.163493][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.166811][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.182269][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.192339][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.193410][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.201846][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.217758][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.227097][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.239525][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.249514][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.263437][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.271824][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.280951][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.289881][ T5807] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 103.289888][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.291079][ T5804] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.304490][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.316510][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.320692][ T5807] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.329579][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.344801][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.352000][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.356295][ T5807] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.372841][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.051275][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 104.082588][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 104.131306][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 104.203306][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 104.351486][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.359495][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.369303][ T5795] bridge_slave_0: entered allmulticast mode [ 104.378043][ T5795] bridge_slave_0: entered promiscuous mode [ 104.440531][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.449068][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.456937][ T5795] bridge_slave_1: entered allmulticast mode [ 104.464765][ T5795] bridge_slave_1: entered promiscuous mode [ 104.512592][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.521483][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.529910][ T5793] bridge_slave_0: entered allmulticast mode [ 104.539362][ T5793] bridge_slave_0: entered promiscuous mode [ 104.551550][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.561737][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.571162][ T5793] bridge_slave_1: entered allmulticast mode [ 104.580333][ T5793] bridge_slave_1: entered promiscuous mode [ 104.602410][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.610835][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.621261][ T5792] bridge_slave_0: entered allmulticast mode [ 104.629698][ T5792] bridge_slave_0: entered promiscuous mode [ 104.671936][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.687847][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.698279][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.706566][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.715497][ T5792] bridge_slave_1: entered allmulticast mode [ 104.724380][ T5792] bridge_slave_1: entered promiscuous mode [ 104.801846][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.811169][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.820056][ T5794] bridge_slave_0: entered allmulticast mode [ 104.828459][ T5794] bridge_slave_0: entered promiscuous mode [ 104.839361][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.849278][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.858473][ T5794] bridge_slave_1: entered allmulticast mode [ 104.868651][ T5794] bridge_slave_1: entered promiscuous mode [ 104.880948][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.895387][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.927093][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.945103][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.988503][ T5795] team0: Port device team_slave_0 added [ 105.059502][ T5795] team0: Port device team_slave_1 added [ 105.088178][ T5792] team0: Port device team_slave_0 added [ 105.098913][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.113462][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.128259][ T5793] team0: Port device team_slave_0 added [ 105.166509][ T5792] team0: Port device team_slave_1 added [ 105.174912][ T5793] team0: Port device team_slave_1 added [ 105.213474][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.222131][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.255071][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.277922][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.286163][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.314927][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.357930][ T5794] team0: Port device team_slave_0 added [ 105.366268][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.373863][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.404557][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.418051][ T5807] Bluetooth: hci2: command tx timeout [ 105.419859][ T5796] Bluetooth: hci3: command tx timeout [ 105.424804][ T5807] Bluetooth: hci0: command tx timeout [ 105.462332][ T5794] team0: Port device team_slave_1 added [ 105.469408][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.478244][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.501318][ T5807] Bluetooth: hci1: command tx timeout [ 105.506951][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.527412][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.535240][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.564857][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.619264][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.628110][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.656546][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.729302][ T5795] hsr_slave_0: entered promiscuous mode [ 105.736782][ T5795] hsr_slave_1: entered promiscuous mode [ 105.747444][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.755360][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.785783][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.817621][ T5793] hsr_slave_0: entered promiscuous mode [ 105.826467][ T5793] hsr_slave_1: entered promiscuous mode [ 105.833499][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.843113][ T5793] Cannot create hsr debugfs directory [ 105.866578][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.873725][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.902598][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.066108][ T5792] hsr_slave_0: entered promiscuous mode [ 106.073333][ T5792] hsr_slave_1: entered promiscuous mode [ 106.081266][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.090072][ T5792] Cannot create hsr debugfs directory [ 106.171459][ T5794] hsr_slave_0: entered promiscuous mode [ 106.178979][ T5794] hsr_slave_1: entered promiscuous mode [ 106.186353][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.194871][ T5794] Cannot create hsr debugfs directory [ 106.577503][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.591036][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.602253][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.617304][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.697401][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.722719][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.747957][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.763382][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.885826][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.896508][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.909395][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.921883][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.073341][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.094663][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.112686][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.138121][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.145449][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.246708][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.269440][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.312272][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.319859][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.372479][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.380064][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.412226][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.452859][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.479164][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.497254][ T5804] Bluetooth: hci2: command tx timeout [ 107.502777][ T5804] Bluetooth: hci0: command tx timeout [ 107.509244][ T5807] Bluetooth: hci3: command tx timeout [ 107.524558][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.532537][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.548521][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.556256][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.576463][ T5807] Bluetooth: hci1: command tx timeout [ 107.623392][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.635362][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.734499][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.742110][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.758651][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.766998][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.787988][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.796443][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.834228][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.841883][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.022028][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.183375][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.319085][ T5795] veth0_vlan: entered promiscuous mode [ 108.381559][ T5795] veth1_vlan: entered promiscuous mode [ 108.509225][ T5795] veth0_macvtap: entered promiscuous mode [ 108.530595][ T5795] veth1_macvtap: entered promiscuous mode [ 108.587507][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.622403][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.641719][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.675860][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.698749][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.709692][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.720492][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.731279][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.810427][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.963463][ T5793] veth0_vlan: entered promiscuous mode [ 108.983419][ T5792] veth0_vlan: entered promiscuous mode [ 109.026001][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.038111][ T5792] veth1_vlan: entered promiscuous mode [ 109.051422][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.122122][ T5793] veth1_vlan: entered promiscuous mode [ 109.168242][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.194059][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.239681][ T5792] veth0_macvtap: entered promiscuous mode [ 109.253444][ T5792] veth1_macvtap: entered promiscuous mode [ 109.263705][ T5794] veth0_vlan: entered promiscuous mode [ 109.350337][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.371148][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.389450][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.399899][ T5794] veth1_vlan: entered promiscuous mode [ 109.445414][ T5793] veth0_macvtap: entered promiscuous mode [ 109.471437][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.483805][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.501879][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.547128][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.558655][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.569468][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.580582][ T5796] Bluetooth: hci2: command tx timeout [ 109.587883][ T5804] Bluetooth: hci0: command tx timeout [ 109.595396][ T5807] Bluetooth: hci3: command tx timeout [ 109.602248][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.628256][ T5793] veth1_macvtap: entered promiscuous mode [ 109.667596][ T5807] Bluetooth: hci1: command tx timeout [ 109.686030][ T5886] syz.2.5[5886]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 109.708791][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.721883][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.733958][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.735298][ T5886] loop2: detected capacity change from 0 to 256 [ 109.747290][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.768910][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.814415][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.842500][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.860358][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.874699][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.898706][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.938012][ T5794] veth0_macvtap: entered promiscuous mode [ 109.979710][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.998659][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.008784][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.019213][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.051200][ T5794] veth1_macvtap: entered promiscuous mode [ 110.172291][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.190174][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.203139][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.221640][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.232681][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.245308][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.259708][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.379182][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.624199][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.137514][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.159799][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.164310][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.190781][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.201379][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.213664][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.225309][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.236697][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.251526][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.270563][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.284636][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.295135][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.312024][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.571884][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.583714][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.656788][ T5807] Bluetooth: hci3: command tx timeout [ 111.664088][ T5807] Bluetooth: hci2: command tx timeout [ 111.671945][ T5804] Bluetooth: hci0: command tx timeout [ 111.736658][ T5807] Bluetooth: hci1: command tx timeout [ 111.812173][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.843833][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.934611][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.981454][ T5903] xt_hashlimit: max too large, truncated to 1048576 [ 111.985988][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.101215][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.122993][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.252285][ T5910] ------------[ cut here ]------------ [ 112.258797][ T5910] WARNING: CPU: 1 PID: 5910 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 112.268445][ T5910] Modules linked in: [ 112.273383][ T5910] CPU: 1 PID: 5910 Comm: syz.1.2 Not tainted 6.6.99-syzkaller #0 [ 112.281859][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.292831][ T5910] RIP: 0010:__alloc_pages+0x2de/0x460 [ 112.300227][ T5910] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 43 1f 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 112.320666][ T5910] RSP: 0018:ffffc90004b779c0 EFLAGS: 00010246 [ 112.327109][ T5910] RAX: ffffc90004b77a00 RBX: 1ffff9200096ef3c RCX: 0000000000000000 [ 112.335899][ T5910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004b77a28 [ 112.344215][ T5910] RBP: ffffc90004b77ac0 R08: ffffc90004b77a27 R09: 0000000000000000 [ 112.353713][ T5910] R10: ffffc90004b77a00 R11: fffff5200096ef45 R12: 000000000000001a [ 112.363120][ T5910] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000 [ 112.372287][ T5910] FS: 00007fa282ed06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 112.382046][ T5910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.389411][ T5910] CR2: 0000001b2de17ff8 CR3: 000000005b6dc000 CR4: 00000000003506e0 [ 112.398116][ T5910] Call Trace: [ 112.401532][ T5910] [ 112.404606][ T5910] ? zone_statistics+0x170/0x170 [ 112.410053][ T5910] ? __might_fault+0xaa/0x120 [ 112.415056][ T5910] ? __lock_acquire+0x7c80/0x7c80 [ 112.420488][ T5910] __kmalloc_large_node+0x8c/0x1e0 [ 112.425855][ T5910] ? comedi_unlocked_ioctl+0x9f0/0xf00 [ 112.431534][ T5910] __kmalloc+0x111/0x240 [ 112.436052][ T5910] comedi_unlocked_ioctl+0x9f0/0xf00 [ 112.441993][ T5910] ? tomoyo_path_number_perm+0x477/0x590 [ 112.448477][ T5910] ? comedi_poll+0x8c0/0x8c0 [ 112.453267][ T5910] ? tomoyo_path_number_perm+0x4dc/0x590 [ 112.460538][ T5910] ? tomoyo_path_number_perm+0x1ba/0x590 [ 112.467337][ T5910] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 112.473319][ T5910] ? __fget_files+0x28/0x4d0 [ 112.478789][ T5910] ? bpf_lsm_file_ioctl+0x9/0x10 [ 112.483995][ T5910] ? security_file_ioctl+0x80/0xa0 [ 112.490013][ T5910] ? comedi_poll+0x8c0/0x8c0 [ 112.495445][ T5910] __se_sys_ioctl+0xfd/0x170 [ 112.500170][ T5910] do_syscall_64+0x55/0xb0 [ 112.505008][ T5910] ? clear_bhb_loop+0x40/0x90 [ 112.510292][ T5910] ? clear_bhb_loop+0x40/0x90 [ 112.515666][ T5910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.522015][ T5910] RIP: 0033:0x7fa281f8e9a9 [ 112.526694][ T5910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.548738][ T5910] RSP: 002b:00007fa282ed0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.557669][ T5910] RAX: ffffffffffffffda RBX: 00007fa2821b5fa0 RCX: 00007fa281f8e9a9 [ 112.566086][ T5910] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000003 [ 112.574643][ T5910] RBP: 00007fa282010d69 R08: 0000000000000000 R09: 0000000000000000 [ 112.583607][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.591865][ T5910] R13: 0000000000000000 R14: 00007fa2821b5fa0 R15: 00007ffe032d7268 [ 112.600079][ T5910] [ 112.603379][ T5910] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.610956][ T5910] CPU: 1 PID: 5910 Comm: syz.1.2 Not tainted 6.6.99-syzkaller #0 [ 112.618692][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.629046][ T5910] Call Trace: [ 112.632352][ T5910] [ 112.635571][ T5910] dump_stack_lvl+0x16c/0x230 [ 112.640319][ T5910] ? show_regs_print_info+0x20/0x20 [ 112.645902][ T5910] ? load_image+0x3b0/0x3b0 [ 112.650588][ T5910] panic+0x2c0/0x710 [ 112.654546][ T5910] ? bpf_jit_dump+0xd0/0xd0 [ 112.659116][ T5910] __warn+0x2e0/0x470 [ 112.663226][ T5910] ? __alloc_pages+0x2de/0x460 [ 112.668047][ T5910] ? __alloc_pages+0x2de/0x460 [ 112.672874][ T5910] report_bug+0x2be/0x4f0 [ 112.677336][ T5910] ? __alloc_pages+0x2de/0x460 [ 112.682145][ T5910] ? __alloc_pages+0x2de/0x460 [ 112.686997][ T5910] ? __alloc_pages+0x2e0/0x460 [ 112.691907][ T5910] handle_bug+0xcf/0x120 [ 112.698410][ T5910] exc_invalid_op+0x1a/0x50 [ 112.703413][ T5910] asm_exc_invalid_op+0x1a/0x20 [ 112.708710][ T5910] RIP: 0010:__alloc_pages+0x2de/0x460 [ 112.714207][ T5910] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 43 1f 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 112.735321][ T5910] RSP: 0018:ffffc90004b779c0 EFLAGS: 00010246 [ 112.741523][ T5910] RAX: ffffc90004b77a00 RBX: 1ffff9200096ef3c RCX: 0000000000000000 [ 112.750505][ T5910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004b77a28 [ 112.759684][ T5910] RBP: ffffc90004b77ac0 R08: ffffc90004b77a27 R09: 0000000000000000 [ 112.768284][ T5910] R10: ffffc90004b77a00 R11: fffff5200096ef45 R12: 000000000000001a [ 112.777731][ T5910] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000 [ 112.786200][ T5910] ? zone_statistics+0x170/0x170 [ 112.791311][ T5910] ? __might_fault+0xaa/0x120 [ 112.796061][ T5910] ? __lock_acquire+0x7c80/0x7c80 [ 112.801108][ T5910] __kmalloc_large_node+0x8c/0x1e0 [ 112.806625][ T5910] ? comedi_unlocked_ioctl+0x9f0/0xf00 [ 112.812234][ T5910] __kmalloc+0x111/0x240 [ 112.816608][ T5910] comedi_unlocked_ioctl+0x9f0/0xf00 [ 112.822041][ T5910] ? tomoyo_path_number_perm+0x477/0x590 [ 112.827714][ T5910] ? comedi_poll+0x8c0/0x8c0 [ 112.832595][ T5910] ? tomoyo_path_number_perm+0x4dc/0x590 [ 112.838811][ T5910] ? tomoyo_path_number_perm+0x1ba/0x590 [ 112.844855][ T5910] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 112.850543][ T5910] ? __fget_files+0x28/0x4d0 [ 112.855571][ T5910] ? bpf_lsm_file_ioctl+0x9/0x10 [ 112.860729][ T5910] ? security_file_ioctl+0x80/0xa0 [ 112.866059][ T5910] ? comedi_poll+0x8c0/0x8c0 [ 112.870782][ T5910] __se_sys_ioctl+0xfd/0x170 [ 112.875759][ T5910] do_syscall_64+0x55/0xb0 [ 112.880545][ T5910] ? clear_bhb_loop+0x40/0x90 [ 112.885432][ T5910] ? clear_bhb_loop+0x40/0x90 [ 112.890186][ T5910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.896238][ T5910] RIP: 0033:0x7fa281f8e9a9 [ 112.900764][ T5910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.920808][ T5910] RSP: 002b:00007fa282ed0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.929613][ T5910] RAX: ffffffffffffffda RBX: 00007fa2821b5fa0 RCX: 00007fa281f8e9a9 [ 112.937629][ T5910] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000003 [ 112.945717][ T5910] RBP: 00007fa282010d69 R08: 0000000000000000 R09: 0000000000000000 [ 112.953705][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.961713][ T5910] R13: 0000000000000000 R14: 00007fa2821b5fa0 R15: 00007ffe032d7268 [ 112.969953][ T5910] [ 112.973699][ T5910] Kernel Offset: disabled [ 112.978509][ T5910] Rebooting in 86400 seconds..