last executing test programs: 47.264690773s ago: executing program 0 (id=2440): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(0x0, 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 46.125353483s ago: executing program 0 (id=2442): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(0x0, 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 44.925279163s ago: executing program 0 (id=2446): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) r2 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r2, &(0x7f0000000640)=""/188, 0xbc) read$auto(r0, 0x0, 0x800006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x23, 0x6, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x4a2080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/140, 0x8c) 35.089179369s ago: executing program 2 (id=2471): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x40000006, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) shmctl$auto_SHM_UNLOCK(0x200, 0xc, &(0x7f00000006c0)={{0x10000, 0x0, 0x0, 0x6, 0x9, 0x1f6, 0x7}, 0x117, 0x1f3, 0x7, 0x6, @inferred, @raw=0x4360, 0x9, 0x0, &(0x7f00000003c0)="037bcd16d9beadedae477b6c80df29904b8330d8fd51886f95b084d04608810dc2696f1a927786681d4aac337ff6bebb14af90d1ca6de6ada26ad4e4cb9f266899f180490ff92fa0ece2158e27bede9175e449c113137bafca34dacef1827755dc2ca81f95a0f3ad50b25da816dcbeff245be116bd2e31011a12ce210528a4441da420cf3926f65ee6a661a67a5dbf", &(0x7f0000000480)="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"}) io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x28, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1, 0x100000007, 0xbc45, 0x1f82, 0x19488, 0x3, 0x2, 0x7f, 0x5, 0xffffffffffffffff, 0xdfe, 0x6, 0x1, 0x9, 0x1, 0x200]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) recvmmsg$auto(r2, 0x0, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000d0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x128e2, 0x0) write$auto(r3, 0x0, 0x81) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) 33.741439878s ago: executing program 2 (id=2474): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=0x0) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 32.352289773s ago: executing program 2 (id=2477): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x0, 0x31) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f0000000240)={0xf5f, 0x7f}, &(0x7f0000000040)={0x9, 0xfffffffffffffffe}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x8000000000000000, 0x3, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x3d, 0xe, 0x3, 0x101, 0x100000000000ff, 0x1000000002, 0x80080001]}, 0x0, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x10000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 30.383515346s ago: executing program 2 (id=2482): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D0p\x00', 0x408000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f00000001c0)={0x9, &(0x7f0000000180)}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdc02, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x11, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80014) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) clone3$auto(0x0, 0x6) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo\x00', 0x30000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000008c0)=""/61, 0x3d) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000001700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/can/rcvlist_sff\x00', 0x0, 0x0) r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', 0x0) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x202082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) 28.946641249s ago: executing program 2 (id=2486): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) r2 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r2, &(0x7f0000000640)=""/188, 0xbc) read$auto(r0, 0x0, 0x800006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x23, 0x6, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x4a2080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/140, 0x8c) 27.967898216s ago: executing program 2 (id=2487): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r0, &(0x7f0000005900)='\x00', 0x1ff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r1, &(0x7f0000000640)=""/188, 0xbc) read$auto(0xffffffffffffffff, 0x0, 0x800006) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x23, 0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x4a2080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/140, 0x8c) 26.700312903s ago: executing program 0 (id=2449): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 25.368750084s ago: executing program 0 (id=2493): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 24.186909475s ago: executing program 0 (id=2495): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) r2 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r2, &(0x7f0000000640)=""/188, 0xbc) read$auto(r0, 0x0, 0x800006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x23, 0x6, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x4a2080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/140, 0x8c) 22.980053239s ago: executing program 1 (id=2498): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 21.735541319s ago: executing program 1 (id=2500): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, 0x0, 0x81) shutdown$auto(r3, 0x0) 20.655544255s ago: executing program 1 (id=2502): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=0x0) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 20.300095613s ago: executing program 3 (id=2503): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 19.664638477s ago: executing program 1 (id=2504): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(0x0, 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 19.236561618s ago: executing program 3 (id=2505): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x0, 0x31) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f0000000240)={0xf5f, 0x7f}, &(0x7f0000000040)={0x9, 0xfffffffffffffffe}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x8000000000000000, 0x3, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x3d, 0xe, 0x3, 0x101, 0x100000000000ff, 0x1000000002, 0x80080001]}, 0x0, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x10000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 18.69657255s ago: executing program 1 (id=2506): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1f, 0x3, 0x400001) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={0x0, 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) shutdown$auto(r3, 0x0) 18.07491819s ago: executing program 3 (id=2507): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x0, 0x31) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f0000000240)={0xf5f, 0x7f}, &(0x7f0000000040)={0x9, 0xfffffffffffffffe}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x8000000000000000, 0x3, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x3d, 0xe, 0x3, 0x101, 0x100000000000ff, 0x1000000002, 0x80080001]}, 0x0, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x10000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 17.66537365s ago: executing program 1 (id=2508): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) r2 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r2, &(0x7f0000000640)=""/188, 0xbc) read$auto(r0, 0x0, 0x800006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x23, 0x6, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x4a2080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/140, 0x8c) 17.14616329s ago: executing program 3 (id=2509): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f0000000240)={0xf5f, 0x7f}, &(0x7f0000000040)={0x9, 0xfffffffffffffffe}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x8000000000000000, 0x3, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x3d, 0xe, 0x3, 0x101, 0x100000000000ff, 0x1000000002, 0x80080001]}, 0x0, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x10000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 16.225463208s ago: executing program 3 (id=2510): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x40000006, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) shmctl$auto_SHM_UNLOCK(0x200, 0xc, &(0x7f00000006c0)={{0x10000, 0x0, 0x0, 0x6, 0x9, 0x1f6, 0x7}, 0x117, 0x1f3, 0x7, 0x6, @inferred, @raw=0x4360, 0x9, 0x0, &(0x7f00000003c0)="037bcd16d9beadedae477b6c80df29904b8330d8fd51886f95b084d04608810dc2696f1a927786681d4aac337ff6bebb14af90d1ca6de6ada26ad4e4cb9f266899f180490ff92fa0ece2158e27bede9175e449c113137bafca34dacef1827755dc2ca81f95a0f3ad50b25da816dcbeff245be116bd2e31011a12ce210528a4441da420cf3926f65ee6a661a67a5dbf", &(0x7f0000000480)="487127672eec969c2e13b7c74929d6d795b5da86e57786a035528caa022f5b2e95db04b92dbe46df29c68edd90f61bfa79472fca54f222e1acaca5663d573d92510ba617b087a2fbb1a5f065793be0b9f37c1fd7da7bb69415869f74c79c035334fdfc165d590099e2e339f6ec5a15563414631f1462b504e2fc20f5004a8a87599bf1965289c9ab277f14b2e0b5949246495885bfe5372629f3dab9c3171cecd438a509020e8edf41cc3bd85c5db1bb8c22e6dd751a8b39256d1e299a0f334fa3f33c3bd70868a1969b6c0b7901bc00b665ed2a16b41a0024c6bc2d894f456aa9fa256ee29bc93cec0fa5f7fdc8d07df4e62c020a4c38b9030236fb60"}) io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x28, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1, 0x100000007, 0xbc45, 0x1f82, 0x19488, 0x3, 0x2, 0x7f, 0x5, 0xffffffffffffffff, 0xdfe, 0x6, 0x1, 0x9, 0x1, 0x200]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r2, 0x0, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000d0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x128e2, 0x0) write$auto(r3, 0x0, 0x81) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) 15.340044509s ago: executing program 3 (id=2511): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) r2 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r2, &(0x7f0000000640)=""/188, 0xbc) read$auto(r0, 0x0, 0x800006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x23, 0x6, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x4a2080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/140, 0x8c) 8.509940804s ago: executing program 32 (id=2495): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) r2 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r2, &(0x7f0000000640)=""/188, 0xbc) read$auto(r0, 0x0, 0x800006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x23, 0x6, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x4a2080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/140, 0x8c) 2.505516705s ago: executing program 33 (id=2508): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) r2 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r2, &(0x7f0000000640)=""/188, 0xbc) read$auto(r0, 0x0, 0x800006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x23, 0x6, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x4a2080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/140, 0x8c) 0s ago: executing program 34 (id=2511): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, &(0x7f0000005900)='\x00', 0x1ff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) r2 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r2, &(0x7f0000000640)=""/188, 0xbc) read$auto(r0, 0x0, 0x800006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x23, 0x6, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x4a2080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/140, 0x8c) kernel console output (not intermixed with test programs): 1.174792][T14453] __x64_sys_unshare+0x31/0x40 [ 711.174834][T14453] do_syscall_64+0xcd/0x490 [ 711.174878][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.174911][T14453] RIP: 0033:0x7f1b9c98ebe9 [ 711.174937][T14453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.174967][T14453] RSP: 002b:00007f1b9d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 711.174998][T14453] RAX: ffffffffffffffda RBX: 00007f1b9cbb5fa0 RCX: 00007f1b9c98ebe9 [ 711.175019][T14453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 711.175039][T14453] RBP: 00007f1b9ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 711.175059][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.175078][T14453] R13: 00007f1b9cbb6038 R14: 00007f1b9cbb5fa0 R15: 00007ffcfa3518e8 [ 711.175121][T14453] [ 711.513072][T14465] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2131'. [ 714.756982][T14514] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2150'. [ 725.432057][T14685] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2179'. [ 726.591110][T14695] FAULT_INJECTION: forcing a failure. [ 726.591110][T14695] name failslab, interval 1, probability 0, space 0, times 0 [ 726.629827][T14695] CPU: 0 UID: 0 PID: 14695 Comm: syz.3.2182 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 726.629855][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.629867][T14695] Call Trace: [ 726.629873][T14695] [ 726.629882][T14695] dump_stack_lvl+0x16c/0x1f0 [ 726.629911][T14695] should_fail_ex+0x512/0x640 [ 726.629936][T14695] ? __kmalloc_noprof+0xbf/0x510 [ 726.629959][T14695] ? __netlink_kernel_create+0x17f/0x750 [ 726.629983][T14695] should_failslab+0xc2/0x120 [ 726.630007][T14695] __kmalloc_noprof+0xd2/0x510 [ 726.630034][T14695] __netlink_kernel_create+0x17f/0x750 [ 726.630060][T14695] ? __pfx___netlink_kernel_create+0x10/0x10 [ 726.630086][T14695] ? proc_create_reg+0xe3/0x180 [ 726.630116][T14695] xfrm_user_net_init+0xc6/0x190 [ 726.630137][T14695] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 726.630158][T14695] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 726.630178][T14695] ? __pfx_tls_init_net+0x10/0x10 [ 726.630212][T14695] ? tls_proc_init+0x58/0x70 [ 726.630234][T14695] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 726.630253][T14695] ops_init+0x1e2/0x5f0 [ 726.630279][T14695] setup_net+0x10f/0x380 [ 726.630301][T14695] ? lockdep_init_map_type+0x5c/0x280 [ 726.630328][T14695] ? __pfx_setup_net+0x10/0x10 [ 726.630354][T14695] ? debug_mutex_init+0x37/0x70 [ 726.630375][T14695] copy_net_ns+0x2a6/0x5f0 [ 726.630403][T14695] create_new_namespaces+0x3ea/0xa90 [ 726.630430][T14695] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 726.630457][T14695] ksys_unshare+0x45b/0xa40 [ 726.630484][T14695] ? __pfx_ksys_unshare+0x10/0x10 [ 726.630509][T14695] ? xfd_validate_state+0x61/0x180 [ 726.630543][T14695] __x64_sys_unshare+0x31/0x40 [ 726.630567][T14695] do_syscall_64+0xcd/0x490 [ 726.630592][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.630610][T14695] RIP: 0033:0x7f1b9c98ebe9 [ 726.630626][T14695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.630645][T14695] RSP: 002b:00007f1b9d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 726.630663][T14695] RAX: ffffffffffffffda RBX: 00007f1b9cbb5fa0 RCX: 00007f1b9c98ebe9 [ 726.630675][T14695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 726.630686][T14695] RBP: 00007f1b9ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 726.630697][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.630708][T14695] R13: 00007f1b9cbb6038 R14: 00007f1b9cbb5fa0 R15: 00007ffcfa3518e8 [ 726.630730][T14695] [ 729.962022][T14747] FAULT_INJECTION: forcing a failure. [ 729.962022][T14747] name failslab, interval 1, probability 0, space 0, times 0 [ 730.014944][T14747] CPU: 0 UID: 0 PID: 14747 Comm: syz.3.2193 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 730.014991][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 730.015009][T14747] Call Trace: [ 730.015021][T14747] [ 730.015033][T14747] dump_stack_lvl+0x16c/0x1f0 [ 730.015078][T14747] should_fail_ex+0x512/0x640 [ 730.015121][T14747] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 730.015169][T14747] should_failslab+0xc2/0x120 [ 730.015207][T14747] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 730.015241][T14747] ? find_held_lock+0x2b/0x80 [ 730.015271][T14747] ? fib_rules_register+0x30/0x500 [ 730.015313][T14747] ? __pfx_ip6mr_net_init+0x10/0x10 [ 730.015355][T14747] kmemdup_noprof+0x29/0x60 [ 730.015407][T14747] fib_rules_register+0x30/0x500 [ 730.015453][T14747] ? fib_notifier_ops_register+0x123/0x270 [ 730.015498][T14747] ? __pfx_ip6mr_net_init+0x10/0x10 [ 730.015539][T14747] ip6mr_net_init+0xb8/0x4e0 [ 730.015580][T14747] ? __pfx_ip6mr_net_init+0x10/0x10 [ 730.015622][T14747] ops_init+0x1e2/0x5f0 [ 730.015669][T14747] setup_net+0x10f/0x380 [ 730.015707][T14747] ? lockdep_init_map_type+0x5c/0x280 [ 730.015750][T14747] ? __pfx_setup_net+0x10/0x10 [ 730.015794][T14747] ? debug_mutex_init+0x37/0x70 [ 730.015831][T14747] copy_net_ns+0x2a6/0x5f0 [ 730.015880][T14747] create_new_namespaces+0x3ea/0xa90 [ 730.015925][T14747] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 730.015964][T14747] ksys_unshare+0x45b/0xa40 [ 730.016007][T14747] ? __pfx_ksys_unshare+0x10/0x10 [ 730.016051][T14747] ? xfd_validate_state+0x61/0x180 [ 730.016107][T14747] __x64_sys_unshare+0x31/0x40 [ 730.016148][T14747] do_syscall_64+0xcd/0x490 [ 730.016190][T14747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.016220][T14747] RIP: 0033:0x7f1b9c98ebe9 [ 730.016245][T14747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.016274][T14747] RSP: 002b:00007f1b9d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 730.016304][T14747] RAX: ffffffffffffffda RBX: 00007f1b9cbb5fa0 RCX: 00007f1b9c98ebe9 [ 730.016323][T14747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 730.016341][T14747] RBP: 00007f1b9ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 730.016359][T14747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.016378][T14747] R13: 00007f1b9cbb6038 R14: 00007f1b9cbb5fa0 R15: 00007ffcfa3518e8 [ 730.016420][T14747] [ 730.285022][T14749] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2194'. [ 733.181797][T14808] FAULT_INJECTION: forcing a failure. [ 733.181797][T14808] name failslab, interval 1, probability 0, space 0, times 0 [ 733.195031][T14808] CPU: 0 UID: 0 PID: 14808 Comm: syz.0.2206 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 733.195064][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 733.195076][T14808] Call Trace: [ 733.195084][T14808] [ 733.195092][T14808] dump_stack_lvl+0x16c/0x1f0 [ 733.195120][T14808] should_fail_ex+0x512/0x640 [ 733.195146][T14808] ? fs_reclaim_acquire+0xae/0x150 [ 733.195176][T14808] should_failslab+0xc2/0x120 [ 733.195201][T14808] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 733.195233][T14808] ? security_inode_alloc+0x3b/0x2b0 [ 733.195276][T14808] security_inode_alloc+0x3b/0x2b0 [ 733.195318][T14808] inode_init_always_gfp+0xce4/0x1030 [ 733.195374][T14808] alloc_inode+0x86/0x240 [ 733.195419][T14808] sock_alloc+0x40/0x280 [ 733.195448][T14808] sock_create_lite+0x82/0x120 [ 733.195485][T14808] __netlink_kernel_create+0xbd/0x750 [ 733.195512][T14808] ? __pfx___netlink_kernel_create+0x10/0x10 [ 733.195539][T14808] ? proc_create_reg+0xe3/0x180 [ 733.195569][T14808] xfrm_user_net_init+0xc6/0x190 [ 733.195590][T14808] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 733.195613][T14808] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 733.195633][T14808] ? __pfx_tls_init_net+0x10/0x10 [ 733.195659][T14808] ? tls_proc_init+0x58/0x70 [ 733.195681][T14808] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 733.195699][T14808] ops_init+0x1e2/0x5f0 [ 733.195726][T14808] setup_net+0x10f/0x380 [ 733.195748][T14808] ? lockdep_init_map_type+0x5c/0x280 [ 733.195774][T14808] ? __pfx_setup_net+0x10/0x10 [ 733.195799][T14808] ? debug_mutex_init+0x37/0x70 [ 733.195820][T14808] copy_net_ns+0x2a6/0x5f0 [ 733.195849][T14808] create_new_namespaces+0x3ea/0xa90 [ 733.195875][T14808] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 733.195898][T14808] ksys_unshare+0x45b/0xa40 [ 733.195923][T14808] ? __pfx_ksys_unshare+0x10/0x10 [ 733.195948][T14808] ? xfd_validate_state+0x61/0x180 [ 733.195981][T14808] __x64_sys_unshare+0x31/0x40 [ 733.196005][T14808] do_syscall_64+0xcd/0x490 [ 733.196030][T14808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.196055][T14808] RIP: 0033:0x7f8d2918ebe9 [ 733.196072][T14808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.196089][T14808] RSP: 002b:00007f8d2a0a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 733.196107][T14808] RAX: ffffffffffffffda RBX: 00007f8d293b5fa0 RCX: 00007f8d2918ebe9 [ 733.196119][T14808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 733.196130][T14808] RBP: 00007f8d29211e19 R08: 0000000000000000 R09: 0000000000000000 [ 733.196141][T14808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.196151][T14808] R13: 00007f8d293b6038 R14: 00007f8d293b5fa0 R15: 00007ffd7052dff8 [ 733.196174][T14808] [ 742.043792][T14924] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2234'. [ 747.370639][T14998] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2252'. [ 752.381275][T15073] FAULT_INJECTION: forcing a failure. [ 752.381275][T15073] name failslab, interval 1, probability 0, space 0, times 0 [ 752.400406][T15073] CPU: 0 UID: 0 PID: 15073 Comm: syz.1.2269 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 752.400452][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.400472][T15073] Call Trace: [ 752.400483][T15073] [ 752.400496][T15073] dump_stack_lvl+0x16c/0x1f0 [ 752.400541][T15073] should_fail_ex+0x512/0x640 [ 752.400582][T15073] ? fs_reclaim_acquire+0xae/0x150 [ 752.400632][T15073] should_failslab+0xc2/0x120 [ 752.400673][T15073] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 752.400713][T15073] ? security_inode_alloc+0x3b/0x2b0 [ 752.400755][T15073] security_inode_alloc+0x3b/0x2b0 [ 752.400788][T15073] inode_init_always_gfp+0xce4/0x1030 [ 752.400827][T15073] alloc_inode+0x86/0x240 [ 752.400868][T15073] sock_alloc+0x40/0x280 [ 752.400908][T15073] sock_create_lite+0x82/0x120 [ 752.400951][T15073] __netlink_kernel_create+0xbd/0x750 [ 752.400992][T15073] ? __pfx___netlink_kernel_create+0x10/0x10 [ 752.401044][T15073] ? proc_create_reg+0xe3/0x180 [ 752.401092][T15073] xfrm_user_net_init+0xc6/0x190 [ 752.401124][T15073] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 752.401155][T15073] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 752.401187][T15073] ? __pfx_tls_init_net+0x10/0x10 [ 752.401229][T15073] ? tls_proc_init+0x58/0x70 [ 752.401263][T15073] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 752.401292][T15073] ops_init+0x1e2/0x5f0 [ 752.401335][T15073] setup_net+0x10f/0x380 [ 752.401368][T15073] ? lockdep_init_map_type+0x5c/0x280 [ 752.401409][T15073] ? __pfx_setup_net+0x10/0x10 [ 752.401450][T15073] ? debug_mutex_init+0x37/0x70 [ 752.401484][T15073] copy_net_ns+0x2a6/0x5f0 [ 752.401530][T15073] create_new_namespaces+0x3ea/0xa90 [ 752.401573][T15073] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 752.401610][T15073] ksys_unshare+0x45b/0xa40 [ 752.401651][T15073] ? __pfx_ksys_unshare+0x10/0x10 [ 752.401691][T15073] ? xfd_validate_state+0x61/0x180 [ 752.401746][T15073] __x64_sys_unshare+0x31/0x40 [ 752.401784][T15073] do_syscall_64+0xcd/0x490 [ 752.401824][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.401853][T15073] RIP: 0033:0x7fb9c678ebe9 [ 752.401876][T15073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.401904][T15073] RSP: 002b:00007fb9c75c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 752.401931][T15073] RAX: ffffffffffffffda RBX: 00007fb9c69b5fa0 RCX: 00007fb9c678ebe9 [ 752.401950][T15073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 752.401967][T15073] RBP: 00007fb9c6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 752.401985][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.402002][T15073] R13: 00007fb9c69b6038 R14: 00007fb9c69b5fa0 R15: 00007ffd55ab1fc8 [ 752.402131][T15073] [ 752.784111][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.790600][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.353592][T15166] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2289'. [ 759.898205][T15195] FAULT_INJECTION: forcing a failure. [ 759.898205][T15195] name failslab, interval 1, probability 0, space 0, times 0 [ 759.938075][T15199] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2296'. [ 759.966478][T15195] CPU: 1 UID: 0 PID: 15195 Comm: syz.3.2294 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 759.966525][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 759.966544][T15195] Call Trace: [ 759.966556][T15195] [ 759.966569][T15195] dump_stack_lvl+0x16c/0x1f0 [ 759.966614][T15195] should_fail_ex+0x512/0x640 [ 759.966659][T15195] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 759.966698][T15195] should_failslab+0xc2/0x120 [ 759.966738][T15195] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 759.966773][T15195] ? __proc_create+0xc3/0x8e0 [ 759.966815][T15195] ? __proc_create+0x2ce/0x8e0 [ 759.966864][T15195] __proc_create+0x2ce/0x8e0 [ 759.966910][T15195] ? __pfx___proc_create+0x10/0x10 [ 759.966971][T15195] proc_create_reg+0x7d/0x180 [ 759.967018][T15195] proc_create_net_data+0x8e/0x1c0 [ 759.967066][T15195] ? __pfx_proc_create_net_data+0x10/0x10 [ 759.967112][T15195] ? __kasan_kmalloc+0xaa/0xb0 [ 759.967157][T15195] ip_vs_app_net_init+0xc8/0x110 [ 759.967197][T15195] __ip_vs_init+0x25b/0x520 [ 759.967231][T15195] ? __pfx___ip_vs_init+0x10/0x10 [ 759.967273][T15195] ops_init+0x1e2/0x5f0 [ 759.967319][T15195] setup_net+0x10f/0x380 [ 759.967357][T15195] ? lockdep_init_map_type+0x5c/0x280 [ 759.967403][T15195] ? __pfx_setup_net+0x10/0x10 [ 759.967445][T15195] ? debug_mutex_init+0x37/0x70 [ 759.967483][T15195] copy_net_ns+0x2a6/0x5f0 [ 759.967533][T15195] create_new_namespaces+0x3ea/0xa90 [ 759.967579][T15195] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 759.967619][T15195] ksys_unshare+0x45b/0xa40 [ 759.967662][T15195] ? __pfx_ksys_unshare+0x10/0x10 [ 759.967705][T15195] ? xfd_validate_state+0x61/0x180 [ 759.967758][T15195] __x64_sys_unshare+0x31/0x40 [ 759.967783][T15195] do_syscall_64+0xcd/0x490 [ 759.967807][T15195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.967826][T15195] RIP: 0033:0x7f1b9c98ebe9 [ 759.967843][T15195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.967861][T15195] RSP: 002b:00007f1b9d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 759.967879][T15195] RAX: ffffffffffffffda RBX: 00007f1b9cbb5fa0 RCX: 00007f1b9c98ebe9 [ 759.967891][T15195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 759.967902][T15195] RBP: 00007f1b9ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 759.967913][T15195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.967923][T15195] R13: 00007f1b9cbb6038 R14: 00007f1b9cbb5fa0 R15: 00007ffcfa3518e8 [ 759.967946][T15195] [ 761.288434][T15214] FAULT_INJECTION: forcing a failure. [ 761.288434][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 761.333460][T15214] CPU: 1 UID: 0 PID: 15214 Comm: syz.0.2301 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 761.333489][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 761.333500][T15214] Call Trace: [ 761.333507][T15214] [ 761.333515][T15214] dump_stack_lvl+0x16c/0x1f0 [ 761.333543][T15214] should_fail_ex+0x512/0x640 [ 761.333569][T15214] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 761.333592][T15214] should_failslab+0xc2/0x120 [ 761.333616][T15214] __kmalloc_cache_noprof+0x6a/0x3e0 [ 761.333636][T15214] ? ip_vs_protocol_net_init+0xbe/0x300 [ 761.333667][T15214] ip_vs_protocol_net_init+0xbe/0x300 [ 761.333697][T15214] __ip_vs_init+0x239/0x520 [ 761.333717][T15214] ? __pfx___ip_vs_init+0x10/0x10 [ 761.333735][T15214] ops_init+0x1e2/0x5f0 [ 761.333762][T15214] setup_net+0x10f/0x380 [ 761.333784][T15214] ? lockdep_init_map_type+0x5c/0x280 [ 761.333811][T15214] ? __pfx_setup_net+0x10/0x10 [ 761.333836][T15214] ? debug_mutex_init+0x37/0x70 [ 761.333857][T15214] copy_net_ns+0x2a6/0x5f0 [ 761.333894][T15214] create_new_namespaces+0x3ea/0xa90 [ 761.333921][T15214] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 761.333946][T15214] ksys_unshare+0x45b/0xa40 [ 761.333972][T15214] ? __pfx_ksys_unshare+0x10/0x10 [ 761.334008][T15214] ? xfd_validate_state+0x61/0x180 [ 761.334042][T15214] __x64_sys_unshare+0x31/0x40 [ 761.334066][T15214] do_syscall_64+0xcd/0x490 [ 761.334092][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.334111][T15214] RIP: 0033:0x7f8d2918ebe9 [ 761.334128][T15214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.334147][T15214] RSP: 002b:00007f8d2a0a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 761.334165][T15214] RAX: ffffffffffffffda RBX: 00007f8d293b5fa0 RCX: 00007f8d2918ebe9 [ 761.334176][T15214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 761.334187][T15214] RBP: 00007f8d29211e19 R08: 0000000000000000 R09: 0000000000000000 [ 761.334198][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.334209][T15214] R13: 00007f8d293b6038 R14: 00007f8d293b5fa0 R15: 00007ffd7052dff8 [ 761.334234][T15214] [ 762.944277][T15240] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2306'. [ 764.619437][T15269] FAULT_INJECTION: forcing a failure. [ 764.619437][T15269] name failslab, interval 1, probability 0, space 0, times 0 [ 764.650473][T15269] CPU: 0 UID: 0 PID: 15269 Comm: syz.3.2314 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 764.650516][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.650535][T15269] Call Trace: [ 764.650547][T15269] [ 764.650559][T15269] dump_stack_lvl+0x16c/0x1f0 [ 764.650603][T15269] should_fail_ex+0x512/0x640 [ 764.650646][T15269] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 764.650689][T15269] should_failslab+0xc2/0x120 [ 764.650730][T15269] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 764.650763][T15269] ? __proc_create+0xc3/0x8e0 [ 764.650831][T15269] ? __proc_create+0x2ce/0x8e0 [ 764.650881][T15269] __proc_create+0x2ce/0x8e0 [ 764.650923][T15269] ? __pfx___proc_create+0x10/0x10 [ 764.650972][T15269] ? _raw_write_unlock+0x28/0x50 [ 764.651006][T15269] ? proc_register+0x314/0x5f0 [ 764.651063][T15269] proc_create_reg+0x7d/0x180 [ 764.651113][T15269] proc_create_net_data+0x8e/0x1c0 [ 764.651160][T15269] ? __pfx_proc_create_net_data+0x10/0x10 [ 764.651201][T15269] ? __pfx_proc_create_net_data+0x10/0x10 [ 764.651246][T15269] ? __kasan_kmalloc+0xaa/0xb0 [ 764.651287][T15269] ip_vs_conn_net_init+0x13f/0x200 [ 764.651322][T15269] __ip_vs_init+0x27d/0x520 [ 764.651354][T15269] ? __pfx___ip_vs_init+0x10/0x10 [ 764.651382][T15269] ops_init+0x1e2/0x5f0 [ 764.651422][T15269] setup_net+0x10f/0x380 [ 764.651456][T15269] ? lockdep_init_map_type+0x5c/0x280 [ 764.651496][T15269] ? __pfx_setup_net+0x10/0x10 [ 764.651534][T15269] ? debug_mutex_init+0x37/0x70 [ 764.651569][T15269] copy_net_ns+0x2a6/0x5f0 [ 764.651616][T15269] create_new_namespaces+0x3ea/0xa90 [ 764.651660][T15269] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 764.651698][T15269] ksys_unshare+0x45b/0xa40 [ 764.651738][T15269] ? __pfx_ksys_unshare+0x10/0x10 [ 764.651779][T15269] ? xfd_validate_state+0x61/0x180 [ 764.651833][T15269] __x64_sys_unshare+0x31/0x40 [ 764.651869][T15269] do_syscall_64+0xcd/0x490 [ 764.651908][T15269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.651937][T15269] RIP: 0033:0x7f1b9c98ebe9 [ 764.651964][T15269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.651991][T15269] RSP: 002b:00007f1b9d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 764.652020][T15269] RAX: ffffffffffffffda RBX: 00007f1b9cbb5fa0 RCX: 00007f1b9c98ebe9 [ 764.652050][T15269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 764.652068][T15269] RBP: 00007f1b9ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 764.652086][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.652105][T15269] R13: 00007f1b9cbb6038 R14: 00007f1b9cbb5fa0 R15: 00007ffcfa3518e8 [ 764.652146][T15269] [ 765.266380][T15279] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2316'. [ 765.524595][T15281] FAULT_INJECTION: forcing a failure. [ 765.524595][T15281] name failslab, interval 1, probability 0, space 0, times 0 [ 765.532912][T15286] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2319'. [ 765.548346][T15281] CPU: 0 UID: 0 PID: 15281 Comm: syz.2.2317 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 765.548392][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 765.548409][T15281] Call Trace: [ 765.548421][T15281] [ 765.548434][T15281] dump_stack_lvl+0x16c/0x1f0 [ 765.548475][T15281] should_fail_ex+0x512/0x640 [ 765.548512][T15281] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 765.548555][T15281] should_failslab+0xc2/0x120 [ 765.548593][T15281] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 765.548630][T15281] ? ida_alloc_range+0x5cb/0x830 [ 765.548664][T15281] ? sock_alloc_inode+0x25/0x1c0 [ 765.548713][T15281] ? __pfx_sock_alloc_inode+0x10/0x10 [ 765.548755][T15281] sock_alloc_inode+0x25/0x1c0 [ 765.548798][T15281] alloc_inode+0x61/0x240 [ 765.548841][T15281] sock_alloc+0x40/0x280 [ 765.548884][T15281] sock_create_lite+0x82/0x120 [ 765.548930][T15281] __netlink_kernel_create+0xbd/0x750 [ 765.548975][T15281] ? __pfx___netlink_kernel_create+0x10/0x10 [ 765.549019][T15281] ? proc_create_reg+0xe3/0x180 [ 765.549070][T15281] xfrm_user_net_init+0xc6/0x190 [ 765.549106][T15281] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 765.549140][T15281] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 765.549175][T15281] ? __pfx_tls_init_net+0x10/0x10 [ 765.549221][T15281] ? tls_proc_init+0x58/0x70 [ 765.549267][T15281] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 765.549299][T15281] ops_init+0x1e2/0x5f0 [ 765.549346][T15281] setup_net+0x10f/0x380 [ 765.549382][T15281] ? lockdep_init_map_type+0x5c/0x280 [ 765.549427][T15281] ? __pfx_setup_net+0x10/0x10 [ 765.549473][T15281] ? debug_mutex_init+0x37/0x70 [ 765.549511][T15281] copy_net_ns+0x2a6/0x5f0 [ 765.549561][T15281] create_new_namespaces+0x3ea/0xa90 [ 765.549609][T15281] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 765.549649][T15281] ksys_unshare+0x45b/0xa40 [ 765.549693][T15281] ? __pfx_ksys_unshare+0x10/0x10 [ 765.549737][T15281] ? xfd_validate_state+0x61/0x180 [ 765.549799][T15281] __x64_sys_unshare+0x31/0x40 [ 765.549839][T15281] do_syscall_64+0xcd/0x490 [ 765.549882][T15281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.549914][T15281] RIP: 0033:0x7f957fd8ebe9 [ 765.549940][T15281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.549971][T15281] RSP: 002b:00007f957dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 765.550000][T15281] RAX: ffffffffffffffda RBX: 00007f957ffb5fa0 RCX: 00007f957fd8ebe9 [ 765.550020][T15281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 765.550039][T15281] RBP: 00007f957fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 765.550057][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.550075][T15281] R13: 00007f957ffb6038 R14: 00007f957ffb5fa0 R15: 00007ffd154c2178 [ 765.550117][T15281] [ 766.183930][T15296] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2321'. [ 767.033879][T15308] FAULT_INJECTION: forcing a failure. [ 767.033879][T15308] name failslab, interval 1, probability 0, space 0, times 0 [ 767.077092][T15308] CPU: 1 UID: 0 PID: 15308 Comm: syz.3.2323 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 767.077139][T15308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.077156][T15308] Call Trace: [ 767.077168][T15308] [ 767.077181][T15308] dump_stack_lvl+0x16c/0x1f0 [ 767.077223][T15308] should_fail_ex+0x512/0x640 [ 767.077258][T15308] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 767.077283][T15308] should_failslab+0xc2/0x120 [ 767.077308][T15308] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 767.077330][T15308] ? __proc_create+0xc3/0x8e0 [ 767.077356][T15308] ? __proc_create+0x2ce/0x8e0 [ 767.077385][T15308] __proc_create+0x2ce/0x8e0 [ 767.077412][T15308] ? __pfx___proc_create+0x10/0x10 [ 767.077439][T15308] ? pcpu_chunk_relocate+0x126/0x190 [ 767.077461][T15308] ? find_held_lock+0x2b/0x80 [ 767.077484][T15308] proc_create_reg+0x7d/0x180 [ 767.077512][T15308] ? __pfx_tls_statistics_seq_show+0x10/0x10 [ 767.077535][T15308] proc_create_net_single+0x86/0x180 [ 767.077563][T15308] ? __pfx_proc_create_net_single+0x10/0x10 [ 767.077596][T15308] ? __pfx_tls_init_net+0x10/0x10 [ 767.077624][T15308] tls_proc_init+0x4d/0x70 [ 767.077648][T15308] tls_init_net+0x65/0xf0 [ 767.077690][T15308] ops_init+0x1e2/0x5f0 [ 767.077731][T15308] setup_net+0x10f/0x380 [ 767.077763][T15308] ? lockdep_init_map_type+0x5c/0x280 [ 767.077790][T15308] ? __pfx_setup_net+0x10/0x10 [ 767.077815][T15308] ? debug_mutex_init+0x37/0x70 [ 767.077836][T15308] copy_net_ns+0x2a6/0x5f0 [ 767.077865][T15308] create_new_namespaces+0x3ea/0xa90 [ 767.077892][T15308] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 767.077916][T15308] ksys_unshare+0x45b/0xa40 [ 767.077941][T15308] ? __pfx_ksys_unshare+0x10/0x10 [ 767.077967][T15308] ? xfd_validate_state+0x61/0x180 [ 767.078008][T15308] __x64_sys_unshare+0x31/0x40 [ 767.078033][T15308] do_syscall_64+0xcd/0x490 [ 767.078059][T15308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.078078][T15308] RIP: 0033:0x7f1b9c98ebe9 [ 767.078094][T15308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.078114][T15308] RSP: 002b:00007f1b9d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 767.078132][T15308] RAX: ffffffffffffffda RBX: 00007f1b9cbb5fa0 RCX: 00007f1b9c98ebe9 [ 767.078145][T15308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 767.078156][T15308] RBP: 00007f1b9ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 767.078167][T15308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.078178][T15308] R13: 00007f1b9cbb6038 R14: 00007f1b9cbb5fa0 R15: 00007ffcfa3518e8 [ 767.078200][T15308] [ 768.947881][T15326] FAULT_INJECTION: forcing a failure. [ 768.947881][T15326] name failslab, interval 1, probability 0, space 0, times 0 [ 768.978979][T15326] CPU: 0 UID: 0 PID: 15326 Comm: syz.1.2327 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 768.979013][T15326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 768.979024][T15326] Call Trace: [ 768.979032][T15326] [ 768.979039][T15326] dump_stack_lvl+0x16c/0x1f0 [ 768.979066][T15326] should_fail_ex+0x512/0x640 [ 768.979092][T15326] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 768.979120][T15326] should_failslab+0xc2/0x120 [ 768.979144][T15326] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 768.979176][T15326] ? register_ip_vs_app_inc+0x8c/0x4d0 [ 768.979202][T15326] kmemdup_noprof+0x29/0x60 [ 768.979224][T15326] register_ip_vs_app_inc+0x8c/0x4d0 [ 768.979249][T15326] __ip_vs_ftp_init+0x14b/0x220 [ 768.979272][T15326] ? __ip_vs_lblcr_init+0x189/0x330 [ 768.979292][T15326] ? __pfx___ip_vs_ftp_init+0x10/0x10 [ 768.979315][T15326] ops_init+0x1e2/0x5f0 [ 768.979342][T15326] setup_net+0x10f/0x380 [ 768.979365][T15326] ? lockdep_init_map_type+0x5c/0x280 [ 768.979392][T15326] ? __pfx_setup_net+0x10/0x10 [ 768.979417][T15326] ? debug_mutex_init+0x37/0x70 [ 768.979437][T15326] copy_net_ns+0x2a6/0x5f0 [ 768.979466][T15326] create_new_namespaces+0x3ea/0xa90 [ 768.979493][T15326] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 768.979517][T15326] ksys_unshare+0x45b/0xa40 [ 768.979542][T15326] ? __pfx_ksys_unshare+0x10/0x10 [ 768.979567][T15326] ? xfd_validate_state+0x61/0x180 [ 768.979601][T15326] __x64_sys_unshare+0x31/0x40 [ 768.979626][T15326] do_syscall_64+0xcd/0x490 [ 768.979651][T15326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.979669][T15326] RIP: 0033:0x7fb9c678ebe9 [ 768.979685][T15326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.979703][T15326] RSP: 002b:00007fb9c75c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 768.979721][T15326] RAX: ffffffffffffffda RBX: 00007fb9c69b5fa0 RCX: 00007fb9c678ebe9 [ 768.979734][T15326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 768.979745][T15326] RBP: 00007fb9c6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 768.979756][T15326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.979767][T15326] R13: 00007fb9c69b6038 R14: 00007fb9c69b5fa0 R15: 00007ffd55ab1fc8 [ 768.979790][T15326] [ 768.980620][T15325] FAULT_INJECTION: forcing a failure. [ 768.980620][T15325] name failslab, interval 1, probability 0, space 0, times 0 [ 769.236283][T15325] CPU: 1 UID: 0 PID: 15325 Comm: syz.0.2336 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 769.236326][T15325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.236345][T15325] Call Trace: [ 769.236356][T15325] [ 769.236369][T15325] dump_stack_lvl+0x16c/0x1f0 [ 769.236414][T15325] should_fail_ex+0x512/0x640 [ 769.236456][T15325] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 769.236495][T15325] should_failslab+0xc2/0x120 [ 769.236537][T15325] __kmalloc_cache_noprof+0x6a/0x3e0 [ 769.236568][T15325] ? inet6_net_init+0x642/0xb20 [ 769.236620][T15325] inet6_net_init+0x642/0xb20 [ 769.236672][T15325] ? __pfx_inet6_net_init+0x10/0x10 [ 769.236714][T15325] ops_init+0x1e2/0x5f0 [ 769.236758][T15325] setup_net+0x10f/0x380 [ 769.236796][T15325] ? lockdep_init_map_type+0x5c/0x280 [ 769.236837][T15325] ? __pfx_setup_net+0x10/0x10 [ 769.236878][T15325] ? debug_mutex_init+0x37/0x70 [ 769.236915][T15325] copy_net_ns+0x2a6/0x5f0 [ 769.236965][T15325] create_new_namespaces+0x3ea/0xa90 [ 769.237022][T15325] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 769.237063][T15325] ksys_unshare+0x45b/0xa40 [ 769.237107][T15325] ? __pfx_ksys_unshare+0x10/0x10 [ 769.237152][T15325] ? xfd_validate_state+0x61/0x180 [ 769.237213][T15325] __x64_sys_unshare+0x31/0x40 [ 769.237254][T15325] do_syscall_64+0xcd/0x490 [ 769.237297][T15325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.237330][T15325] RIP: 0033:0x7f8d2918ebe9 [ 769.237356][T15325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.237385][T15325] RSP: 002b:00007f8d2a0a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 769.237415][T15325] RAX: ffffffffffffffda RBX: 00007f8d293b5fa0 RCX: 00007f8d2918ebe9 [ 769.237437][T15325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 769.237456][T15325] RBP: 00007f8d29211e19 R08: 0000000000000000 R09: 0000000000000000 [ 769.237474][T15325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.237492][T15325] R13: 00007f8d293b6038 R14: 00007f8d293b5fa0 R15: 00007ffd7052dff8 [ 769.237533][T15325] [ 770.061390][T15339] FAULT_INJECTION: forcing a failure. [ 770.061390][T15339] name failslab, interval 1, probability 0, space 0, times 0 [ 770.100177][T15339] CPU: 1 UID: 0 PID: 15339 Comm: syz.3.2331 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 770.100223][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 770.100241][T15339] Call Trace: [ 770.100252][T15339] [ 770.100266][T15339] dump_stack_lvl+0x16c/0x1f0 [ 770.100310][T15339] should_fail_ex+0x512/0x640 [ 770.100351][T15339] ? __kmalloc_noprof+0xbf/0x510 [ 770.100389][T15339] ? lsm_blob_alloc+0x68/0x90 [ 770.100435][T15339] should_failslab+0xc2/0x120 [ 770.100474][T15339] __kmalloc_noprof+0xd2/0x510 [ 770.100521][T15339] lsm_blob_alloc+0x68/0x90 [ 770.100567][T15339] security_sk_alloc+0x30/0x270 [ 770.100603][T15339] sk_prot_alloc+0x1c7/0x2a0 [ 770.100651][T15339] sk_alloc+0x36/0xc20 [ 770.100687][T15339] __netlink_create+0x5e/0x2c0 [ 770.100725][T15339] __netlink_kernel_create+0xed/0x750 [ 770.100768][T15339] ? __pfx___netlink_kernel_create+0x10/0x10 [ 770.100812][T15339] ? proc_create_reg+0xe3/0x180 [ 770.100864][T15339] xfrm_user_net_init+0xc6/0x190 [ 770.100901][T15339] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 770.100936][T15339] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 770.100982][T15339] ? __pfx_tls_init_net+0x10/0x10 [ 770.101029][T15339] ? tls_proc_init+0x58/0x70 [ 770.101066][T15339] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 770.101098][T15339] ops_init+0x1e2/0x5f0 [ 770.101141][T15339] setup_net+0x10f/0x380 [ 770.101178][T15339] ? lockdep_init_map_type+0x5c/0x280 [ 770.101222][T15339] ? __pfx_setup_net+0x10/0x10 [ 770.101262][T15339] ? debug_mutex_init+0x37/0x70 [ 770.101299][T15339] copy_net_ns+0x2a6/0x5f0 [ 770.101347][T15339] create_new_namespaces+0x3ea/0xa90 [ 770.101393][T15339] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 770.101432][T15339] ksys_unshare+0x45b/0xa40 [ 770.101488][T15339] ? __pfx_ksys_unshare+0x10/0x10 [ 770.101531][T15339] ? xfd_validate_state+0x61/0x180 [ 770.101590][T15339] __x64_sys_unshare+0x31/0x40 [ 770.101631][T15339] do_syscall_64+0xcd/0x490 [ 770.101674][T15339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.101705][T15339] RIP: 0033:0x7f1b9c98ebe9 [ 770.101730][T15339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.101760][T15339] RSP: 002b:00007f1b9d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 770.101789][T15339] RAX: ffffffffffffffda RBX: 00007f1b9cbb5fa0 RCX: 00007f1b9c98ebe9 [ 770.101810][T15339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 770.101829][T15339] RBP: 00007f1b9ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 770.101847][T15339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.101865][T15339] R13: 00007f1b9cbb6038 R14: 00007f1b9cbb5fa0 R15: 00007ffcfa3518e8 [ 770.101906][T15339] [ 770.505824][T15344] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2333'. [ 773.094708][T15393] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2345'. [ 773.469777][T15398] FAULT_INJECTION: forcing a failure. [ 773.469777][T15398] name failslab, interval 1, probability 0, space 0, times 0 [ 773.497426][T15398] CPU: 1 UID: 0 PID: 15398 Comm: syz.2.2346 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 773.497481][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.497500][T15398] Call Trace: [ 773.497510][T15398] [ 773.497523][T15398] dump_stack_lvl+0x16c/0x1f0 [ 773.497567][T15398] should_fail_ex+0x512/0x640 [ 773.497609][T15398] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 773.497655][T15398] should_failslab+0xc2/0x120 [ 773.497697][T15398] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 773.497740][T15398] ? register_ip_vs_app_inc+0x8c/0x4d0 [ 773.497785][T15398] kmemdup_noprof+0x29/0x60 [ 773.497824][T15398] register_ip_vs_app_inc+0x8c/0x4d0 [ 773.497865][T15398] __ip_vs_ftp_init+0x14b/0x220 [ 773.497924][T15398] ? __ip_vs_lblcr_init+0x189/0x330 [ 773.497960][T15398] ? __pfx___ip_vs_ftp_init+0x10/0x10 [ 773.497999][T15398] ops_init+0x1e2/0x5f0 [ 773.498045][T15398] setup_net+0x10f/0x380 [ 773.498083][T15398] ? lockdep_init_map_type+0x5c/0x280 [ 773.498127][T15398] ? __pfx_setup_net+0x10/0x10 [ 773.498167][T15398] ? debug_mutex_init+0x37/0x70 [ 773.498204][T15398] copy_net_ns+0x2a6/0x5f0 [ 773.498253][T15398] create_new_namespaces+0x3ea/0xa90 [ 773.498299][T15398] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 773.498340][T15398] ksys_unshare+0x45b/0xa40 [ 773.498382][T15398] ? __pfx_ksys_unshare+0x10/0x10 [ 773.498425][T15398] ? xfd_validate_state+0x61/0x180 [ 773.498488][T15398] __x64_sys_unshare+0x31/0x40 [ 773.498530][T15398] do_syscall_64+0xcd/0x490 [ 773.498573][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.498606][T15398] RIP: 0033:0x7f957fd8ebe9 [ 773.498632][T15398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.498664][T15398] RSP: 002b:00007f957dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 773.498695][T15398] RAX: ffffffffffffffda RBX: 00007f957ffb5fa0 RCX: 00007f957fd8ebe9 [ 773.498717][T15398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 773.498737][T15398] RBP: 00007f957fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 773.498757][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.498776][T15398] R13: 00007f957ffb6038 R14: 00007f957ffb5fa0 R15: 00007ffd154c2178 [ 773.498818][T15398] [ 776.609895][T15438] FAULT_INJECTION: forcing a failure. [ 776.609895][T15438] name failslab, interval 1, probability 0, space 0, times 0 [ 776.636255][T15438] CPU: 0 UID: 0 PID: 15438 Comm: syz.1.2356 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 776.636285][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.636296][T15438] Call Trace: [ 776.636304][T15438] [ 776.636312][T15438] dump_stack_lvl+0x16c/0x1f0 [ 776.636340][T15438] should_fail_ex+0x512/0x640 [ 776.636364][T15438] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 776.636389][T15438] should_failslab+0xc2/0x120 [ 776.636416][T15438] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 776.636436][T15438] ? __proc_create+0xc3/0x8e0 [ 776.636462][T15438] ? __proc_create+0x2ce/0x8e0 [ 776.636492][T15438] __proc_create+0x2ce/0x8e0 [ 776.636519][T15438] ? __pfx___proc_create+0x10/0x10 [ 776.636543][T15438] ? proc_register+0x30f/0x5f0 [ 776.636573][T15438] ? _raw_write_unlock+0x28/0x50 [ 776.636598][T15438] proc_create_reg+0x7d/0x180 [ 776.636627][T15438] proc_create_net_data+0x8e/0x1c0 [ 776.636676][T15438] ? __pfx_proc_create_net_data+0x10/0x10 [ 776.636717][T15438] ? __pfx_proc_create_net_data+0x10/0x10 [ 776.636749][T15438] ? __kasan_kmalloc+0xaa/0xb0 [ 776.636774][T15438] ip_vs_conn_net_init+0xc8/0x200 [ 776.636796][T15438] __ip_vs_init+0x27d/0x520 [ 776.636816][T15438] ? __pfx___ip_vs_init+0x10/0x10 [ 776.636835][T15438] ops_init+0x1e2/0x5f0 [ 776.636862][T15438] setup_net+0x10f/0x380 [ 776.636884][T15438] ? lockdep_init_map_type+0x5c/0x280 [ 776.636910][T15438] ? __pfx_setup_net+0x10/0x10 [ 776.636944][T15438] ? debug_mutex_init+0x37/0x70 [ 776.636965][T15438] copy_net_ns+0x2a6/0x5f0 [ 776.636994][T15438] create_new_namespaces+0x3ea/0xa90 [ 776.637021][T15438] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 776.637046][T15438] ksys_unshare+0x45b/0xa40 [ 776.637073][T15438] ? __pfx_ksys_unshare+0x10/0x10 [ 776.637100][T15438] ? xfd_validate_state+0x61/0x180 [ 776.637135][T15438] __x64_sys_unshare+0x31/0x40 [ 776.637159][T15438] do_syscall_64+0xcd/0x490 [ 776.637184][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.637203][T15438] RIP: 0033:0x7fb9c678ebe9 [ 776.637219][T15438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.637238][T15438] RSP: 002b:00007fb9c75c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 776.637256][T15438] RAX: ffffffffffffffda RBX: 00007fb9c69b5fa0 RCX: 00007fb9c678ebe9 [ 776.637269][T15438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 776.637280][T15438] RBP: 00007fb9c6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 776.637291][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.637302][T15438] R13: 00007fb9c69b6038 R14: 00007fb9c69b5fa0 R15: 00007ffd55ab1fc8 [ 776.637324][T15438] [ 777.350271][T15444] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2357'. [ 777.751808][T15448] FAULT_INJECTION: forcing a failure. [ 777.751808][T15448] name failslab, interval 1, probability 0, space 0, times 0 [ 777.844232][T15448] CPU: 0 UID: 0 PID: 15448 Comm: syz.1.2359 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 777.844261][T15448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 777.844273][T15448] Call Trace: [ 777.844280][T15448] [ 777.844288][T15448] dump_stack_lvl+0x16c/0x1f0 [ 777.844316][T15448] should_fail_ex+0x512/0x640 [ 777.844342][T15448] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 777.844364][T15448] should_failslab+0xc2/0x120 [ 777.844389][T15448] __kmalloc_cache_noprof+0x6a/0x3e0 [ 777.844409][T15448] ? inet6_net_init+0x642/0xb20 [ 777.844439][T15448] inet6_net_init+0x642/0xb20 [ 777.844468][T15448] ? __pfx_inet6_net_init+0x10/0x10 [ 777.844495][T15448] ops_init+0x1e2/0x5f0 [ 777.844521][T15448] setup_net+0x10f/0x380 [ 777.844543][T15448] ? lockdep_init_map_type+0x5c/0x280 [ 777.844570][T15448] ? __pfx_setup_net+0x10/0x10 [ 777.844594][T15448] ? debug_mutex_init+0x37/0x70 [ 777.844614][T15448] copy_net_ns+0x2a6/0x5f0 [ 777.844643][T15448] create_new_namespaces+0x3ea/0xa90 [ 777.844669][T15448] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 777.844692][T15448] ksys_unshare+0x45b/0xa40 [ 777.844718][T15448] ? __pfx_ksys_unshare+0x10/0x10 [ 777.844743][T15448] ? xfd_validate_state+0x61/0x180 [ 777.844776][T15448] __x64_sys_unshare+0x31/0x40 [ 777.844800][T15448] do_syscall_64+0xcd/0x490 [ 777.844825][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.844845][T15448] RIP: 0033:0x7fb9c678ebe9 [ 777.844860][T15448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.844879][T15448] RSP: 002b:00007fb9c75c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 777.844897][T15448] RAX: ffffffffffffffda RBX: 00007fb9c69b5fa0 RCX: 00007fb9c678ebe9 [ 777.844909][T15448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 777.844928][T15448] RBP: 00007fb9c6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 777.844939][T15448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.844950][T15448] R13: 00007fb9c69b6038 R14: 00007fb9c69b5fa0 R15: 00007ffd55ab1fc8 [ 777.844973][T15448] [ 784.052520][T15539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 784.062264][T15539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 784.071662][T15539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 784.081152][T15539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 784.089593][T15539] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 784.376370][ T3517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.730204][ T3517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.868744][ T3517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.040674][ T3517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.896744][T15538] chnl_net:caif_netlink_parms(): no params data found [ 785.923886][ T3517] bridge_slave_1: left allmulticast mode [ 785.951080][ T3517] bridge_slave_1: left promiscuous mode [ 785.980428][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.016238][ T3517] bridge_slave_0: left allmulticast mode [ 786.022467][ T3517] bridge_slave_0: left promiscuous mode [ 786.029265][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.186862][ T5875] Bluetooth: hci4: command tx timeout [ 786.959039][ T3517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.991148][ T3517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.006261][ T3517] bond0 (unregistering): Released all slaves [ 787.055023][T15566] FAULT_INJECTION: forcing a failure. [ 787.055023][T15566] name failslab, interval 1, probability 0, space 0, times 0 [ 787.097297][T15566] CPU: 0 UID: 0 PID: 15566 Comm: syz.3.2383 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 787.097340][T15566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.097357][T15566] Call Trace: [ 787.097367][T15566] [ 787.097380][T15566] dump_stack_lvl+0x16c/0x1f0 [ 787.097422][T15566] should_fail_ex+0x512/0x640 [ 787.097461][T15566] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 787.097504][T15566] should_failslab+0xc2/0x120 [ 787.097544][T15566] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 787.097582][T15566] ? __register_sysctl_table+0x73b/0x1900 [ 787.097649][T15566] ? register_ip_vs_app+0x17a/0x370 [ 787.097693][T15566] kmemdup_noprof+0x29/0x60 [ 787.097743][T15566] register_ip_vs_app+0x17a/0x370 [ 787.097784][T15566] __ip_vs_ftp_init+0x60/0x220 [ 787.097822][T15566] ? __ip_vs_lblcr_init+0x189/0x330 [ 787.097855][T15566] ? __pfx___ip_vs_ftp_init+0x10/0x10 [ 787.097894][T15566] ops_init+0x1e2/0x5f0 [ 787.097939][T15566] setup_net+0x10f/0x380 [ 787.097978][T15566] ? lockdep_init_map_type+0x5c/0x280 [ 787.098023][T15566] ? __pfx_setup_net+0x10/0x10 [ 787.098066][T15566] ? debug_mutex_init+0x37/0x70 [ 787.098111][T15566] copy_net_ns+0x2a6/0x5f0 [ 787.098160][T15566] create_new_namespaces+0x3ea/0xa90 [ 787.098207][T15566] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 787.098249][T15566] ksys_unshare+0x45b/0xa40 [ 787.098294][T15566] ? __pfx_ksys_unshare+0x10/0x10 [ 787.098339][T15566] ? xfd_validate_state+0x61/0x180 [ 787.098397][T15566] __x64_sys_unshare+0x31/0x40 [ 787.098439][T15566] do_syscall_64+0xcd/0x490 [ 787.098479][T15566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.098508][T15566] RIP: 0033:0x7f1b9c98ebe9 [ 787.098531][T15566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.098558][T15566] RSP: 002b:00007f1b9d797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 787.098586][T15566] RAX: ffffffffffffffda RBX: 00007f1b9cbb5fa0 RCX: 00007f1b9c98ebe9 [ 787.098606][T15566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 787.098623][T15566] RBP: 00007f1b9ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 787.098642][T15566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.098659][T15566] R13: 00007f1b9cbb6038 R14: 00007f1b9cbb5fa0 R15: 00007ffcfa3518e8 [ 787.098698][T15566] [ 787.374276][T15586] FAULT_INJECTION: forcing a failure. [ 787.374276][T15586] name failslab, interval 1, probability 0, space 0, times 0 [ 787.387859][T15586] CPU: 1 UID: 0 PID: 15586 Comm: syz.0.2385 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 787.387904][T15586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.387923][T15586] Call Trace: [ 787.387934][T15586] [ 787.387946][T15586] dump_stack_lvl+0x16c/0x1f0 [ 787.387989][T15586] should_fail_ex+0x512/0x640 [ 787.388028][T15586] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 787.388068][T15586] should_failslab+0xc2/0x120 [ 787.388103][T15586] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 787.388136][T15586] ? __proc_create+0xc3/0x8e0 [ 787.388179][T15586] ? __proc_create+0x2ce/0x8e0 [ 787.388225][T15586] __proc_create+0x2ce/0x8e0 [ 787.388268][T15586] ? __pfx___proc_create+0x10/0x10 [ 787.388322][T15586] proc_create_reg+0x7d/0x180 [ 787.388369][T15586] proc_create_net_data+0x8e/0x1c0 [ 787.388414][T15586] ? __pfx_proc_create_net_data+0x10/0x10 [ 787.388467][T15586] udp6_proc_init+0x57/0x80 [ 787.388510][T15586] inet6_net_init+0x67a/0xb20 [ 787.388557][T15586] ? __pfx_inet6_net_init+0x10/0x10 [ 787.388602][T15586] ops_init+0x1e2/0x5f0 [ 787.388646][T15586] setup_net+0x10f/0x380 [ 787.388684][T15586] ? lockdep_init_map_type+0x5c/0x280 [ 787.388724][T15586] ? __pfx_setup_net+0x10/0x10 [ 787.388765][T15586] ? debug_mutex_init+0x37/0x70 [ 787.388798][T15586] copy_net_ns+0x2a6/0x5f0 [ 787.388953][T15586] create_new_namespaces+0x3ea/0xa90 [ 787.389000][T15586] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 787.389038][T15586] ksys_unshare+0x45b/0xa40 [ 787.389078][T15586] ? __pfx_ksys_unshare+0x10/0x10 [ 787.389120][T15586] ? xfd_validate_state+0x61/0x180 [ 787.389179][T15586] __x64_sys_unshare+0x31/0x40 [ 787.389220][T15586] do_syscall_64+0xcd/0x490 [ 787.389263][T15586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.389294][T15586] RIP: 0033:0x7f8d2918ebe9 [ 787.389321][T15586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.389353][T15586] RSP: 002b:00007f8d2a0a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 787.389385][T15586] RAX: ffffffffffffffda RBX: 00007f8d293b5fa0 RCX: 00007f8d2918ebe9 [ 787.389407][T15586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 787.389426][T15586] RBP: 00007f8d29211e19 R08: 0000000000000000 R09: 0000000000000000 [ 787.389446][T15586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.389465][T15586] R13: 00007f8d293b6038 R14: 00007f8d293b5fa0 R15: 00007ffd7052dff8 [ 787.389505][T15586] [ 787.925353][T15538] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.951597][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.970388][T15538] bridge_slave_0: entered allmulticast mode [ 788.000580][T15538] bridge_slave_0: entered promiscuous mode [ 788.051321][T15538] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.058798][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.066179][T15538] bridge_slave_1: entered allmulticast mode [ 788.074747][T15538] bridge_slave_1: entered promiscuous mode [ 788.144228][ T3517] hsr_slave_0: left promiscuous mode [ 788.159436][ T3517] hsr_slave_1: left promiscuous mode [ 788.168644][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.176214][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.185754][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.194081][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.216134][ T3517] veth1_macvtap: left promiscuous mode [ 788.222379][ T3517] veth1_vlan: left promiscuous mode [ 788.238260][ T3517] veth0_vlan: left promiscuous mode [ 788.266871][ T5875] Bluetooth: hci4: command tx timeout [ 788.960711][ T3517] team0 (unregistering): Port device team_slave_1 removed [ 789.049586][ T3517] team0 (unregistering): Port device team_slave_0 removed [ 790.346902][ T5875] Bluetooth: hci4: command tx timeout [ 790.431432][T15538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.463841][T15538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.850156][T15538] team0: Port device team_slave_0 added [ 790.869404][T15538] team0: Port device team_slave_1 added [ 791.369496][T15538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.436818][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.506027][T15538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.636236][T15538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.652810][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.684404][T15538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.307960][T15538] hsr_slave_0: entered promiscuous mode [ 792.355831][T15538] hsr_slave_1: entered promiscuous mode [ 792.427011][ T5875] Bluetooth: hci4: command tx timeout [ 794.862271][T15538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 794.963288][T15538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.995981][T15538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 795.017380][T15538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 795.351194][T15538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.479892][T15538] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.495242][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.502534][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.630760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.638129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.754399][T15538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 796.524162][T15538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.635911][T15538] veth0_vlan: entered promiscuous mode [ 796.731133][T15538] veth1_vlan: entered promiscuous mode [ 796.803708][T15538] veth0_macvtap: entered promiscuous mode [ 796.814181][T15538] veth1_macvtap: entered promiscuous mode [ 796.833251][T15538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.845299][T15538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.019044][T15737] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2407'. [ 797.042832][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.120716][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.194501][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.308981][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.642949][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.679571][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.748783][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.757205][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.512715][T15749] FAULT_INJECTION: forcing a failure. [ 798.512715][T15749] name failslab, interval 1, probability 0, space 0, times 0 [ 798.627352][T15749] CPU: 0 UID: 0 PID: 15749 Comm: syz.1.2376 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 798.627403][T15749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.627422][T15749] Call Trace: [ 798.627434][T15749] [ 798.627448][T15749] dump_stack_lvl+0x16c/0x1f0 [ 798.627492][T15749] should_fail_ex+0x512/0x640 [ 798.627534][T15749] ? __kmalloc_noprof+0xbf/0x510 [ 798.627574][T15749] ? __register_sysctl_table+0xb3/0x1900 [ 798.627618][T15749] should_failslab+0xc2/0x120 [ 798.627660][T15749] __kmalloc_noprof+0xd2/0x510 [ 798.627717][T15749] __register_sysctl_table+0xb3/0x1900 [ 798.627763][T15749] ? is_module_address+0x5f/0xf0 [ 798.627814][T15749] ? __pfx___register_sysctl_table+0x10/0x10 [ 798.627857][T15749] ? is_module_address+0x69/0xf0 [ 798.627899][T15749] ? register_net_sysctl_sz+0x228/0x3e0 [ 798.627945][T15749] ? __asan_memcpy+0x3c/0x60 [ 798.627982][T15749] ipv4_sysctl_init_net+0xfe/0x350 [ 798.628033][T15749] ? __pfx_ipv4_sysctl_init_net+0x10/0x10 [ 798.628083][T15749] ops_init+0x1e2/0x5f0 [ 798.628129][T15749] setup_net+0x10f/0x380 [ 798.628166][T15749] ? lockdep_init_map_type+0x5c/0x280 [ 798.628211][T15749] ? __pfx_setup_net+0x10/0x10 [ 798.628253][T15749] ? debug_mutex_init+0x37/0x70 [ 798.628291][T15749] copy_net_ns+0x2a6/0x5f0 [ 798.628346][T15749] create_new_namespaces+0x3ea/0xa90 [ 798.628393][T15749] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 798.628434][T15749] ksys_unshare+0x45b/0xa40 [ 798.628478][T15749] ? __pfx_ksys_unshare+0x10/0x10 [ 798.628522][T15749] ? xfd_validate_state+0x61/0x180 [ 798.628581][T15749] __x64_sys_unshare+0x31/0x40 [ 798.628623][T15749] do_syscall_64+0xcd/0x490 [ 798.628666][T15749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.628716][T15749] RIP: 0033:0x7f075958ebe9 [ 798.628742][T15749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.628773][T15749] RSP: 002b:00007f07577f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 798.628804][T15749] RAX: ffffffffffffffda RBX: 00007f07597b5fa0 RCX: 00007f075958ebe9 [ 798.628825][T15749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 798.628843][T15749] RBP: 00007f0759611e19 R08: 0000000000000000 R09: 0000000000000000 [ 798.628863][T15749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.628881][T15749] R13: 00007f07597b6038 R14: 00007f07597b5fa0 R15: 00007ffe40f67b58 [ 798.628925][T15749] [ 799.894219][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 799.904691][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 799.921849][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 799.962623][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.117440][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 800.151431][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 800.491647][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.720050][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.813439][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.660049][T15804] FAULT_INJECTION: forcing a failure. [ 801.660049][T15804] name failslab, interval 1, probability 0, space 0, times 0 [ 801.776324][T15776] chnl_net:caif_netlink_parms(): no params data found [ 801.825974][T15804] CPU: 0 UID: 0 PID: 15804 Comm: syz.0.2424 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 801.826011][T15804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 801.826023][T15804] Call Trace: [ 801.826030][T15804] [ 801.826038][T15804] dump_stack_lvl+0x16c/0x1f0 [ 801.826066][T15804] should_fail_ex+0x512/0x640 [ 801.826091][T15804] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 801.826120][T15804] should_failslab+0xc2/0x120 [ 801.826144][T15804] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 801.826167][T15804] ? __pfx___register_sysctl_table+0x10/0x10 [ 801.826194][T15804] ? is_module_address+0x69/0xf0 [ 801.826219][T15804] ? __ip_vs_lblcr_init+0x77/0x330 [ 801.826242][T15804] ? __pfx___ip_vs_lblcr_init+0x10/0x10 [ 801.826262][T15804] kmemdup_noprof+0x29/0x60 [ 801.826285][T15804] __ip_vs_lblcr_init+0x77/0x330 [ 801.826306][T15804] ? __pfx___ip_vs_lblcr_init+0x10/0x10 [ 801.826326][T15804] ops_init+0x1e2/0x5f0 [ 801.826353][T15804] setup_net+0x10f/0x380 [ 801.826375][T15804] ? lockdep_init_map_type+0x5c/0x280 [ 801.826402][T15804] ? __pfx_setup_net+0x10/0x10 [ 801.826427][T15804] ? debug_mutex_init+0x37/0x70 [ 801.826447][T15804] copy_net_ns+0x2a6/0x5f0 [ 801.826476][T15804] create_new_namespaces+0x3ea/0xa90 [ 801.826502][T15804] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 801.826526][T15804] ksys_unshare+0x45b/0xa40 [ 801.826551][T15804] ? __pfx_ksys_unshare+0x10/0x10 [ 801.826577][T15804] ? xfd_validate_state+0x61/0x180 [ 801.826610][T15804] __x64_sys_unshare+0x31/0x40 [ 801.826647][T15804] do_syscall_64+0xcd/0x490 [ 801.826686][T15804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.826715][T15804] RIP: 0033:0x7f8d2918ebe9 [ 801.826732][T15804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.826750][T15804] RSP: 002b:00007f8d2a0a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 801.826768][T15804] RAX: ffffffffffffffda RBX: 00007f8d293b5fa0 RCX: 00007f8d2918ebe9 [ 801.826780][T15804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 801.826791][T15804] RBP: 00007f8d29211e19 R08: 0000000000000000 R09: 0000000000000000 [ 801.826802][T15804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.826813][T15804] R13: 00007f8d293b6038 R14: 00007f8d293b5fa0 R15: 00007ffd7052dff8 [ 801.826836][T15804] [ 802.352919][ T5875] Bluetooth: hci0: command tx timeout [ 802.368388][ T12] bridge_slave_1: left allmulticast mode [ 802.374153][ T12] bridge_slave_1: left promiscuous mode [ 802.381855][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.406538][ T12] bridge_slave_0: left allmulticast mode [ 802.437242][ T12] bridge_slave_0: left promiscuous mode [ 802.444840][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.301704][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.325712][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.341206][ T12] bond0 (unregistering): Released all slaves [ 803.406425][T15830] FAULT_INJECTION: forcing a failure. [ 803.406425][T15830] name failslab, interval 1, probability 0, space 0, times 0 [ 803.422784][T15830] CPU: 0 UID: 0 PID: 15830 Comm: syz.1.2421 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 803.422813][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 803.422824][T15830] Call Trace: [ 803.422831][T15830] [ 803.422838][T15830] dump_stack_lvl+0x16c/0x1f0 [ 803.422866][T15830] should_fail_ex+0x512/0x640 [ 803.422893][T15830] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 803.422918][T15830] should_failslab+0xc2/0x120 [ 803.422942][T15830] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 803.422964][T15830] ? __proc_create+0xc3/0x8e0 [ 803.422991][T15830] ? __proc_create+0x2ce/0x8e0 [ 803.423021][T15830] __proc_create+0x2ce/0x8e0 [ 803.423056][T15830] ? __pfx___proc_create+0x10/0x10 [ 803.423089][T15830] ? _raw_write_unlock+0x28/0x50 [ 803.423109][T15830] ? proc_register+0x314/0x5f0 [ 803.423138][T15830] proc_create_reg+0x7d/0x180 [ 803.423167][T15830] proc_create_net_data+0x8e/0x1c0 [ 803.423195][T15830] ? __pfx_proc_create_net_data+0x10/0x10 [ 803.423223][T15830] ? __pfx_ndisc_net_init+0x10/0x10 [ 803.423248][T15830] ? __pfx_udplite6_proc_init_net+0x10/0x10 [ 803.423276][T15830] udplite6_proc_init_net+0x57/0x80 [ 803.423303][T15830] ops_init+0x1e2/0x5f0 [ 803.423330][T15830] setup_net+0x10f/0x380 [ 803.423352][T15830] ? lockdep_init_map_type+0x5c/0x280 [ 803.423378][T15830] ? __pfx_setup_net+0x10/0x10 [ 803.423403][T15830] ? debug_mutex_init+0x37/0x70 [ 803.423424][T15830] copy_net_ns+0x2a6/0x5f0 [ 803.423452][T15830] create_new_namespaces+0x3ea/0xa90 [ 803.423479][T15830] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 803.423503][T15830] ksys_unshare+0x45b/0xa40 [ 803.423528][T15830] ? __pfx_ksys_unshare+0x10/0x10 [ 803.423554][T15830] ? xfd_validate_state+0x61/0x180 [ 803.423587][T15830] __x64_sys_unshare+0x31/0x40 [ 803.423611][T15830] do_syscall_64+0xcd/0x490 [ 803.423636][T15830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.423655][T15830] RIP: 0033:0x7f075958ebe9 [ 803.423676][T15830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.423695][T15830] RSP: 002b:00007f07577f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 803.423715][T15830] RAX: ffffffffffffffda RBX: 00007f07597b5fa0 RCX: 00007f075958ebe9 [ 803.423728][T15830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 803.423745][T15830] RBP: 00007f0759611e19 R08: 0000000000000000 R09: 0000000000000000 [ 803.423757][T15830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.423767][T15830] R13: 00007f07597b6038 R14: 00007f07597b5fa0 R15: 00007ffe40f67b58 [ 803.423798][T15830] [ 804.085014][T15776] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.103116][T15776] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.143660][T15776] bridge_slave_0: entered allmulticast mode [ 804.155997][T15776] bridge_slave_0: entered promiscuous mode [ 804.170807][T15776] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.178431][T15776] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.185871][T15776] bridge_slave_1: entered allmulticast mode [ 804.198869][T15776] bridge_slave_1: entered promiscuous mode [ 804.427298][ T5875] Bluetooth: hci0: command tx timeout [ 804.925042][T15776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.959640][T15776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.054998][ T12] hsr_slave_0: left promiscuous mode [ 805.069738][ T12] hsr_slave_1: left promiscuous mode [ 805.087362][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.094823][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.107400][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.115035][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.156948][ T12] veth1_macvtap: left promiscuous mode [ 805.172246][ T12] veth1_vlan: left promiscuous mode [ 805.222059][ T12] veth0_vlan: left promiscuous mode [ 806.512493][ T5875] Bluetooth: hci0: command tx timeout [ 806.921937][ T12] team0 (unregistering): Port device team_slave_1 removed [ 806.999434][ T12] team0 (unregistering): Port device team_slave_0 removed [ 808.076104][T15776] team0: Port device team_slave_0 added [ 808.086603][T15776] team0: Port device team_slave_1 added [ 808.194872][T15776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.202910][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.229601][T15776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.283713][T15776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.299523][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.330760][T15776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.605807][ T5875] Bluetooth: hci0: command tx timeout [ 808.859745][T15776] hsr_slave_0: entered promiscuous mode [ 808.886130][T15776] hsr_slave_1: entered promiscuous mode [ 808.900851][T15776] debugfs: 'hsr0' already exists in 'hsr' [ 808.908102][T15776] Cannot create hsr debugfs directory [ 809.354499][T15930] FAULT_INJECTION: forcing a failure. [ 809.354499][T15930] name failslab, interval 1, probability 0, space 0, times 0 [ 809.516042][T15930] CPU: 1 UID: 0 PID: 15930 Comm: syz.2.2434 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 809.516086][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.516098][T15930] Call Trace: [ 809.516106][T15930] [ 809.516117][T15930] dump_stack_lvl+0x16c/0x1f0 [ 809.516145][T15930] should_fail_ex+0x512/0x640 [ 809.516171][T15930] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 809.516197][T15930] should_failslab+0xc2/0x120 [ 809.516221][T15930] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 809.516242][T15930] ? __proc_create+0xc3/0x8e0 [ 809.516268][T15930] ? __proc_create+0x2ce/0x8e0 [ 809.516297][T15930] __proc_create+0x2ce/0x8e0 [ 809.516323][T15930] ? __pfx___proc_create+0x10/0x10 [ 809.516361][T15930] proc_create_reg+0x7d/0x180 [ 809.516391][T15930] proc_create_net_data+0x8e/0x1c0 [ 809.516419][T15930] ? __pfx_proc_create_net_data+0x10/0x10 [ 809.516447][T15930] ? __kasan_kmalloc+0xaa/0xb0 [ 809.516483][T15930] ip_vs_app_net_init+0xc8/0x110 [ 809.516506][T15930] __ip_vs_init+0x25b/0x520 [ 809.516527][T15930] ? __pfx___ip_vs_init+0x10/0x10 [ 809.516546][T15930] ops_init+0x1e2/0x5f0 [ 809.516573][T15930] setup_net+0x10f/0x380 [ 809.516595][T15930] ? lockdep_init_map_type+0x5c/0x280 [ 809.516639][T15930] ? __pfx_setup_net+0x10/0x10 [ 809.516678][T15930] ? debug_mutex_init+0x37/0x70 [ 809.516713][T15930] copy_net_ns+0x2a6/0x5f0 [ 809.516744][T15930] create_new_namespaces+0x3ea/0xa90 [ 809.516770][T15930] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 809.516794][T15930] ksys_unshare+0x45b/0xa40 [ 809.516819][T15930] ? __pfx_ksys_unshare+0x10/0x10 [ 809.516845][T15930] ? xfd_validate_state+0x61/0x180 [ 809.516878][T15930] __x64_sys_unshare+0x31/0x40 [ 809.516902][T15930] do_syscall_64+0xcd/0x490 [ 809.516927][T15930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.516946][T15930] RIP: 0033:0x7f957fd8ebe9 [ 809.516963][T15930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.516980][T15930] RSP: 002b:00007f957dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 809.516999][T15930] RAX: ffffffffffffffda RBX: 00007f957ffb5fa0 RCX: 00007f957fd8ebe9 [ 809.517011][T15930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 809.517022][T15930] RBP: 00007f957fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 809.517033][T15930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.517044][T15930] R13: 00007f957ffb6038 R14: 00007f957ffb5fa0 R15: 00007ffd154c2178 [ 809.517067][T15930] [ 810.087267][T15945] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 810.747416][T15776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 810.764283][T15776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 810.843420][T15776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 810.909721][T15776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 811.622091][T15776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.678621][T15776] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.762797][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.770151][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.948437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.955845][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.045570][T15776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.199258][T15776] veth0_vlan: entered promiscuous mode [ 813.222976][T15776] veth1_vlan: entered promiscuous mode [ 813.376442][T15776] veth0_macvtap: entered promiscuous mode [ 813.609268][T15776] veth1_macvtap: entered promiscuous mode [ 813.716187][T15776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.803582][T15776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.883098][ T3504] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.907436][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.960187][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.977371][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.076177][T16016] FAULT_INJECTION: forcing a failure. [ 814.076177][T16016] name failslab, interval 1, probability 0, space 0, times 0 [ 814.145214][T16016] CPU: 1 UID: 0 PID: 16016 Comm: syz.1.2445 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 814.145261][T16016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 814.145279][T16016] Call Trace: [ 814.145290][T16016] [ 814.145303][T16016] dump_stack_lvl+0x16c/0x1f0 [ 814.145346][T16016] should_fail_ex+0x512/0x640 [ 814.145387][T16016] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 814.145428][T16016] should_failslab+0xc2/0x120 [ 814.145468][T16016] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 814.145504][T16016] ? sock_alloc_inode+0x25/0x1c0 [ 814.145553][T16016] ? __pfx_sock_alloc_inode+0x10/0x10 [ 814.145591][T16016] sock_alloc_inode+0x25/0x1c0 [ 814.145631][T16016] alloc_inode+0x61/0x240 [ 814.145671][T16016] sock_alloc+0x40/0x280 [ 814.145713][T16016] __sock_create+0xc1/0x8d0 [ 814.145767][T16016] inet_ctl_sock_create+0x94/0x230 [ 814.145813][T16016] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 814.145873][T16016] ? proc_create_net_data+0x155/0x1c0 [ 814.145927][T16016] ndisc_net_init+0x89/0x250 [ 814.145963][T16016] ? __pfx_ndisc_net_init+0x10/0x10 [ 814.145994][T16016] ? __pfx_ip6mr_net_init+0x10/0x10 [ 814.146034][T16016] ? ip6mr_net_init+0x2d8/0x4e0 [ 814.146074][T16016] ? __pfx_ndisc_net_init+0x10/0x10 [ 814.146106][T16016] ops_init+0x1e2/0x5f0 [ 814.146151][T16016] setup_net+0x10f/0x380 [ 814.146189][T16016] ? lockdep_init_map_type+0x5c/0x280 [ 814.146233][T16016] ? __pfx_setup_net+0x10/0x10 [ 814.146274][T16016] ? debug_mutex_init+0x37/0x70 [ 814.146310][T16016] copy_net_ns+0x2a6/0x5f0 [ 814.146358][T16016] create_new_namespaces+0x3ea/0xa90 [ 814.146404][T16016] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 814.146443][T16016] ksys_unshare+0x45b/0xa40 [ 814.146484][T16016] ? __pfx_ksys_unshare+0x10/0x10 [ 814.146527][T16016] ? xfd_validate_state+0x61/0x180 [ 814.146582][T16016] __x64_sys_unshare+0x31/0x40 [ 814.146627][T16016] do_syscall_64+0xcd/0x490 [ 814.146665][T16016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.146694][T16016] RIP: 0033:0x7f075958ebe9 [ 814.146720][T16016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.146771][T16016] RSP: 002b:00007f07577f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 814.146800][T16016] RAX: ffffffffffffffda RBX: 00007f07597b5fa0 RCX: 00007f075958ebe9 [ 814.146821][T16016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 814.146849][T16016] RBP: 00007f0759611e19 R08: 0000000000000000 R09: 0000000000000000 [ 814.146868][T16016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.146886][T16016] R13: 00007f07597b6038 R14: 00007f07597b5fa0 R15: 00007ffe40f67b58 [ 814.146927][T16016] [ 814.424398][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.431525][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.443516][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.486816][T16016] socket: no more sockets [ 814.491233][T16016] ICMPv6: NDISC: Failed to initialize the control socket (err -23) [ 814.583613][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.622914][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.631771][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.914258][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 816.924100][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 816.935931][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 816.955460][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 816.967407][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 817.096979][ T3568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.317709][ T3568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.497491][ T3568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.875965][ T3568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.787265][ T3568] bridge_slave_1: left allmulticast mode [ 818.802971][ T3568] bridge_slave_1: left promiscuous mode [ 818.868181][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.908485][ T3568] bridge_slave_0: left allmulticast mode [ 818.925545][ T3568] bridge_slave_0: left promiscuous mode [ 818.934105][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.987437][ T5869] Bluetooth: hci2: command tx timeout [ 820.488405][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.566106][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.744929][ T3568] bond0 (unregistering): Released all slaves [ 820.946314][T16055] chnl_net:caif_netlink_parms(): no params data found [ 821.067292][ T5869] Bluetooth: hci2: command tx timeout [ 821.533780][T16055] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.542018][T16055] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.549841][T16055] bridge_slave_0: entered allmulticast mode [ 821.558083][T16055] bridge_slave_0: entered promiscuous mode [ 821.615753][T16055] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.625511][T16055] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.634503][T16055] bridge_slave_1: entered allmulticast mode [ 821.643592][T16055] bridge_slave_1: entered promiscuous mode [ 821.824744][ T3568] hsr_slave_0: left promiscuous mode [ 821.841675][ T3568] hsr_slave_1: left promiscuous mode [ 821.857831][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.886311][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.917909][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.925526][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.947042][ T3568] veth1_macvtap: left promiscuous mode [ 821.952783][ T3568] veth1_vlan: left promiscuous mode [ 821.968769][ T3568] veth0_vlan: left promiscuous mode [ 823.035845][T16146] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 823.136952][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 823.147596][ T5869] Bluetooth: hci2: command tx timeout [ 823.275548][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 823.920305][T16155] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2470'. [ 823.957495][T16155] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2470'. [ 825.008453][T16055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.080365][T16055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.237005][ T5869] Bluetooth: hci2: command tx timeout [ 825.329982][T16055] team0: Port device team_slave_0 added [ 825.347994][T16055] team0: Port device team_slave_1 added [ 825.443839][T16055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.522575][T16055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.660484][T16055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.679290][T16055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.687003][T16055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.725158][T16055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.000392][T16055] hsr_slave_0: entered promiscuous mode [ 826.084205][T16055] hsr_slave_1: entered promiscuous mode [ 826.199399][T16055] debugfs: 'hsr0' already exists in 'hsr' [ 826.226147][T16055] Cannot create hsr debugfs directory [ 826.954011][T16198] FAULT_INJECTION: forcing a failure. [ 826.954011][T16198] name failslab, interval 1, probability 0, space 0, times 0 [ 827.015238][T16198] CPU: 1 UID: 0 PID: 16198 Comm: syz.1.2478 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 827.015343][T16198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.015363][T16198] Call Trace: [ 827.015375][T16198] [ 827.015388][T16198] dump_stack_lvl+0x16c/0x1f0 [ 827.015429][T16198] should_fail_ex+0x512/0x640 [ 827.015470][T16198] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 827.015527][T16198] should_failslab+0xc2/0x120 [ 827.015567][T16198] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 827.015608][T16198] ? lockdep_init_map_type+0x5c/0x280 [ 827.015650][T16198] ? __ip_vs_lblc_init+0x77/0x340 [ 827.015685][T16198] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 827.015720][T16198] kmemdup_noprof+0x29/0x60 [ 827.015759][T16198] __ip_vs_lblc_init+0x77/0x340 [ 827.015790][T16198] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 827.015823][T16198] ops_init+0x1e2/0x5f0 [ 827.015870][T16198] setup_net+0x10f/0x380 [ 827.015907][T16198] ? lockdep_init_map_type+0x5c/0x280 [ 827.015964][T16198] ? __pfx_setup_net+0x10/0x10 [ 827.016009][T16198] ? debug_mutex_init+0x37/0x70 [ 827.016047][T16198] copy_net_ns+0x2a6/0x5f0 [ 827.016097][T16198] create_new_namespaces+0x3ea/0xa90 [ 827.016155][T16198] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 827.016199][T16198] ksys_unshare+0x45b/0xa40 [ 827.016243][T16198] ? __pfx_ksys_unshare+0x10/0x10 [ 827.016294][T16198] ? xfd_validate_state+0x61/0x180 [ 827.016351][T16198] __x64_sys_unshare+0x31/0x40 [ 827.016394][T16198] do_syscall_64+0xcd/0x490 [ 827.016447][T16198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.016480][T16198] RIP: 0033:0x7f075958ebe9 [ 827.016598][T16198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.016637][T16198] RSP: 002b:00007f07577f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 827.016667][T16198] RAX: ffffffffffffffda RBX: 00007f07597b5fa0 RCX: 00007f075958ebe9 [ 827.016688][T16198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 827.016706][T16198] RBP: 00007f0759611e19 R08: 0000000000000000 R09: 0000000000000000 [ 827.016725][T16198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.016744][T16198] R13: 00007f07597b6038 R14: 00007f07597b5fa0 R15: 00007ffe40f67b58 [ 827.016784][T16198] [ 828.165344][T16055] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 828.205677][T16055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 828.275802][T16055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 828.371322][T16055] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 828.710407][T16225] FAULT_INJECTION: forcing a failure. [ 828.710407][T16225] name failslab, interval 1, probability 0, space 0, times 0 [ 828.752136][T16227] FAULT_INJECTION: forcing a failure. [ 828.752136][T16227] name failslab, interval 1, probability 0, space 0, times 0 [ 828.782311][T16225] CPU: 1 UID: 0 PID: 16225 Comm: syz.2.2482 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 828.782356][T16225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 828.782375][T16225] Call Trace: [ 828.782386][T16225] [ 828.782399][T16225] dump_stack_lvl+0x16c/0x1f0 [ 828.782444][T16225] should_fail_ex+0x512/0x640 [ 828.782484][T16225] ? __kmalloc_noprof+0xbf/0x510 [ 828.782531][T16225] ? lsm_blob_alloc+0x68/0x90 [ 828.782574][T16225] should_failslab+0xc2/0x120 [ 828.782615][T16225] __kmalloc_noprof+0xd2/0x510 [ 828.782659][T16225] lsm_blob_alloc+0x68/0x90 [ 828.782704][T16225] security_sk_alloc+0x30/0x270 [ 828.782740][T16225] sk_prot_alloc+0x1c7/0x2a0 [ 828.782783][T16225] sk_alloc+0x36/0xc20 [ 828.782816][T16225] __netlink_create+0x5e/0x2c0 [ 828.782849][T16225] __netlink_kernel_create+0xed/0x750 [ 828.782889][T16225] ? __pfx___netlink_kernel_create+0x10/0x10 [ 828.782947][T16225] ? proc_create_reg+0xe3/0x180 [ 828.782999][T16225] xfrm_user_net_init+0xc6/0x190 [ 828.783033][T16225] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 828.783069][T16225] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 828.783103][T16225] ? __pfx_tls_init_net+0x10/0x10 [ 828.783146][T16225] ? tls_proc_init+0x58/0x70 [ 828.783184][T16225] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 828.783216][T16225] ops_init+0x1e2/0x5f0 [ 828.783261][T16225] setup_net+0x10f/0x380 [ 828.783298][T16225] ? lockdep_init_map_type+0x5c/0x280 [ 828.783349][T16225] ? __pfx_setup_net+0x10/0x10 [ 828.783389][T16225] ? debug_mutex_init+0x37/0x70 [ 828.783426][T16225] copy_net_ns+0x2a6/0x5f0 [ 828.783476][T16225] create_new_namespaces+0x3ea/0xa90 [ 828.783530][T16225] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 828.783572][T16225] ksys_unshare+0x45b/0xa40 [ 828.783614][T16225] ? __pfx_ksys_unshare+0x10/0x10 [ 828.783659][T16225] ? xfd_validate_state+0x61/0x180 [ 828.783718][T16225] __x64_sys_unshare+0x31/0x40 [ 828.783758][T16225] do_syscall_64+0xcd/0x490 [ 828.783797][T16225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.783830][T16225] RIP: 0033:0x7f957fd8ebe9 [ 828.783867][T16225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.783899][T16225] RSP: 002b:00007f957dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 828.783931][T16225] RAX: ffffffffffffffda RBX: 00007f957ffb5fa0 RCX: 00007f957fd8ebe9 [ 828.783952][T16225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 828.783970][T16225] RBP: 00007f957fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 828.783988][T16225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.784005][T16225] R13: 00007f957ffb6038 R14: 00007f957ffb5fa0 R15: 00007ffd154c2178 [ 828.784047][T16225] [ 829.062373][T16227] CPU: 1 UID: 0 PID: 16227 Comm: syz.1.2483 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 829.062419][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 829.062439][T16227] Call Trace: [ 829.062450][T16227] [ 829.062462][T16227] dump_stack_lvl+0x16c/0x1f0 [ 829.062507][T16227] should_fail_ex+0x512/0x640 [ 829.062549][T16227] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 829.062602][T16227] should_failslab+0xc2/0x120 [ 829.062642][T16227] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 829.062677][T16227] ? __proc_create+0xc3/0x8e0 [ 829.062721][T16227] ? __proc_create+0x2ce/0x8e0 [ 829.062769][T16227] __proc_create+0x2ce/0x8e0 [ 829.062814][T16227] ? __pfx___proc_create+0x10/0x10 [ 829.062864][T16227] ? _raw_write_unlock+0x28/0x50 [ 829.062897][T16227] ? proc_register+0x314/0x5f0 [ 829.062946][T16227] proc_create_reg+0x7d/0x180 [ 829.062995][T16227] proc_create_net_data+0x8e/0x1c0 [ 829.063043][T16227] ? __pfx_proc_create_net_data+0x10/0x10 [ 829.063102][T16227] tcp6_proc_init+0x57/0x80 [ 829.063134][T16227] inet6_net_init+0x82d/0xb20 [ 829.063190][T16227] ? __pfx_inet6_net_init+0x10/0x10 [ 829.063235][T16227] ops_init+0x1e2/0x5f0 [ 829.063281][T16227] setup_net+0x10f/0x380 [ 829.063318][T16227] ? lockdep_init_map_type+0x5c/0x280 [ 829.063363][T16227] ? __pfx_setup_net+0x10/0x10 [ 829.063406][T16227] ? debug_mutex_init+0x37/0x70 [ 829.063441][T16227] copy_net_ns+0x2a6/0x5f0 [ 829.063490][T16227] create_new_namespaces+0x3ea/0xa90 [ 829.063537][T16227] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 829.063575][T16227] ksys_unshare+0x45b/0xa40 [ 829.063627][T16227] ? __pfx_ksys_unshare+0x10/0x10 [ 829.063669][T16227] ? xfd_validate_state+0x61/0x180 [ 829.063728][T16227] __x64_sys_unshare+0x31/0x40 [ 829.063769][T16227] do_syscall_64+0xcd/0x490 [ 829.063813][T16227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.063843][T16227] RIP: 0033:0x7f075958ebe9 [ 829.063870][T16227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.063901][T16227] RSP: 002b:00007f07577f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 829.063930][T16227] RAX: ffffffffffffffda RBX: 00007f07597b5fa0 RCX: 00007f075958ebe9 [ 829.063951][T16227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 829.063970][T16227] RBP: 00007f0759611e19 R08: 0000000000000000 R09: 0000000000000000 [ 829.063989][T16227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.064008][T16227] R13: 00007f07597b6038 R14: 00007f07597b5fa0 R15: 00007ffe40f67b58 [ 829.064050][T16227] [ 829.351307][T16055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.380287][T16055] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.413934][T16055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 829.424351][T16055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 829.447619][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.454838][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.468552][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.475764][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.033969][T16055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.420726][T16055] veth0_vlan: entered promiscuous mode [ 830.480267][T16055] veth1_vlan: entered promiscuous mode [ 830.844188][T16055] veth0_macvtap: entered promiscuous mode [ 830.911795][T16055] veth1_macvtap: entered promiscuous mode [ 830.965919][T16055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.982427][T16055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.011436][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.049302][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.123384][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.269295][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.431093][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.480964][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.750786][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.777675][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.623141][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 833.632666][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 833.647011][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 833.659736][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 833.668562][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 834.262784][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.685533][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.051105][T16332] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 835.073269][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.359785][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.543228][T16339] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2497'. [ 835.576528][T16339] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2497'. [ 835.614833][T16339] netlink: 290 bytes leftover after parsing attributes in process `syz.1.2497'. [ 835.624619][T16339] veth0_macvtap: left promiscuous mode [ 835.706969][ T5869] Bluetooth: hci3: command tx timeout [ 835.715992][T16310] chnl_net:caif_netlink_parms(): no params data found [ 836.039263][T16310] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.055863][T16310] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.067095][T16310] bridge_slave_0: entered allmulticast mode [ 836.075251][T16310] bridge_slave_0: entered promiscuous mode [ 836.083506][T16310] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.090914][T16310] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.098544][T16310] bridge_slave_1: entered allmulticast mode [ 836.112352][T16310] bridge_slave_1: entered promiscuous mode [ 836.200874][T16310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.262742][T16310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.417847][T16310] team0: Port device team_slave_0 added [ 836.426237][T16310] team0: Port device team_slave_1 added [ 836.478497][T16310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.485678][T16310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.531801][T16310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.545993][T16310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.555761][T16310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.607463][T16310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.731120][T16310] hsr_slave_0: entered promiscuous mode [ 836.794669][T16310] hsr_slave_1: entered promiscuous mode [ 836.859931][T16310] debugfs: 'hsr0' already exists in 'hsr' [ 836.904049][T16310] Cannot create hsr debugfs directory [ 837.789260][ T5869] Bluetooth: hci3: command tx timeout [ 839.866878][ T5869] Bluetooth: hci3: command tx timeout [ 841.946983][ T5869] Bluetooth: hci3: command tx timeout [ 842.689543][T16409] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2510'. [ 842.702568][T16409] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2510'. [ 850.531719][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 850.541268][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 850.555053][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 850.564501][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 850.574799][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 850.775598][T16417] chnl_net:caif_netlink_parms(): no params data found [ 850.867774][T16417] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.875057][T16417] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.882579][T16417] bridge_slave_0: entered allmulticast mode [ 850.890974][T16417] bridge_slave_0: entered promiscuous mode [ 850.899497][T16417] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.907152][T16417] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.914469][T16417] bridge_slave_1: entered allmulticast mode [ 850.923089][T16417] bridge_slave_1: entered promiscuous mode [ 850.964761][T16417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.978054][T16417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.013358][T16417] team0: Port device team_slave_0 added [ 851.022832][T16417] team0: Port device team_slave_1 added [ 851.052406][T16417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.059630][T16417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.091436][T16417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.104923][T16417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.112114][T16417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.139571][T16417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.195457][T16417] hsr_slave_0: entered promiscuous mode [ 851.202662][T16417] hsr_slave_1: entered promiscuous mode [ 851.209449][T16417] debugfs: 'hsr0' already exists in 'hsr' [ 851.215304][T16417] Cannot create hsr debugfs directory [ 852.666872][ T5869] Bluetooth: hci1: command tx timeout [ 854.746833][ T5869] Bluetooth: hci1: command tx timeout [ 856.612033][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 856.623374][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 856.632162][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 856.641569][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 856.651578][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 856.826884][ T5875] Bluetooth: hci1: command tx timeout [ 856.854455][T16428] chnl_net:caif_netlink_parms(): no params data found [ 856.948998][T16428] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.956373][T16428] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.964212][T16428] bridge_slave_0: entered allmulticast mode [ 856.973187][T16428] bridge_slave_0: entered promiscuous mode [ 856.981352][T16428] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.988996][T16428] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.996345][T16428] bridge_slave_1: entered allmulticast mode [ 857.006059][T16428] bridge_slave_1: entered promiscuous mode [ 857.044942][T16428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.057755][T16428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.096319][T16428] team0: Port device team_slave_0 added [ 857.106413][T16428] team0: Port device team_slave_1 added [ 857.142480][T16428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.149697][T16428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.176442][T16428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.190263][T16428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.197457][T16428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.227115][T16428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.279034][T16428] hsr_slave_0: entered promiscuous mode [ 857.285367][T16428] hsr_slave_1: entered promiscuous mode [ 857.291916][T16428] debugfs: 'hsr0' already exists in 'hsr' [ 857.297819][T16428] Cannot create hsr debugfs directory [ 858.747212][ T5875] Bluetooth: hci5: command tx timeout [ 858.906845][ T5875] Bluetooth: hci1: command tx timeout [ 859.151993][ T5869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 859.163108][ T5869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 859.174926][ T5869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 859.183257][ T5869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 859.193362][ T5869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 859.404770][T16439] chnl_net:caif_netlink_parms(): no params data found [ 859.502082][T16439] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.509714][T16439] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.517608][T16439] bridge_slave_0: entered allmulticast mode [ 859.525524][T16439] bridge_slave_0: entered promiscuous mode [ 859.538126][T16439] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.545415][T16439] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.553810][T16439] bridge_slave_1: entered allmulticast mode [ 859.562099][T16439] bridge_slave_1: entered promiscuous mode [ 859.606085][T16439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.619820][T16439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.664016][T16439] team0: Port device team_slave_0 added [ 859.676572][T16439] team0: Port device team_slave_1 added [ 859.711273][T16439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.718655][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.744919][T16439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.761205][T16439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.768324][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.794976][T16439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.844854][T16439] hsr_slave_0: entered promiscuous mode [ 859.851870][T16439] hsr_slave_1: entered promiscuous mode [ 859.858474][T16439] debugfs: 'hsr0' already exists in 'hsr' [ 859.864328][T16439] Cannot create hsr debugfs directory [ 860.826908][ T5869] Bluetooth: hci5: command tx timeout [ 861.236807][ T5869] Bluetooth: hci6: command tx timeout [ 862.906870][ T5869] Bluetooth: hci5: command tx timeout [ 863.316796][ T5869] Bluetooth: hci6: command tx timeout [ 864.986838][ T5869] Bluetooth: hci5: command tx timeout [ 865.387072][ T5869] Bluetooth: hci6: command tx timeout [ 867.466939][ T5869] Bluetooth: hci6: command tx timeout [ 875.631543][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.638165][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 893.127395][ T5875] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 893.138914][ T5875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 893.151833][ T5875] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 893.160511][ T5875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 893.172275][ T5875] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 893.369874][T16449] chnl_net:caif_netlink_parms(): no params data found [ 893.462718][T16449] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.470134][T16449] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.479484][T16449] bridge_slave_0: entered allmulticast mode [ 893.487758][T16449] bridge_slave_0: entered promiscuous mode [ 893.495760][T16449] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.503343][T16449] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.511060][T16449] bridge_slave_1: entered allmulticast mode [ 893.519369][T16449] bridge_slave_1: entered promiscuous mode [ 893.557072][T16449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.573303][T16449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.614588][T16449] team0: Port device team_slave_0 added [ 893.623131][T16449] team0: Port device team_slave_1 added [ 893.657801][T16449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.668400][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.694773][T16449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.708245][T16449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.715405][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.741696][T16449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.801218][T16449] hsr_slave_0: entered promiscuous mode [ 893.808858][T16449] hsr_slave_1: entered promiscuous mode [ 893.815039][T16449] debugfs: 'hsr0' already exists in 'hsr' [ 893.822211][T16449] Cannot create hsr debugfs directory [ 895.236848][ T5869] Bluetooth: hci7: command tx timeout [ 897.307359][ T5869] Bluetooth: hci7: command tx timeout [ 899.386858][ T5869] Bluetooth: hci7: command tx timeout [ 901.466793][ T5869] Bluetooth: hci7: command tx timeout [ 908.426911][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 910.720607][ T5875] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 910.729783][ T5875] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 910.738563][ T5875] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 910.748077][ T5875] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 910.759480][ T5875] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 910.978557][T16466] chnl_net:caif_netlink_parms(): no params data found [ 911.076263][T16466] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.084124][T16466] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.092447][T16466] bridge_slave_0: entered allmulticast mode [ 911.101077][T16466] bridge_slave_0: entered promiscuous mode [ 911.111074][T16466] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.118531][T16466] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.125912][T16466] bridge_slave_1: entered allmulticast mode [ 911.133824][T16466] bridge_slave_1: entered promiscuous mode [ 911.173057][T16466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.185165][T16466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.228799][T16466] team0: Port device team_slave_0 added [ 911.237866][T16466] team0: Port device team_slave_1 added [ 911.271273][T16466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.278383][T16466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.305130][T16466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.318790][T16466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.325878][T16466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.352837][T16466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.412529][T16466] hsr_slave_0: entered promiscuous mode [ 911.420206][T16466] hsr_slave_1: entered promiscuous mode [ 911.426484][T16466] debugfs: 'hsr0' already exists in 'hsr' [ 911.432357][T16466] Cannot create hsr debugfs directory [ 912.827373][ T5869] Bluetooth: hci8: command tx timeout [ 914.906867][ T5869] Bluetooth: hci8: command tx timeout [ 916.733484][ T5875] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 916.742636][ T5875] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 916.753512][ T5875] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 916.762917][ T5875] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 916.773229][ T5875] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 916.987210][ T5875] Bluetooth: hci8: command tx timeout [ 916.998940][T16476] chnl_net:caif_netlink_parms(): no params data found [ 917.096753][T16476] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.103975][T16476] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.112023][T16476] bridge_slave_0: entered allmulticast mode [ 917.120563][T16476] bridge_slave_0: entered promiscuous mode [ 917.130307][T16476] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.137700][T16476] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.144954][T16476] bridge_slave_1: entered allmulticast mode [ 917.154211][T16476] bridge_slave_1: entered promiscuous mode [ 917.195359][T16476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.211138][T16476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.254454][T16476] team0: Port device team_slave_0 added [ 917.264505][T16476] team0: Port device team_slave_1 added [ 917.309560][T16476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.317123][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.344529][T16476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.358734][T16476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.365834][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.392895][T16476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.446074][T16476] hsr_slave_0: entered promiscuous mode [ 917.452660][T16476] hsr_slave_1: entered promiscuous mode [ 917.459947][T16476] debugfs: 'hsr0' already exists in 'hsr' [ 917.465704][T16476] Cannot create hsr debugfs directory [ 918.827014][ T5875] Bluetooth: hci9: command tx timeout [ 919.067105][ T5875] Bluetooth: hci8: command tx timeout [ 919.237617][ T5869] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 919.246688][ T5869] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 919.255080][ T5869] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 919.268392][ T5869] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 919.278719][ T5869] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 919.499967][T16486] chnl_net:caif_netlink_parms(): no params data found [ 919.594623][T16486] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.602102][T16486] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.610065][T16486] bridge_slave_0: entered allmulticast mode [ 919.617821][T16486] bridge_slave_0: entered promiscuous mode [ 919.626507][T16486] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.634611][T16486] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.641990][T16486] bridge_slave_1: entered allmulticast mode [ 919.650454][T16486] bridge_slave_1: entered promiscuous mode [ 919.694665][T16486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.713408][T16486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.754488][T16486] team0: Port device team_slave_0 added [ 919.764156][T16486] team0: Port device team_slave_1 added [ 919.805425][T16486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.812858][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.840058][T16486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.853786][T16486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.860837][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.890877][T16486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.947640][T16486] hsr_slave_0: entered promiscuous mode [ 919.954141][T16486] hsr_slave_1: entered promiscuous mode [ 919.961814][T16486] debugfs: 'hsr0' already exists in 'hsr' [ 919.967855][T16486] Cannot create hsr debugfs directory [ 920.906959][ T5875] Bluetooth: hci9: command tx timeout [ 921.306948][ T5875] Bluetooth: hci10: command tx timeout [ 922.987089][ T5875] Bluetooth: hci9: command tx timeout [ 923.396713][ T5875] Bluetooth: hci10: command tx timeout [ 923.786813][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 925.067063][ T5869] Bluetooth: hci9: command tx timeout [ 925.466851][ T5869] Bluetooth: hci10: command tx timeout [ 927.546857][ T5869] Bluetooth: hci10: command tx timeout [ 937.073379][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.080372][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.147039][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 953.162866][ T5875] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 953.175531][ T5875] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 953.184422][ T5875] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 953.193833][ T5875] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 953.203224][ T5875] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 953.419240][T16497] chnl_net:caif_netlink_parms(): no params data found [ 953.522220][T16497] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.529574][T16497] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.537363][T16497] bridge_slave_0: entered allmulticast mode [ 953.545659][T16497] bridge_slave_0: entered promiscuous mode [ 953.554230][T16497] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.562386][T16497] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.573333][T16497] bridge_slave_1: entered allmulticast mode [ 953.581487][T16497] bridge_slave_1: entered promiscuous mode [ 953.623447][T16497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.637953][T16497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.683414][T16497] team0: Port device team_slave_0 added [ 953.692482][T16497] team0: Port device team_slave_1 added [ 953.732012][T16497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.739634][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.766204][T16497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.780794][T16497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.789095][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.816117][T16497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.876212][T16497] hsr_slave_0: entered promiscuous mode [ 953.882982][T16497] hsr_slave_1: entered promiscuous mode [ 953.889730][T16497] debugfs: 'hsr0' already exists in 'hsr' [ 953.895565][T16497] Cannot create hsr debugfs directory [ 955.226939][ T5869] Bluetooth: hci11: command tx timeout [ 957.316749][ T5869] Bluetooth: hci11: command tx timeout [ 959.387131][ T5869] Bluetooth: hci11: command tx timeout [ 959.626842][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 961.476913][ T5875] Bluetooth: hci11: command tx timeout [ 970.673778][ T5869] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 970.690788][ T5869] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 970.699268][ T5869] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 970.709188][ T5869] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 970.718345][ T5869] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 970.961024][T16514] chnl_net:caif_netlink_parms(): no params data found [ 971.061540][T16514] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.069413][T16514] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.080645][T16514] bridge_slave_0: entered allmulticast mode [ 971.091925][T16514] bridge_slave_0: entered promiscuous mode [ 971.101368][T16514] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.108759][T16514] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.116024][T16514] bridge_slave_1: entered allmulticast mode [ 971.124173][T16514] bridge_slave_1: entered promiscuous mode [ 971.164001][T16514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.176334][T16514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.222118][T16514] team0: Port device team_slave_0 added [ 971.230894][T16514] team0: Port device team_slave_1 added [ 971.272524][T16514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.279618][T16514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.306144][T16514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.321927][T16514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.329150][T16514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.355645][T16514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.418683][T16514] hsr_slave_0: entered promiscuous mode [ 971.425347][T16514] hsr_slave_1: entered promiscuous mode [ 971.432131][T16514] debugfs: 'hsr0' already exists in 'hsr' [ 971.442782][T16514] Cannot create hsr debugfs directory [ 972.756880][ T5869] Bluetooth: hci12: command tx timeout [ 974.836957][ T5869] Bluetooth: hci12: command tx timeout [ 974.986930][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 976.698324][ T5869] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 976.707435][ T5869] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 976.715957][ T5869] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 976.725130][ T5869] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 976.734721][ T5869] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 976.907056][ T5869] Bluetooth: hci12: command tx timeout [ 976.974209][T16526] chnl_net:caif_netlink_parms(): no params data found [ 977.079423][T16526] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.086787][T16526] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.094038][T16526] bridge_slave_0: entered allmulticast mode [ 977.101801][T16526] bridge_slave_0: entered promiscuous mode [ 977.111203][T16526] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.119093][T16526] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.126510][T16526] bridge_slave_1: entered allmulticast mode [ 977.134981][T16526] bridge_slave_1: entered promiscuous mode [ 977.175172][T16526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.190099][T16526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.237602][T16526] team0: Port device team_slave_0 added [ 977.246179][T16526] team0: Port device team_slave_1 added [ 977.285524][T16526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.292878][T16526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.319880][T16526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.333381][T16526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.341021][T16526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.367481][T16526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.433283][T16526] hsr_slave_0: entered promiscuous mode [ 977.440220][T16526] hsr_slave_1: entered promiscuous mode [ 977.447448][T16526] debugfs: 'hsr0' already exists in 'hsr' [ 977.453298][T16526] Cannot create hsr debugfs directory [ 978.746969][ T5869] Bluetooth: hci13: command tx timeout [ 978.986998][ T5869] Bluetooth: hci12: command tx timeout [ 979.222143][T15539] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 979.231183][T15539] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 979.239728][T15539] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 979.249399][T15539] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 979.258477][T15539] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 979.519842][T16535] chnl_net:caif_netlink_parms(): no params data found [ 979.623363][T16535] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.631971][T16535] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.639805][T16535] bridge_slave_0: entered allmulticast mode [ 979.647981][T16535] bridge_slave_0: entered promiscuous mode [ 979.656385][T16535] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.664692][T16535] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.672014][T16535] bridge_slave_1: entered allmulticast mode [ 979.683201][T16535] bridge_slave_1: entered promiscuous mode [ 979.728039][T16535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.742634][T16535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.791771][T16535] team0: Port device team_slave_0 added [ 979.801577][T16535] team0: Port device team_slave_1 added [ 979.843562][T16535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.851165][T16535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.878382][T16535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.892421][T16535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.899710][T16535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.926085][T16535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.994090][T16535] hsr_slave_0: entered promiscuous mode [ 980.001595][T16535] hsr_slave_1: entered promiscuous mode [ 980.009585][T16535] debugfs: 'hsr0' already exists in 'hsr' [ 980.015445][T16535] Cannot create hsr debugfs directory [ 980.108172][T15539] Bluetooth: hci5: command 0x0406 tx timeout [ 980.826870][ T5875] Bluetooth: hci13: command tx timeout [ 981.306987][ T5875] Bluetooth: hci14: command tx timeout [ 982.907219][ T5875] Bluetooth: hci13: command tx timeout [ 983.396761][ T5875] Bluetooth: hci14: command tx timeout [ 984.986873][ T5875] Bluetooth: hci13: command tx timeout [ 985.227036][ T5875] Bluetooth: hci6: command 0x0406 tx timeout [ 985.467298][T15539] Bluetooth: hci14: command tx timeout [ 987.546894][T15539] Bluetooth: hci14: command tx timeout [ 990.187159][ T31] INFO: task kworker/u8:6:1149 blocked for more than 143 seconds. [ 990.195075][ T31] Not tainted 6.17.0-rc1-syzkaller #0 [ 990.202179][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 990.210978][ T31] task:kworker/u8:6 state:D stack:22264 pid:1149 tgid:1149 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 990.223620][ T31] Workqueue: netns cleanup_net [ 990.228588][ T31] Call Trace: [ 990.231902][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 990.234893][ T31] __schedule+0x1190/0x5de0 [ 990.244726][ T31] ? __pfx___schedule+0x10/0x10 [ 990.265751][ T31] ? find_held_lock+0x2b/0x80 [ 990.286678][ T31] ? schedule+0x2d7/0x3a0 [ 990.291111][ T31] schedule+0xe7/0x3a0 [ 990.295314][ T31] schedule_timeout+0x257/0x290 [ 990.336232][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 990.358399][ T31] ? mark_held_locks+0x49/0x80 [ 990.363297][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 990.369111][ T31] __wait_for_common+0x2fc/0x4e0 [ 990.374123][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 990.380195][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 990.385814][ T31] remove_one+0x312/0x420 [ 990.390729][ T31] ? find_next_child+0x18f/0x280 [ 990.395844][ T31] __simple_recursive_removal+0x158/0x610 [ 990.402092][ T31] ? __pfx_remove_one+0x10/0x10 [ 990.409798][ T31] debugfs_remove+0x5d/0x80 [ 990.414365][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 990.419913][ T31] nsim_dev_reload_destroy+0x144/0x4d0 [ 990.425444][ T31] nsim_dev_reload_down+0x6e/0xd0 [ 990.433963][ T31] devlink_reload+0x19e/0x7c0 [ 990.438818][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 990.444084][ T31] devlink_pernet_pre_exit+0x1a0/0x2b0 [ 990.449690][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 990.455910][ T31] ? up_write+0x1b2/0x520 [ 990.460364][ T31] ? kobject_put+0xab/0x5a0 [ 990.465004][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 990.471137][ T31] ops_undo_list+0x184/0xab0 [ 990.477110][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 990.482379][ T31] ? cleanup_net+0x334/0x890 [ 990.487271][ T31] ? idr_destroy+0x62/0x2e0 [ 990.491913][ T31] cleanup_net+0x408/0x890 [ 990.496346][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 990.501566][ T31] ? rcu_is_watching+0x12/0xc0 [ 990.506671][ T31] process_one_work+0x9cc/0x1b70 [ 990.511854][ T31] ? __pfx_tipc_conn_send_work+0x10/0x10 [ 990.517756][ T31] ? __pfx_process_one_work+0x10/0x10 [ 990.523276][ T31] ? assign_work+0x1a0/0x250 [ 990.528057][ T31] worker_thread+0x6c8/0xf10 [ 990.532724][ T31] ? __pfx_worker_thread+0x10/0x10 [ 990.538021][ T31] kthread+0x3c5/0x780 [ 990.542148][ T31] ? __pfx_kthread+0x10/0x10 [ 990.546852][ T31] ? rcu_is_watching+0x12/0xc0 [ 990.551650][ T31] ? __pfx_kthread+0x10/0x10 [ 990.556343][ T31] ret_from_fork+0x5d4/0x6f0 [ 990.561109][ T31] ? __pfx_kthread+0x10/0x10 [ 990.565757][ T31] ret_from_fork_asm+0x1a/0x30 [ 990.570708][ T31] [ 990.573921][ T31] INFO: task syz-executor:16310 blocked for more than 143 seconds. [ 990.583184][ T31] Not tainted 6.17.0-rc1-syzkaller #0 [ 990.589436][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 990.608805][ T31] task:syz-executor state:D stack:24120 pid:16310 tgid:16310 ppid:1 task_flags:0x400140 flags:0x00004004 [ 990.621113][ T31] Call Trace: [ 990.624419][ T31] [ 990.627525][ T31] __schedule+0x1190/0x5de0 [ 990.632109][ T31] ? __pfx___schedule+0x10/0x10 [ 990.638686][ T31] ? find_held_lock+0x2b/0x80 [ 990.643437][ T31] ? schedule+0x2d7/0x3a0 [ 990.647940][ T31] ? device_del+0xa0/0x9f0 [ 990.652420][ T31] schedule+0xe7/0x3a0 [ 990.656520][ T31] schedule_preempt_disabled+0x13/0x30 [ 990.662160][ T31] __mutex_lock+0x82a/0x10b0 [ 990.667160][ T31] ? device_del+0xa0/0x9f0 [ 990.671627][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 990.676751][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 990.682186][ T31] ? device_del+0xa0/0x9f0 [ 990.686965][ T31] device_del+0xa0/0x9f0 [ 990.691295][ T31] ? __pfx_ida_free+0x10/0x10 [ 990.696060][ T31] ? __pfx_device_del+0x10/0x10 [ 990.701073][ T31] device_unregister+0x1d/0xc0 [ 990.705900][ T31] del_device_store+0x355/0x4a0 [ 990.711123][ T31] ? __pfx_del_device_store+0x10/0x10 [ 990.716683][ T31] ? find_held_lock+0x2b/0x80 [ 990.721501][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 990.726398][ T31] ? __pfx_del_device_store+0x10/0x10 [ 990.731965][ T31] bus_attr_store+0x71/0xb0 [ 990.736656][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 990.741935][ T31] sysfs_kf_write+0xef/0x150 [ 990.747482][ T31] kernfs_fop_write_iter+0x351/0x510 [ 990.752850][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 990.758161][ T31] vfs_write+0x7d0/0x11d0 [ 990.762546][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 990.768504][ T31] ? __pfx_vfs_write+0x10/0x10 [ 990.773369][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 990.778878][ T31] ksys_write+0x12a/0x250 [ 990.783248][ T31] ? __pfx_ksys_write+0x10/0x10 [ 990.788279][ T31] do_syscall_64+0xcd/0x490 [ 990.792915][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.798921][ T31] RIP: 0033:0x7f249d58d69f [ 990.803369][ T31] RSP: 002b:00007ffd66362230 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 990.812128][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f249d58d69f [ 990.820181][ T31] RDX: 0000000000000001 RSI: 00007ffd66362280 RDI: 0000000000000005 [ 990.828745][ T31] RBP: 00007f249d6130c1 R08: 0000000000000000 R09: 00007ffd66362087 [ 990.837031][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 990.845050][ T31] R13: 00007ffd66362280 R14: 00007f249e2e4620 R15: 0000000000000003 [ 990.853561][ T31] [ 990.857337][ T31] INFO: task syz.0.2495:16327 blocked for more than 144 seconds. [ 990.865092][ T31] Not tainted 6.17.0-rc1-syzkaller #0 [ 990.872801][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 990.882266][ T31] task:syz.0.2495 state:D stack:28872 pid:16327 tgid:16322 ppid:16055 task_flags:0x400040 flags:0x00004004 [ 990.894472][ T31] Call Trace: [ 990.897886][ T31] [ 990.900942][ T31] __schedule+0x1190/0x5de0 [ 990.905557][ T31] ? __pfx___schedule+0x10/0x10 [ 990.910927][ T31] ? find_held_lock+0x2b/0x80 [ 990.915647][ T31] ? schedule+0x2d7/0x3a0 [ 990.920094][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 990.925798][ T31] schedule+0xe7/0x3a0 [ 990.929981][ T31] schedule_preempt_disabled+0x13/0x30 [ 990.935500][ T31] __mutex_lock+0x82a/0x10b0 [ 990.940266][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 990.945807][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 990.951010][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 990.956676][ T31] devlink_health_report+0x3ba/0x9c0 [ 990.962033][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 990.968102][ T31] ? _copy_from_user+0x59/0xd0 [ 990.972931][ T31] nsim_dev_health_break_write+0x166/0x210 [ 990.978977][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 990.985499][ T31] full_proxy_write+0x12e/0x1a0 [ 990.990745][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 990.996184][ T31] vfs_write+0x29d/0x11d0 [ 991.000722][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 991.005981][ T31] ? __pfx_vfs_write+0x10/0x10 [ 991.011005][ T31] ? __fget_files+0x20e/0x3c0 [ 991.015842][ T31] ksys_write+0x12a/0x250 [ 991.020270][ T31] ? __pfx_ksys_write+0x10/0x10 [ 991.025207][ T31] do_syscall_64+0xcd/0x490 [ 991.030601][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.036537][ T31] RIP: 0033:0x7fd35818ebe9 [ 991.041100][ T31] RSP: 002b:00007fd358f5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 991.049711][ T31] RAX: ffffffffffffffda RBX: 00007fd3583b6180 RCX: 00007fd35818ebe9 [ 991.057854][ T31] RDX: 00000000000001ff RSI: 0000200000005900 RDI: 0000000000000005 [ 991.066044][ T31] RBP: 00007fd358211e19 R08: 0000000000000000 R09: 0000000000000000 [ 991.075612][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.085708][ T31] R13: 00007fd3583b6218 R14: 00007fd3583b6180 R15: 00007ffe6a5104b8 [ 991.093850][ T31] [ 991.097268][ T31] INFO: task syz.1.2508:16399 blocked for more than 144 seconds. [ 991.105112][ T31] Not tainted 6.17.0-rc1-syzkaller #0 [ 991.111476][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 991.120301][ T31] task:syz.1.2508 state:D stack:29112 pid:16399 tgid:16393 ppid:15538 task_flags:0x400040 flags:0x00004004 [ 991.133050][ T31] Call Trace: [ 991.136364][ T31] [ 991.139435][ T31] __schedule+0x1190/0x5de0 [ 991.144123][ T31] ? check_path.constprop.0+0x24/0x50 [ 991.156934][ T31] ? __pfx___schedule+0x10/0x10 [ 991.161859][ T31] ? find_held_lock+0x2b/0x80 [ 991.166764][ T31] ? schedule+0x2d7/0x3a0 [ 991.171151][ T31] schedule+0xe7/0x3a0 [ 991.175264][ T31] schedule_preempt_disabled+0x13/0x30 [ 991.180993][ T31] rwsem_down_read_slowpath+0x64e/0xbf0 [ 991.186784][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 991.192924][ T31] ? __pfx___might_resched+0x10/0x10 [ 991.198404][ T31] ? find_held_lock+0x2b/0x80 [ 991.203124][ T31] down_read+0xef/0x480 [ 991.207488][ T31] ? mnt_get_write_access+0x54/0x300 [ 991.212818][ T31] ? __pfx_down_read+0x10/0x10 [ 991.217721][ T31] ? mnt_get_write_access+0x20c/0x300 [ 991.223167][ T31] path_openat+0x818/0x2cb0 [ 991.227930][ T31] ? __pfx_path_openat+0x10/0x10 [ 991.232913][ T31] do_filp_open+0x20b/0x470 [ 991.237570][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 991.242679][ T31] ? alloc_fd+0x471/0x7d0 [ 991.247185][ T31] do_sys_openat2+0x11b/0x1d0 [ 991.251992][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 991.257370][ T31] ? find_held_lock+0x2b/0x80 [ 991.262096][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 991.267201][ T31] __x64_sys_openat+0x174/0x210 [ 991.272117][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 991.277669][ T31] ? do_user_addr_fault+0x843/0x1370 [ 991.283006][ T31] do_syscall_64+0xcd/0x490 [ 991.287726][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.293658][ T31] RIP: 0033:0x7f075958ebe9 [ 991.298197][ T31] RSP: 002b:00007f0756f6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 991.306928][ T31] RAX: ffffffffffffffda RBX: 00007f07597b6360 RCX: 00007f075958ebe9 [ 991.314984][ T31] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 991.323457][ T31] RBP: 00007f0759611e19 R08: 0000000000000000 R09: 0000000000000000 [ 991.332269][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.340379][ T31] R13: 00007f07597b63f8 R14: 00007f07597b6360 R15: 00007ffe40f67b58 [ 991.348590][ T31] [ 991.351701][ T31] INFO: task syz.3.2511:16415 blocked for more than 144 seconds. [ 991.359604][ T31] Not tainted 6.17.0-rc1-syzkaller #0 [ 991.365641][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 991.374484][ T31] task:syz.3.2511 state:D stack:29112 pid:16415 tgid:16411 ppid:15776 task_flags:0x400040 flags:0x00004004 [ 991.386537][ T31] Call Trace: [ 991.390278][ T31] [ 991.393249][ T31] __schedule+0x1190/0x5de0 [ 991.397933][ T31] ? __pfx___schedule+0x10/0x10 [ 991.402927][ T31] ? find_held_lock+0x2b/0x80 [ 991.407721][ T31] ? schedule+0x2d7/0x3a0 [ 991.412095][ T31] schedule+0xe7/0x3a0 [ 991.416193][ T31] schedule_preempt_disabled+0x13/0x30 [ 991.421731][ T31] rwsem_down_read_slowpath+0x64e/0xbf0 [ 991.427547][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 991.433706][ T31] ? __pfx___might_resched+0x10/0x10 [ 991.439128][ T31] ? find_held_lock+0x2b/0x80 [ 991.443838][ T31] down_read+0xef/0x480 [ 991.448183][ T31] ? mnt_get_write_access+0x54/0x300 [ 991.453520][ T31] ? __pfx_down_read+0x10/0x10 [ 991.458567][ T31] ? mnt_get_write_access+0x20c/0x300 [ 991.464009][ T31] path_openat+0x818/0x2cb0 [ 991.469033][ T31] ? __pfx_path_openat+0x10/0x10 [ 991.474056][ T31] do_filp_open+0x20b/0x470 [ 991.478804][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 991.483948][ T31] ? alloc_fd+0x471/0x7d0 [ 991.488422][ T31] do_sys_openat2+0x11b/0x1d0 [ 991.493157][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 991.498490][ T31] ? find_held_lock+0x2b/0x80 [ 991.503201][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 991.508269][ T31] __x64_sys_openat+0x174/0x210 [ 991.513187][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 991.518677][ T31] ? do_user_addr_fault+0x843/0x1370 [ 991.524028][ T31] do_syscall_64+0xcd/0x490 [ 991.528648][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.534587][ T31] RIP: 0033:0x7fe56758ebe9 [ 991.539065][ T31] RSP: 002b:00007fe568443038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 991.547845][ T31] RAX: ffffffffffffffda RBX: 00007fe5677b6270 RCX: 00007fe56758ebe9 [ 991.555888][ T31] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 991.564028][ T31] RBP: 00007fe567611e19 R08: 0000000000000000 R09: 0000000000000000 [ 991.572227][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.580465][ T31] R13: 00007fe5677b6308 R14: 00007fe5677b6270 R15: 00007ffed1a388d8 [ 991.588584][ T31] [ 991.591681][ T31] [ 991.591681][ T31] Showing all locks held in the system: [ 991.599571][ T31] 1 lock held by khungtaskd/31: [ 991.604538][ T31] #0: ffffffff8e5c1060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 991.614733][ T31] 6 locks held by kworker/u8:6/1149: [ 991.620139][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 991.630695][ T31] #1: ffffc900041efd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 991.640744][ T31] #2: ffffffff9036f370 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 991.650242][ T31] #3: ffff88807e57e0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 [ 991.660997][ T31] #4: ffff88807ea30250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 [ 991.672641][ T31] #5: ffff8880767d0b78 (&sb->s_type->i_mutex_key#3/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 [ 991.684841][ T31] 2 locks held by getty/5628: [ 991.689660][ T31] #0: ffff8880313010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 991.699561][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 991.710039][ T31] 5 locks held by syz-executor/16310: [ 991.715523][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 991.724851][ T31] #1: ffff888030fa7488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 991.734801][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 991.745100][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 991.756098][ T31] #4: ffff88807e57e0e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 [ 991.765039][ T31] 3 locks held by syz.0.2495/16327: [ 991.770355][ T31] #0: ffff888025d035f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 991.779599][ T31] #1: ffff8881416e0428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 991.788748][ T31] #2: ffff88807ea30250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x3ba/0x9c0 [ 991.799668][ T31] 2 locks held by syz.1.2508/16399: [ 991.804976][ T31] #0: ffff8881416e0428 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 [ 991.814424][ T31] #1: ffff8880767d0b78 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 [ 991.824890][ T31] 2 locks held by syz.3.2511/16415: [ 991.830186][ T31] #0: ffff8881416e0428 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 [ 991.839695][ T31] #1: ffff8880767d0b78 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 [ 991.850371][ T31] 4 locks held by syz-executor/16417: [ 991.855780][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 991.864916][ T31] #1: ffff88805b245488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 991.874873][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 991.885197][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 991.895644][ T31] 4 locks held by syz-executor/16428: [ 991.901220][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 991.910390][ T31] #1: ffff88805b4a2c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 991.920540][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 991.930763][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 991.941237][ T31] 4 locks held by syz-executor/16439: [ 991.946749][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 991.956088][ T31] #1: ffff888146f05c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 991.966034][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 991.976430][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 991.986918][ T31] 4 locks held by syz-executor/16449: [ 991.992494][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 992.001733][ T31] #1: ffff888055c0f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 992.011693][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 992.021874][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 992.032756][ T31] 4 locks held by syz-executor/16466: [ 992.038441][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 992.047724][ T31] #1: ffff888022f5c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 992.057765][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 992.068180][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 992.078701][ T31] 4 locks held by syz-executor/16476: [ 992.084092][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 992.093331][ T31] #1: ffff8880591ecc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 992.103433][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 992.116621][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 992.131079][ T31] 4 locks held by syz-executor/16486: [ 992.136518][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 992.145657][ T31] #1: ffff88814d153088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 992.155538][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 992.165968][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 992.176491][ T31] 4 locks held by syz-executor/16497: [ 992.182139][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 992.191403][ T31] #1: ffff888057dd4888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 992.201352][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 992.211804][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 992.222260][ T31] 4 locks held by syz-executor/16514: [ 992.227743][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 992.236851][ T31] #1: ffff888058f0c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 992.246783][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 992.257175][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 992.267999][ T31] 4 locks held by syz-executor/16526: [ 992.273400][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 992.282584][ T31] #1: ffff88803fa70888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 992.292445][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 992.302651][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 992.313076][ T31] 4 locks held by syz-executor/16535: [ 992.318639][ T31] #0: ffff88807d636428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 992.328470][ T31] #1: ffff88805ab2a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 992.338496][ T31] #2: ffff888144b010f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 992.348682][ T31] #3: ffffffff8f8f5ac8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 992.359295][ T31] [ 992.361647][ T31] ============================================= [ 992.361647][ T31] [ 992.370230][ T31] NMI backtrace for cpu 0 [ 992.370251][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 992.370283][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 992.370299][ T31] Call Trace: [ 992.370309][ T31] [ 992.370321][ T31] dump_stack_lvl+0x116/0x1f0 [ 992.370361][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 992.370405][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 992.370450][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 992.370510][ T31] watchdog+0xf0e/0x1260 [ 992.370560][ T31] ? __pfx_watchdog+0x10/0x10 [ 992.370600][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 992.370639][ T31] ? __kthread_parkme+0x19e/0x250 [ 992.370680][ T31] ? __pfx_watchdog+0x10/0x10 [ 992.370723][ T31] kthread+0x3c5/0x780 [ 992.370764][ T31] ? __pfx_kthread+0x10/0x10 [ 992.370809][ T31] ? rcu_is_watching+0x12/0xc0 [ 992.370840][ T31] ? __pfx_kthread+0x10/0x10 [ 992.370882][ T31] ret_from_fork+0x5d4/0x6f0 [ 992.370925][ T31] ? __pfx_kthread+0x10/0x10 [ 992.370968][ T31] ret_from_fork_asm+0x1a/0x30 [ 992.371018][ T31] [ 992.371030][ T31] Sending NMI from CPU 0 to CPUs 1: [ 992.488788][ C1] NMI backtrace for cpu 1 [ 992.488809][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 992.488836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 992.488851][ C1] Workqueue: bat_events batadv_nc_worker [ 992.488879][ C1] RIP: 0010:rcu_is_watching+0x12/0xc0 [ 992.488904][ C1] Code: 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 03 54 35 12 e8 3e f8 ef 09 <48> c7 c3 a8 d2 d6 93 89 c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed [ 992.488924][ C1] RSP: 0018:ffffc90000127a98 EFLAGS: 00000286 [ 992.488941][ C1] RAX: 0000000000000001 RBX: ffffffff8e5c1060 RCX: 0000000000000002 [ 992.488956][ C1] RDX: 0000000000000000 RSI: ffffffff8c162800 RDI: ffffffff8c162840 [ 992.488970][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 992.488984][ C1] R10: 0000000000000400 R11: 0000000000000000 R12: 0000000000000000 [ 992.488997][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 992.489011][ C1] FS: 0000000000000000(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 992.489034][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 992.489049][ C1] CR2: 0000558734a29000 CR3: 000000000e380000 CR4: 00000000003526f0 [ 992.489064][ C1] Call Trace: [ 992.489073][ C1] [ 992.489083][ C1] lock_acquire+0x2cd/0x350 [ 992.489111][ C1] ? batadv_nc_worker+0x895/0x1030 [ 992.489135][ C1] batadv_nc_worker+0x16a/0x1030 [ 992.489155][ C1] ? batadv_nc_worker+0x159/0x1030 [ 992.489177][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 992.489202][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 992.489227][ C1] ? rcu_is_watching+0x12/0xc0 [ 992.489264][ C1] process_one_work+0x9cc/0x1b70 [ 992.489300][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 992.489321][ C1] ? __pfx_process_one_work+0x10/0x10 [ 992.489356][ C1] ? assign_work+0x1a0/0x250 [ 992.489387][ C1] worker_thread+0x6c8/0xf10 [ 992.489424][ C1] ? __pfx_worker_thread+0x10/0x10 [ 992.489454][ C1] kthread+0x3c5/0x780 [ 992.489483][ C1] ? __pfx_kthread+0x10/0x10 [ 992.489513][ C1] ? rcu_is_watching+0x12/0xc0 [ 992.489534][ C1] ? __pfx_kthread+0x10/0x10 [ 992.489562][ C1] ret_from_fork+0x5d4/0x6f0 [ 992.489593][ C1] ? __pfx_kthread+0x10/0x10 [ 992.489621][ C1] ret_from_fork_asm+0x1a/0x30 [ 992.489661][ C1] [ 992.489822][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 992.731601][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 992.741863][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 992.752016][ T31] Call Trace: [ 992.755308][ T31] [ 992.758252][ T31] dump_stack_lvl+0x3d/0x1f0 [ 992.762880][ T31] vpanic+0x6e8/0x7a0 [ 992.767002][ T31] ? __pfx_vpanic+0x10/0x10 [ 992.771555][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 992.777589][ T31] panic+0xca/0xd0 [ 992.781438][ T31] ? __pfx_panic+0x10/0x10 [ 992.785975][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 992.791387][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 992.797675][ T31] ? watchdog+0xd78/0x1260 [ 992.802238][ T31] ? watchdog+0xd6b/0x1260 [ 992.807051][ T31] watchdog+0xd89/0x1260 [ 992.811427][ T31] ? __pfx_watchdog+0x10/0x10 [ 992.816138][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 992.821365][ T31] ? __kthread_parkme+0x19e/0x250 [ 992.826496][ T31] ? __pfx_watchdog+0x10/0x10 [ 992.831318][ T31] kthread+0x3c5/0x780 [ 992.835501][ T31] ? __pfx_kthread+0x10/0x10 [ 992.840131][ T31] ? rcu_is_watching+0x12/0xc0 [ 992.844998][ T31] ? __pfx_kthread+0x10/0x10 [ 992.850135][ T31] ret_from_fork+0x5d4/0x6f0 [ 992.854844][ T31] ? __pfx_kthread+0x10/0x10 [ 992.859462][ T31] ret_from_fork_asm+0x1a/0x30 [ 992.864350][ T31] [ 992.867909][ T31] Kernel Offset: disabled [ 992.872237][ T31] Rebooting in 86400 seconds..