last executing test programs: 9.053277443s ago: executing program 2 (id=232): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x150, &(0x7f0000005340)={&(0x7f0000000180)=ANY=[@ANYBLOB="23000004", @ANYRES16=r2, @ANYBLOB="01002bbd7008fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r3 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r3, 0xc1086201, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='\x00\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x283, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r4, 0x6a, 0x5, 0x0, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r5, 0x0, 0x1) r6 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/blk_cgname\x00', 0x5, 0x0) write$auto(r6, 0x0, 0x6) 8.106297868s ago: executing program 2 (id=233): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) mkdir$auto(0x0, 0x1) r1 = pipe$auto(0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) io_uring_setup$auto(0x100, 0x0) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x6b00, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r1, &(0x7f0000000240)='.G+*@zy\x06\x00', 0xd) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) ioperm$auto(0x3, 0x5, 0x8) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b63, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) io_uring_register$auto(r2, 0x17, &(0x7f00000000c0), 0x3) kill$auto(r0, 0x11) 7.332878914s ago: executing program 2 (id=236): mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000001240), 0x900, 0x0) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, r1, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r0, 0x0, 0x6}, 0xc) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) open(0x0, 0x6042, 0x135) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r3, 0x0, 0xc3) 7.076482696s ago: executing program 2 (id=239): mbind$auto(0xfffffffffffff000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async) futex$auto(0x0, 0x10d, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x0, 0x5) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = open(0x0, 0x7ffd, 0x12) write$auto(0x3, 0x0, 0x100082) r1 = clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) shmctl$auto_SHM_INFO(0xf9, 0xe, &(0x7f00000000c0)={{0x5, 0xee00, 0xffffffffffffffff, 0x8, 0x4, 0xe3, 0x6}, 0x9, 0x3, 0xed1a, 0xd46, @inferred=r1, @inferred=r1, 0x2, 0x0, &(0x7f0000000040)="6bdac34e46b7daa9b8538983d14aacf103b1eeed93550e62c1d78c6fc77f8c4dd0798578e9840ea010323b155c6bbdd5e4d227ee479c76", &(0x7f0000000080)="bfbd1018"}) mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000140)={0x9, r2, 0x3ff, 0x4}) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) (async) mmap$auto(0x100000001, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.999646722s ago: executing program 2 (id=243): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) socket(0x15, 0x4, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pidfd_open$auto(0x0, 0xfbd) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) read$auto(r1, &(0x7f0000000240)='/sys/fs/ocfs2/cluster_stack\x00', 0x2) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) r4 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$auto_UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, &(0x7f0000000280)=0x5) mmap$auto(0x8, 0x7, 0x3, 0x8010, r4, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20002, 0x0) writev$auto(r5, 0x0, 0x3) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) 4.969764865s ago: executing program 1 (id=245): r0 = socket(0x2, 0x1, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x40, 0x0) lseek$auto(0x3, 0x8000e4, 0x3) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r0) 4.946698849s ago: executing program 3 (id=246): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/bonding/bond0\x00', 0x18b000, 0x0) pread64$auto(r0, 0x0, 0x8100000041, 0x413e) (async) pread64$auto(r0, 0x0, 0x8100000041, 0x413e) r1 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/tracepoint_printk\x00', 0x101202, 0x0) sendfile$auto(r2, r2, 0x0, 0x4) vmsplice$auto(r1, &(0x7f00000000c0)={&(0x7f0000000040)="ad72a8ebbdfe9678e14d42013c483a3e8e83153915fbbb9a13823e7a1a1de41960dbb71cfb634027a4d02e594f1c136f210c7872cb411593461fb61d9f91639a6a23e8d7fad92ac04154cb1317e57f61271941", 0x8}, 0x8000000000000001, 0x2) io_uring_setup$auto(0x243e, 0x0) (async) r3 = io_uring_setup$auto(0x243e, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbdf250200000008002700080000000500190005000000"], 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x2, 0x1, 0x106) (async) r4 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) setsockopt$auto(r4, 0x6, 0x6, &(0x7f0000000080)='*\x00', 0xe6) (async) setsockopt$auto(r4, 0x6, 0x6, &(0x7f0000000080)='*\x00', 0xe6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(r1, &(0x7f0000000700)={{&(0x7f0000000480)="cc769a83f5018318e16a0c8be989b79e561e324855d941ec0311a184d21f9b7ae7e0075a9da73aef3bff832069f3951db6134b411c43cb8b71992abb9488e01853427828772e59525ccc7375b4cd5f29e87d515737291cab608b2fc947ecee20861d8319d7a00b7bfb4b44be98119c730359482d9bcd914142106a8db107c9c0742f1c33ca77f280162b06ceee26ce68669d263c408853dc316b8058e3db488d5fbcc5c26563da97f357d54fa457ec1d141219d7498722ab043b3926704f2eb1c71bc3dce1a9b4fba1b1b0e9fc2454dd3a8821590b5233d1a7099db9f1fc0d4f9d8ee73b3f37cb79c5240e8170ded516aada", 0x0, &(0x7f0000000280)={&(0x7f0000000580)="d30f86807420dbbe19b1547455d8c014575d0d44b9038fe2e0e490a6fc178c3e69f62f462cbd97e95c510883c3fec674f8d38fbd9a081d2298ed998583eab20d448ae2bc796a07e71f7049939568d50c87dc5f78c201a2df8339b12f3502ef5e753d40ba6cf85a6d0a8002ed8c75742990e76640a590b56d14643849297e14f9f4141937b98b7338d9641d1ff708cd71a539ac68e70d8fef9a1774439f5773c6dffa384c03fe91f46b8a2d20780a04aff2085c8c5ea687b02e8f44e6af5ae0c9369b34a73d4c2175fa14f2cbb61440f7b06499bdeab6a21e4e600746802d7b9b439bb520e264a2369e1e69d3f9e95ddd", 0x3a64}, 0x4, &(0x7f0000000680)="69321e426dd4c31020347fa5f15ac0057d319a61318a4518ad1e298af0ee417d10cbb8fbf11b67e7c5f8db57b263d3c9ba66cc8559d7dc7fde991ba9036d35e4d8e20338064763059cf23f1228b9d1b7550d89a1a97ce38e5e4cdf61fcbe21c0a8c2", 0x5, 0xf}, 0x5}, 0x2, 0x1ff) pread64$auto(r3, &(0x7f0000000140)='{\x00\xa4\xe49!\x89\x8c@\xc1\x89\xb8\a\xa9\x9d\x01\xa3\r\x10\xc0\xfd\xf6\xa9\xc9\xcb\x05\x9e\x990\x84\x8c/\xaa\xb6cY\xc8\xc9\x04\xb8\x9d\xf8\xb8\xf6\xe0\x1fq\x88r\x99\xfe\xa8\xcfZ\x9f\xa8\xef\xff5\x7f\x1b\xef\x83*v\x8b.\x95\xcf\x1f\xb7\xdfC\xcf{j]\xdc\x86\x88\x03\xa9\x83]\xfaPq\xc9\x82\x81L\x7fH\xd5\xdf\xc6\xe5\x02\xe5_\x03`\xe7\xfa\x1b\x81.\xf2\x95\xf2t+sM\x9b\x88\xf0W2\x9d*e\xd7y\x80\xfa\x92\xeb\xcc#\xbe\x10\xc5\xfc\x16\xfc\x10\xc7\xa6\xb6\x8b6\xac\xdf\xb8\xb60\x00'/157, 0x1, 0x9) r5 = timerfd_create$auto(0x9, 0x0) ioctl$auto(r5, 0x40085400, 0xffffffffffffffff) setsockopt$auto(0x3, 0x4, 0x1d, 0x0, 0x8) ioctl$auto_XFS_IOC_ALLOCSP(r3, 0x4030580a, &(0x7f0000000100)={0x9, 0x9, 0x1, 0x0, 0x4, 0x0}) migrate_pages$auto(r6, 0x4, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f00000002c0)="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", 0x23) (async) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f00000002c0)="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", 0x23) lseek$auto(r1, 0x4, 0x3) (async) lseek$auto(r1, 0x4, 0x3) close_range$auto(0x2, 0x8, 0x0) 4.82977115s ago: executing program 0 (id=247): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(r0, &(0x7f0000000140)={&(0x7f0000000400), 0x40200}, 0x2) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/11], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000540), r2) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000004a80), r2) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80040, 0x0) ioctl$auto_SNDCTL_FM_4OP_ENABLE(r3, 0x4004510f, &(0x7f0000000280)="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") ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{r3, &(0x7f0000000180)="c9291b9759c55a3a5e042379fa38edf4f183bcb1333a08", 0x4, &(0x7f00000001c0)="602cf406ad8aa778ed7c5b2bbae306083b389958952a7c3465dd7820bc6337c196c2e3e5a967b1c55be943635ac598146d6f7a1c2b60d4a06d26c9a02f3fb991b4ef345d82f964f892a08f6e989e208e242022720fa886014f76ff621f135f692d852044ecca49a80c78c965fb35d73621196f3a687c1e1afecbfb11fbc0e12365033013ca02950e1e32ff9f01c3a0b5bd5b7e2ecf1e143cc76cb50d0e9d6aec3f57dfd4", 0x4, &(0x7f0000000380)="8eaaf201e425008b6ab803ec3bcdae79dbaf92d5594c6d3d75b6e84859a0f932ecf4f3870881d54ec5adf8758135e073093310fbf9766eed6e84b19234623a327cbba5a34abb45738ad9b6e582cb75ebae15b4fd5db55896e8881886ba9cc1ff603421cd7a9f", &(0x7f0000000400)=0x80000000}, {[0xfff, 0x8a35, 0xfffffff9, 0x9f9]}, 0x5, 0x9, &(0x7f0000000440)="43e0a3c075fac5419b871bca753fa1f384ef12a083100c887bed601aedf59cf44e9c7fac071d14a0fb"}) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0xffffffff7ffffffb, 0xef43, 0x1, 0x1b, r1, 0x9) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b47, 0x1) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x8, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendto$auto(0x3, 0x0, 0x4, 0x13f, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="0b904d57", @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2501000000240003007729ecac5e9239d0c4058eac0405576c2cd59ffc84b3098afa677190f34d1790"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 4.61479899s ago: executing program 1 (id=248): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setresuid$auto(0xd, 0x0, 0x221) setrlimit$auto(0x6, 0x0) getuid() r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0xffffffffffffffff, 0x4, 0x6, 0x2}, 0xbb, 0xd, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0xea) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="721ac797", @ANYBLOB="1a00"], 0x1ac}}, 0x6c001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, 0xffffffffffffffff, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r3, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.685690484s ago: executing program 1 (id=249): r0 = fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c00, 0xfffffffffffffffd) syslog$auto(0x1, &(0x7f0000000080)='\x00', 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/usbip-vudc.0/dev_desc\x00', 0x200, 0x0) read$auto(0x3, 0x0, 0x8) socketpair$auto(0x3, 0xffffffff, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000010) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000000)={0x6}) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) getpid() socket(0x28, 0x1, 0x0) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r3, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x3) syslog$auto(0x3, &(0x7f0000000040)='(*&(+{\\\'\x00', 0x80) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket(0x30, 0x3, 0x1) connect$auto(r4, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) 3.575707226s ago: executing program 3 (id=250): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setresuid$auto(0xd, 0x0, 0x221) setrlimit$auto(0x6, 0x0) r1 = getuid() r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r2, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0xffffffffffffffff, 0x4, 0x6, 0x2}, 0xbb, 0xd, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) setreuid$auto(r1, r1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="721ac797", @ANYBLOB="1a00"], 0x1ac}}, 0x6c001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, 0xffffffffffffffff, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r3, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.566646499s ago: executing program 0 (id=251): write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x1, 0x85dd, 0x2, 0x8000000000000000, [0xffffffff, 0x7, 0x1, 0x7, 0x7fffffff, 0xb]}) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x4c, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x4000000000008, 0xa505}, 0x800}, 0x5, 0x4009) close_range$auto(r0, r0, 0x5) socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1ac}}, 0x40000) setresuid$auto(0xf5, 0x8000, 0x67) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) clone$auto(0x0, 0x5, 0x0, 0x0, 0x3ff) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x1c, r2, 0x3abba0b2ae0bab93, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0xfffffe9a, 0x35, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x4040010) 2.736346213s ago: executing program 3 (id=252): mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x3, 0x0) fsopen$auto(0x0, 0x1) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x0, 0x4, 0x2, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x800}, 0xee) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000100)='//\xf2\x00cu\x102\x18\xe2\fv\xe3Tr\xa7\xa9\v\xfd\xa7:\x83O\xabL\x88#\"#\xf8<;E-\xd7z\b\x00\x00\x00\x00@\x00\x00])@\xe30\x95>^kw\x83~\xbe\xa0jZ\xa4', 0x80000000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vt/parameters/default_grn\x00', 0x2062, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, 0x0) write$auto(r1, &(0x7f00000000c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r4, 0x29, 0x20, 0x0, 0x8002) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=&(0x7f0000000180)='\xc1.\x00', &(0x7f0000000280)=&(0x7f0000000240)='//\xf2\x00cu\x102\x18\xe2\fv\xe3Tr\xa7\xa9\v\xfd\xa7:\x83O\xabL\x88#\"#\xf8<;E-\xd7z\b\x00\x00\x00\x00@\x00\x00])@\xe30\x95>^kw\x83~\xbe\xa0jZ\xa4') ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd05, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000001240), 0x14801, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) 1.852095343s ago: executing program 1 (id=253): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYRES8=r0], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0) getsockopt$auto(0x4, 0x6, 0x4, 0x0, 0x0) 1.804928824s ago: executing program 2 (id=254): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x150, &(0x7f0000005340)={&(0x7f0000000180)=ANY=[@ANYBLOB="23000004", @ANYRES16=r2, @ANYBLOB="01002bbd7008fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r3 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r3, 0xc1086201, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='\x00\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x283, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r4, 0x6a, 0x5, 0x0, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r5, 0x0, 0x1) r6 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/blk_cgname\x00', 0x5, 0x0) write$auto(r6, 0x0, 0x6) 1.787875156s ago: executing program 0 (id=255): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x3d, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffffb, 0x400005, 0xdd79, 0x5, 0x61, 0x104}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x3d, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffffb, 0x400005, 0xdd79, 0x5, 0x61, 0x104}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) 1.717409542s ago: executing program 3 (id=256): r0 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xd9bd8f5461d5b9a4, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) fcntl$auto(r0, 0x20003, r1) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r2, @ANYBLOB="000229bd7000ffffdf251300000002000000060000000500050008ec000005001d0004000000050017000d00000005082800120000000500210002000000"], 0x44}}, 0xc80) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(r3, 0x0, 0x9a6, 0x6) unshare$auto(0x40000085) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0xab81c0, 0x0) madvise$auto(0x0, 0x2003f0, 0x17) connect$auto(0xffffffffffffffff, 0x0, 0x55) ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, 0x0) mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.481075732s ago: executing program 1 (id=257): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) r2 = setfsuid$auto(0x0) r3 = socket(0x9, 0x7, 0x0) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(r2) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r4) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000380), r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493ccc"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r5) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r7) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x9c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA={0x7, 0x7, "987774"}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@nested={0x20, 0x131, 0x0, 0x1, [@typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @typed={0x8, 0xea, 0x0, 0x0, @ipv4=@multicast1}]}]}, @NL80211_ATTR_TX_RATES={0x59, 0x5a, 0x0, 0x1, [@generic="b5a406e3056aff8fd00e696f0b7aaeca4e6a28d7cc50a5acaf4ebb41e43f5384d3150e354df3847f67d44cbca3dfae5c9e914552003a9a16994dff3fe18c55938e574a9ceeebde24c63c9859872b7a0c9c", @typed={0x4, 0xb4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) getsockopt$auto_SO_GET_FILTER(r1, 0xa3, 0x1a, &(0x7f0000000000)='/dev/snd/controlC1\x00', &(0x7f0000000180)=0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 1.23974277s ago: executing program 0 (id=258): setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x8) 451.224995ms ago: executing program 0 (id=259): r0 = socket(0x28, 0x1, 0x0) getsockopt$auto(r0, 0x28, 0x2, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13002ebd7000fbdbdf250a00000008000300", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) (async) r4 = getpid() r5 = gettid() rt_tgsigqueueinfo$auto(r4, r5, 0x21, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x180, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x84, 0x6e, 0x0, 0x1, [@nested={0x76, 0x30, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x135}, @generic="9457ddea3f8912108f96e2f84f3f341cc5d50b0eb6ac9fb83509e8ac2cab4979a9f8831297bec59c00a552571ffb86613d5b84ed5a62b0b2af6babcdd2343e7b2e05a50f93db9aa63bf66969ff19d48cf54b65049b280f9012", @generic="938afeb327fbaa866093ed34f2"]}, @typed={0x5, 0xf, 0x0, 0x0, @str='\x00'}]}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x46}, @NL80211_ATTR_MPATH_NEXT_HOP={0xd2, 0x1a, "a36e601ed5eca74f6251c691201f8ad081e913b2ad0bb7a94ab93f1cd61bc42ad3922435893ab7e46f9257df6663ed729d014899784464102796ffc693b85f38a4ddb6b02ad6e3036902bec57fd72e7328c70258e3a6c139c8f87a12b004a1ea9302804e4753c5cb97f8e91fe11acbf54185b9dbe764e5fc3fc41273326d253de21cba5e4707b4bfa511ca57d87afaae1f4e5565b423f068e9ab445910e35c0abba4572aae0d79c7d23efc58acae81b58380df379264f85e1cd6909d68af659a88317a8a5be8a1823157954250e5"}]}, 0x180}, 0x1, 0x0, 0x0, 0x8080}, 0x4008000) 325.900371ms ago: executing program 3 (id=260): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setresuid$auto(0xd, 0x0, 0x221) setrlimit$auto(0x6, 0x0) r1 = getuid() r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r2, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0xffffffffffffffff, 0x4, 0x6, 0x2}, 0xbb, 0xd, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) setreuid$auto(r1, r1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="721ac797", @ANYBLOB="1a00"], 0x1ac}}, 0x6c001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, 0xffffffffffffffff, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r3, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 244.878293ms ago: executing program 1 (id=261): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) ioctl$auto_HPET_IRQFREQ(r0, 0x40086806, &(0x7f0000000080)=0xffffffffffffff7f) sendfile$auto(r1, r2, 0x0, 0x1) socket(0x2, 0x801, 0x106) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 125.090785ms ago: executing program 0 (id=262): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x1013) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x1, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) 0s ago: executing program 3 (id=263): openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/uapsd_queues\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) socket(0x11, 0x3, 0x2) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) socket(0x2, 0x5, 0x0) socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x113082, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 81.419764][ T5815] cgroup: Unknown subsys name 'net' [ 81.590919][ T5815] cgroup: Unknown subsys name 'cpuset' [ 81.599466][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.122965][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.368588][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.377719][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.378761][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.392446][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.410189][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.417428][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.425219][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.427715][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.438273][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.458700][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.459695][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.473327][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.477937][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.480969][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.496787][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.505468][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.513877][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.524617][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.533038][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.543645][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.004599][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 86.100636][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.207654][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.239387][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 86.338130][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.345290][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.352863][ T5824] bridge_slave_0: entered allmulticast mode [ 86.360306][ T5824] bridge_slave_0: entered promiscuous mode [ 86.384351][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.391637][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.398976][ T5831] bridge_slave_0: entered allmulticast mode [ 86.406184][ T5831] bridge_slave_0: entered promiscuous mode [ 86.414316][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.421869][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.429555][ T5831] bridge_slave_1: entered allmulticast mode [ 86.436534][ T5831] bridge_slave_1: entered promiscuous mode [ 86.443709][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.450834][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.458032][ T5824] bridge_slave_1: entered allmulticast mode [ 86.465043][ T5824] bridge_slave_1: entered promiscuous mode [ 86.562900][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.575094][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.595648][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.603009][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.610559][ T5825] bridge_slave_0: entered allmulticast mode [ 86.617902][ T5825] bridge_slave_0: entered promiscuous mode [ 86.627109][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.652524][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.673074][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.680548][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.687785][ T5825] bridge_slave_1: entered allmulticast mode [ 86.694737][ T5825] bridge_slave_1: entered promiscuous mode [ 86.723419][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.730759][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.738120][ T5826] bridge_slave_0: entered allmulticast mode [ 86.745277][ T5826] bridge_slave_0: entered promiscuous mode [ 86.771131][ T5831] team0: Port device team_slave_0 added [ 86.781162][ T5831] team0: Port device team_slave_1 added [ 86.801557][ T5824] team0: Port device team_slave_0 added [ 86.808515][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.815706][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.824782][ T5826] bridge_slave_1: entered allmulticast mode [ 86.833227][ T5826] bridge_slave_1: entered promiscuous mode [ 86.893835][ T5824] team0: Port device team_slave_1 added [ 86.920506][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.978460][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.991724][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.002342][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.010653][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.037267][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.051209][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.058479][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.085004][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.108388][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.136199][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.143509][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.169506][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.206335][ T5825] team0: Port device team_slave_0 added [ 87.213046][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.220481][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.250922][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.288639][ T5825] team0: Port device team_slave_1 added [ 87.302575][ T5826] team0: Port device team_slave_0 added [ 87.344453][ T5826] team0: Port device team_slave_1 added [ 87.356153][ T5831] hsr_slave_0: entered promiscuous mode [ 87.363101][ T5831] hsr_slave_1: entered promiscuous mode [ 87.371880][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.378969][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.404958][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.455865][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.463001][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.489453][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.489639][ T5833] Bluetooth: hci2: command tx timeout [ 87.538100][ T5824] hsr_slave_0: entered promiscuous mode [ 87.544372][ T5824] hsr_slave_1: entered promiscuous mode [ 87.550657][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 87.556449][ T5824] Cannot create hsr debugfs directory [ 87.562416][ T5833] Bluetooth: hci3: command tx timeout [ 87.562450][ T5836] Bluetooth: hci0: command tx timeout [ 87.568313][ T5841] Bluetooth: hci1: command tx timeout [ 87.605169][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.612410][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.638466][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.676206][ T5825] hsr_slave_0: entered promiscuous mode [ 87.682574][ T5825] hsr_slave_1: entered promiscuous mode [ 87.688789][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 87.694522][ T5825] Cannot create hsr debugfs directory [ 87.701027][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.708276][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.734411][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.923583][ T5826] hsr_slave_0: entered promiscuous mode [ 87.930391][ T5826] hsr_slave_1: entered promiscuous mode [ 87.936406][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 87.942221][ T5826] Cannot create hsr debugfs directory [ 88.219013][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.231721][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.249766][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.275824][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.336738][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.348974][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.368177][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.381067][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.460878][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.492600][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.518526][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.529798][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.600214][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.613924][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.648926][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.664561][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.728881][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.779642][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.791527][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.809754][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.817016][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.846846][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.873277][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.880512][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.890527][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.897695][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.907813][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.914922][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.032976][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.103526][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.134533][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.141748][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.172937][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.193041][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.200227][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.255798][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.273786][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.281019][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.341375][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.348658][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.452323][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.559165][ T5841] Bluetooth: hci2: command tx timeout [ 89.578559][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.620975][ T5831] veth0_vlan: entered promiscuous mode [ 89.639098][ T5841] Bluetooth: hci1: command tx timeout [ 89.644556][ T5841] Bluetooth: hci3: command tx timeout [ 89.651351][ T5833] Bluetooth: hci0: command tx timeout [ 89.674878][ T5831] veth1_vlan: entered promiscuous mode [ 89.800598][ T5824] veth0_vlan: entered promiscuous mode [ 89.822342][ T5831] veth0_macvtap: entered promiscuous mode [ 89.846849][ T5824] veth1_vlan: entered promiscuous mode [ 89.859763][ T5831] veth1_macvtap: entered promiscuous mode [ 89.903385][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.921796][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.934840][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.955886][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.980928][ T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.991319][ T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.010696][ T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.019823][ T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029749][ T5824] veth0_macvtap: entered promiscuous mode [ 90.050022][ T5824] veth1_macvtap: entered promiscuous mode [ 90.166514][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.167784][ T5826] veth0_vlan: entered promiscuous mode [ 90.177358][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.198836][ T5825] veth0_vlan: entered promiscuous mode [ 90.209897][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.222771][ T5826] veth1_vlan: entered promiscuous mode [ 90.255543][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.271644][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.281308][ T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.290605][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.294970][ T5825] veth1_vlan: entered promiscuous mode [ 90.310849][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.321150][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.368180][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.390898][ T5826] veth0_macvtap: entered promiscuous mode [ 90.408966][ T5825] veth0_macvtap: entered promiscuous mode [ 90.429309][ T5826] veth1_macvtap: entered promiscuous mode [ 90.431514][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.451404][ T5825] veth1_macvtap: entered promiscuous mode [ 90.565487][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.594876][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.625570][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.638757][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.649390][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.682451][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.712268][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754005][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754063][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.771025][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.801018][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.809652][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.846825][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.876004][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.980800][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.011265][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.216451][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.240401][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.338812][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.346701][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.495342][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.513444][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.614953][ T5940] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.637524][ T5841] Bluetooth: hci2: command tx timeout [ 91.679807][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.704191][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.717445][ T5841] Bluetooth: hci3: command tx timeout [ 91.722994][ T5833] Bluetooth: hci0: command tx timeout [ 91.723036][ T5836] Bluetooth: hci1: command tx timeout [ 91.765818][ T5940] Line length is too long: Should be less than 4094 [ 91.891084][ T43] cfg80211: failed to load regulatory.db [ 92.321123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.324662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.432833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.445419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.485059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.494142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.503006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.683539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.832581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.847657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.709676][ T5979] Console: switching to colour VGA+ 80x25 [ 93.717908][ T5836] Bluetooth: hci2: command tx timeout [ 93.798329][ T5836] Bluetooth: hci1: command tx timeout [ 93.798342][ T5841] Bluetooth: hci3: command tx timeout [ 93.798383][ T5836] Bluetooth: hci0: command tx timeout [ 94.427092][ T5982] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 94.435201][ T5982] netlink: 330 bytes leftover after parsing attributes in process `syz.1.10'. [ 95.272825][ T6004] Zero length message leads to an empty skb [ 98.188795][ T6038] random: crng reseeded on system resumption [ 98.875402][ T6053] capability: warning: `syz.0.24' uses 32-bit capabilities (legacy support in use) [ 98.949365][ T6053] futex_wake_op: syz.0.24 tries to shift op by -2048; fix this program [ 100.129424][ T6072] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.090581][ T6060] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.126995][ T6060] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.213921][ T6060] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.285641][ T6060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.325576][ T6060] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.605440][ T6060] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.630779][ T6060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.647596][ T6060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.699187][ T6060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.756841][ T6060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.895825][ T6060] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.180653][ T6060] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.855834][ T6120] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 103.863764][ T6120] netlink: 330 bytes leftover after parsing attributes in process `syz.2.38'. [ 104.117924][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.358142][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.682782][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.757440][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.826610][ T6139] netlink: 'syz.0.39': attribute type 10 has an invalid length. [ 104.848039][ T6139] netlink: 330 bytes leftover after parsing attributes in process `syz.0.39'. [ 105.113781][ T6142] sp0: Synchronizing with TNC [ 106.208169][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.440055][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.757901][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.840983][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.367172][ T6173] openvswitch: netlink: IPv6 tunnel dst address is zero [ 108.277473][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.517369][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.838499][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.920861][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.048136][ T6196] zswap: compressor not available [ 110.677989][ T6204] syz.2.54 (6204) used greatest stack depth: 19288 bytes left [ 111.673929][ T6222] tipc: Started in network mode [ 111.755293][ T6222] tipc: Node identity ffffffff, cluster identity 4711 [ 111.838011][ T6222] tipc: Node number set to 4294967295 [ 111.854930][ T6226] Invalid ELF header magic: != ELF [ 112.203096][ T6237] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.209672][ T6237] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 113.614525][ T6266] random: crng reseeded on system resumption [ 113.769410][ T6262] futex_wake_op: syz.0.64 tries to shift op by -2048; fix this program [ 113.827787][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 113.850999][ T6262] futex_wake_op: syz.0.64 tries to shift op by -2048; fix this program [ 113.953567][ T6265] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.969325][ T6265] netlink: zone id is out of range [ 114.805830][ T6286] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.893380][ T6289] ======================================================= [ 114.893380][ T6289] WARNING: The mand mount option has been deprecated and [ 114.893380][ T6289] and is ignored by this kernel. Remove the mand [ 114.893380][ T6289] option from the mount to silence this warning. [ 114.893380][ T6289] ======================================================= [ 115.244655][ T6298] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.261798][ T30] audit: type=1800 audit(1759891949.488:2): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.72" name="version" dev="configfs" ino=8982 res=0 errno=0 [ 115.300412][ T6301] random: crng reseeded on system resumption [ 115.446349][ T6303] __vm_enough_memory: pid: 6303, comm: syz.0.71, bytes: 4398046511104 not enough memory for the allocation [ 115.659874][ T6307] netlink: 'syz.3.74': attribute type 16 has an invalid length. [ 115.698592][ T6307] netlink: 226 bytes leftover after parsing attributes in process `syz.3.74'. [ 115.855671][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 116.660121][ T6327] netlink: set zone limit has 8 unknown bytes [ 121.547973][ T6425] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.203964][ T6442] random: crng reseeded on system resumption [ 123.204030][ T6452] sd 0:0:1:0: PR command failed: 1026 [ 123.209482][ T6452] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 123.216274][ T6452] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 123.282725][ T6454] vivid-003: ================= START STATUS ================= [ 123.319168][ T6454] vivid-003: Radio HW Seek Mode: Bounded [ 123.324939][ T6454] vivid-003: Radio Programmable HW Seek: false [ 123.332747][ T6454] vivid-003: RDS Rx I/O Mode: Block I/O [ 123.338566][ T6454] vivid-003: Generate RBDS Instead of RDS: false [ 123.347566][ T6454] vivid-003: RDS Reception: true [ 123.359671][ T6454] vivid-003: RDS Program Type: 0 inactive [ 123.370946][ T6454] vivid-003: RDS PS Name: inactive [ 123.379323][ T6456] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 123.392472][ T6454] vivid-003: RDS Radio Text: inactive [ 123.408778][ T6454] vivid-003: RDS Traffic Announcement: false inactive [ 123.430274][ T6454] vivid-003: RDS Traffic Program: false inactive [ 123.440665][ T6454] vivid-003: RDS Music: false inactive [ 123.447382][ T6454] vivid-003: ================== END STATUS ================== [ 124.684839][ T6473] netlink: 'syz.2.104': attribute type 10 has an invalid length. [ 124.744188][ T6473] netlink: 330 bytes leftover after parsing attributes in process `syz.2.104'. [ 126.621329][ T6513] netlink: set zone limit has 8 unknown bytes [ 126.823023][ T6516] HfR: entered promiscuous mode [ 127.150542][ T6530] binder: 6529:6530 ioctl c018620c 0 returned -14 [ 127.263946][ T6530] FAULT_INJECTION: forcing a failure. [ 127.263946][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 127.303911][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz.2.118 Not tainted syzkaller #0 PREEMPT(full) [ 127.303947][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.303962][ T6530] Call Trace: [ 127.303971][ T6530] [ 127.303982][ T6530] dump_stack_lvl+0x16c/0x1f0 [ 127.304017][ T6530] should_fail_ex+0x512/0x640 [ 127.304048][ T6530] ? __kmalloc_noprof+0xca/0x880 [ 127.304090][ T6530] should_failslab+0xc2/0x120 [ 127.304124][ T6530] __kmalloc_noprof+0xdd/0x880 [ 127.304162][ T6530] ? kobject_get_path+0xd2/0x2a0 [ 127.304198][ T6530] ? kobject_get_path+0xd2/0x2a0 [ 127.304224][ T6530] kobject_get_path+0xd2/0x2a0 [ 127.304260][ T6530] input_register_device+0x91b/0x1180 [ 127.304295][ T6530] ? input_ff_create+0x256/0x350 [ 127.304323][ T6530] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 127.304351][ T6530] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 127.304387][ T6530] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 127.304432][ T6530] ? find_held_lock+0x2b/0x80 [ 127.304479][ T6530] ? __pfx_uinput_ioctl+0x10/0x10 [ 127.304506][ T6530] __x64_sys_ioctl+0x18e/0x210 [ 127.304547][ T6530] do_syscall_64+0xcd/0xfa0 [ 127.304578][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.304604][ T6530] RIP: 0033:0x7f03ed58eec9 [ 127.304633][ T6530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.304657][ T6530] RSP: 002b:00007f03ee39a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.304683][ T6530] RAX: ffffffffffffffda RBX: 00007f03ed7e5fa0 RCX: 00007f03ed58eec9 [ 127.304701][ T6530] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000a [ 127.304717][ T6530] RBP: 00007f03ed611f91 R08: 0000000000000000 R09: 0000000000000000 [ 127.304732][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.304748][ T6530] R13: 00007f03ed7e6038 R14: 00007f03ed7e5fa0 R15: 00007ffd21ae3918 [ 127.304785][ T6530] [ 127.500778][ T6530] input: jJǸ-9%vlQ J86 as N/A [ 128.762868][ C1] sd 0:0:1:0: [sda] tag#8059 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 128.773409][ C1] sd 0:0:1:0: [sda] tag#8059 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 128.829483][ T30] audit: type=1804 audit(1759891963.078:3): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.123" name="/newroot/29/file0" dev="tmpfs" ino=173 res=1 errno=0 [ 130.773141][ T6589] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.983033][ T6594] process 'syz.3.132' launched ':,' with NULL argv: empty string added [ 131.725741][ T6589] kexec: Could not allocate control_code_buffer [ 132.021284][ T6608] ICMPv6: process `syz.0.135' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 132.393596][ T6616] random: crng reseeded on system resumption [ 132.671869][ T6606] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 132.698495][ T6606] netlink: 330 bytes leftover after parsing attributes in process `syz.3.134'. [ 134.593131][ T6651] HfR: entered promiscuous mode [ 134.845721][ T6650] netlink: set zone limit has 8 unknown bytes [ 136.677913][ T6688] netlink: 25 bytes leftover after parsing attributes in process `syz.3.152'. [ 136.928447][ T6676] netlink: 'syz.0.149': attribute type 10 has an invalid length. [ 136.936193][ T6676] netlink: 330 bytes leftover after parsing attributes in process `syz.0.149'. [ 137.334277][ T6692] netlink: 98 bytes leftover after parsing attributes in process `syz.3.154'. [ 137.911346][ T6704] FAULT_INJECTION: forcing a failure. [ 137.911346][ T6704] name failslab, interval 1, probability 0, space 0, times 0 [ 137.964455][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.970903][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.018625][ T6704] CPU: 0 UID: 0 PID: 6704 Comm: syz.1.157 Not tainted syzkaller #0 PREEMPT(full) [ 138.018646][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.018655][ T6704] Call Trace: [ 138.018660][ T6704] [ 138.018666][ T6704] dump_stack_lvl+0x16c/0x1f0 [ 138.018686][ T6704] should_fail_ex+0x512/0x640 [ 138.018702][ T6704] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 138.018719][ T6704] should_failslab+0xc2/0x120 [ 138.018737][ T6704] kmem_cache_alloc_noprof+0x75/0x6e0 [ 138.018751][ T6704] ? ptlock_alloc+0x1f/0x70 [ 138.018775][ T6704] ? ptlock_alloc+0x1f/0x70 [ 138.018794][ T6704] ptlock_alloc+0x1f/0x70 [ 138.018819][ T6704] pte_alloc_one+0x84/0x350 [ 138.018837][ T6704] __pte_alloc+0x6d/0x380 [ 138.018854][ T6704] ? __pfx___pte_alloc+0x10/0x10 [ 138.018869][ T6704] ? __pfx___might_resched+0x10/0x10 [ 138.018884][ T6704] ? copy_page_range+0x1c69/0x6930 [ 138.018912][ T6704] copy_page_range+0x44a1/0x6930 [ 138.018956][ T6704] ? __pfx_copy_page_range+0x10/0x10 [ 138.018983][ T6704] ? __pfx___might_resched+0x10/0x10 [ 138.018996][ T6704] ? __pfx_mas_store+0x10/0x10 [ 138.019012][ T6704] ? __vma_enter_locked+0x163/0x3f0 [ 138.019034][ T6704] ? dup_mmap+0xe30/0x2280 [ 138.019052][ T6704] ? down_write+0x14d/0x200 [ 138.019072][ T6704] ? up_write+0x1b2/0x520 [ 138.019094][ T6704] dup_mmap+0xe80/0x2280 [ 138.019120][ T6704] ? __pfx_dup_mmap+0x10/0x10 [ 138.019152][ T6704] copy_process+0x3f0c/0x76a0 [ 138.019170][ T6704] ? __pfx___futex_wait+0x10/0x10 [ 138.019199][ T6704] ? __pfx_copy_process+0x10/0x10 [ 138.019216][ T6704] ? futex_private_hash_put+0x176/0x300 [ 138.019237][ T6704] ? futex_private_hash_put+0x18a/0x300 [ 138.019258][ T6704] kernel_clone+0xfc/0x930 [ 138.019276][ T6704] ? __pfx_kernel_clone+0x10/0x10 [ 138.019305][ T6704] __do_sys_clone+0xce/0x120 [ 138.019322][ T6704] ? __pfx___do_sys_clone+0x10/0x10 [ 138.019349][ T6704] ? xfd_validate_state+0x61/0x180 [ 138.019368][ T6704] ? __pfx_do_writev+0x10/0x10 [ 138.019387][ T6704] do_syscall_64+0xcd/0xfa0 [ 138.019404][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.019419][ T6704] RIP: 0033:0x7f90df58eec9 [ 138.019430][ T6704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.019443][ T6704] RSP: 002b:00007f90e04dcfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 138.019457][ T6704] RAX: ffffffffffffffda RBX: 00007f90df7e5fa0 RCX: 00007f90df58eec9 [ 138.019466][ T6704] RDX: 0000200000000080 RSI: 0000200000001430 RDI: 0000000040000000 [ 138.019475][ T6704] RBP: 00007f90df611f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.019483][ T6704] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 138.019492][ T6704] R13: 00007f90df7e6038 R14: 00007f90df7e5fa0 R15: 00007ffe1bb0c518 [ 138.019511][ T6704] [ 138.845146][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 139.886202][ T6733] mmap: syz.2.161 (6733) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.976012][ T6738] netlink: 'syz.0.163': attribute type 27 has an invalid length. [ 139.996695][ T6738] netlink: 146 bytes leftover after parsing attributes in process `syz.0.163'. [ 140.406002][ T6749] kAFS: unparsable volume name [ 141.780664][ T6772] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 141.901353][ T6763] netlink: 'syz.2.168': attribute type 10 has an invalid length. [ 141.909490][ T6763] netlink: 330 bytes leftover after parsing attributes in process `syz.2.168'. [ 143.256492][ T6787] could not allocate digest TFM handle [ 145.202820][ T6823] futex_wake_op: syz.2.181 tries to shift op by -2048; fix this program [ 145.227481][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.183'. [ 145.243419][ T6823] futex_wake_op: syz.2.181 tries to shift op by -2048; fix this program [ 145.247442][ T6832] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"-y–L [ 147.958156][ T6875] FAULT_INJECTION: forcing a failure. [ 147.958156][ T6875] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.001054][ T6875] CPU: 1 UID: 0 PID: 6875 Comm: syz.1.190 Not tainted syzkaller #0 PREEMPT(full) [ 148.001085][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.001097][ T6875] Call Trace: [ 148.001105][ T6875] [ 148.001114][ T6875] dump_stack_lvl+0x16c/0x1f0 [ 148.001145][ T6875] should_fail_ex+0x512/0x640 [ 148.001179][ T6875] _copy_from_user+0x2e/0xd0 [ 148.001216][ T6875] copy_msghdr_from_user+0x98/0x160 [ 148.001245][ T6875] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 148.001290][ T6875] ___sys_sendmsg+0xfe/0x1d0 [ 148.001320][ T6875] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.001391][ T6875] __sys_sendmsg+0x16d/0x220 [ 148.001420][ T6875] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.001471][ T6875] do_syscall_64+0xcd/0xfa0 [ 148.001500][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.001525][ T6875] RIP: 0033:0x7f90df58eec9 [ 148.001544][ T6875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.001566][ T6875] RSP: 002b:00007f90e04bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.001589][ T6875] RAX: ffffffffffffffda RBX: 00007f90df7e6090 RCX: 00007f90df58eec9 [ 148.001606][ T6875] RDX: 0000000000048000 RSI: 0000200000000100 RDI: 000000000000000a [ 148.001620][ T6875] RBP: 00007f90e04bc090 R08: 0000000000000000 R09: 0000000000000000 [ 148.001634][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.001649][ T6875] R13: 00007f90df7e6128 R14: 00007f90df7e6090 R15: 00007ffe1bb0c518 [ 148.001683][ T6875] [ 149.464633][ T6887] netlink: 62 bytes leftover after parsing attributes in process `syz.1.192'. [ 149.752396][ T6890] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 151.346225][ T6911] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 151.356729][ T6911] netlink: 330 bytes leftover after parsing attributes in process `syz.0.197'. [ 151.620655][ T6925] can: request_module (can-proto-0) failed. [ 152.134501][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.198522][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.207942][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.217165][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.257754][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.281579][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.306371][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.347675][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.560694][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.569574][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.578717][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.598601][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.617898][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.706432][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.867585][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.875558][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.888439][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 152.900106][ T6951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 154.949287][ T7018] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 155.016431][ T7018] netlink: 330 bytes leftover after parsing attributes in process `syz.0.216'. [ 157.991790][ T7052] netlink: 186 bytes leftover after parsing attributes in process `syz.2.223'. [ 159.337909][ T7077] random: crng reseeded on system resumption [ 161.067998][ T7098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.118362][ T7098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.201827][ T7098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.267908][ T7098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.311567][ T7095] kexec: Could not allocate control_code_buffer [ 162.609453][ T7120] openvswitch: netlink: IP tunnel dst address not specified [ 163.011714][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.157421][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.238486][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.317705][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.300214][ T7177] kafs: addr_prefs: Invalid Command [ 164.522295][ T7170] zswap: compressor q]9"Xwz[eMqn not available [ 164.948132][ T7171] zswap: compressor q]9"Xwz[eMqn not available [ 165.260734][ T7189] FAULT_INJECTION: forcing a failure. [ 165.260734][ T7189] name failslab, interval 1, probability 0, space 0, times 0 [ 165.273453][ T7189] CPU: 1 UID: 0 PID: 7189 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(full) [ 165.273476][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.273484][ T7189] Call Trace: [ 165.273492][ T7189] [ 165.273499][ T7189] dump_stack_lvl+0x16c/0x1f0 [ 165.273520][ T7189] should_fail_ex+0x512/0x640 [ 165.273544][ T7189] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 165.273566][ T7189] should_failslab+0xc2/0x120 [ 165.273585][ T7189] kmem_cache_alloc_noprof+0x75/0x6e0 [ 165.273599][ T7189] ? __lock_acquire+0x62e/0x1ce0 [ 165.273617][ T7189] ? sk_prot_alloc+0x60/0x2a0 [ 165.273639][ T7189] ? sk_prot_alloc+0x60/0x2a0 [ 165.273655][ T7189] sk_prot_alloc+0x60/0x2a0 [ 165.273675][ T7189] sk_alloc+0x36/0xc20 [ 165.273689][ T7189] __vsock_create.constprop.0+0x3c/0xbb0 [ 165.273711][ T7189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.273734][ T7189] vsock_create+0x139/0x500 [ 165.273750][ T7189] __sock_create+0x335/0x8d0 [ 165.273773][ T7189] __sys_socket+0x14d/0x260 [ 165.273793][ T7189] ? __pfx___sys_socket+0x10/0x10 [ 165.273813][ T7189] ? xfd_validate_state+0x61/0x180 [ 165.273832][ T7189] ? __task_pid_nr_ns+0x1f5/0x500 [ 165.273855][ T7189] __x64_sys_socket+0x72/0xb0 [ 165.273874][ T7189] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.273888][ T7189] do_syscall_64+0xcd/0xfa0 [ 165.273905][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.273919][ T7189] RIP: 0033:0x7f90df58eec9 [ 165.273931][ T7189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.273945][ T7189] RSP: 002b:00007f90e04dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 165.273959][ T7189] RAX: ffffffffffffffda RBX: 00007f90df7e5fa0 RCX: 00007f90df58eec9 [ 165.273968][ T7189] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 165.273976][ T7189] RBP: 00007f90df611f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.273984][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.273992][ T7189] R13: 00007f90df7e6038 R14: 00007f90df7e5fa0 R15: 00007ffe1bb0c518 [ 165.274021][ T7189] [ 166.218884][ T7203] __vm_enough_memory: pid: 7203, comm: syz.3.252, bytes: 4398046511104 not enough memory for the allocation [ 167.161641][ T7208] netlink: 338 bytes leftover after parsing attributes in process `syz.1.253'. [ 167.273265][ T7212] bridge0: port 3(veth1_macvtap) entered blocking state [ 167.302076][ T7212] bridge0: port 3(veth1_macvtap) entered disabled state [ 167.317726][ T7212] veth1_macvtap: entered allmulticast mode [ 167.350055][ T7212] veth1_macvtap: left allmulticast mode [ 168.540742][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 168.904976][ T7238] ================================================================== [ 168.904996][ T7238] BUG: KASAN: use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 168.905035][ T7238] Read of size 256 at addr ffff88807c83a3e0 by task syz.1.261/7238 [ 168.905057][ T7238] [ 168.905070][ T7238] CPU: 0 UID: 0 PID: 7238 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(full) [ 168.905100][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.905115][ T7238] Call Trace: [ 168.905124][ T7238] [ 168.905133][ T7238] dump_stack_lvl+0x116/0x1f0 [ 168.905163][ T7238] print_report+0xcd/0x630 [ 168.905195][ T7238] ? __virt_addr_valid+0x81/0x610 [ 168.905228][ T7238] ? __phys_addr+0xe8/0x180 [ 168.905260][ T7238] ? fbcon_prepare_logo+0xa03/0xc70 [ 168.905286][ T7238] kasan_report+0xe0/0x110 [ 168.905316][ T7238] ? fbcon_prepare_logo+0xa03/0xc70 [ 168.905348][ T7238] kasan_check_range+0x100/0x1b0 [ 168.905383][ T7238] __asan_memcpy+0x23/0x60 [ 168.905408][ T7238] fbcon_prepare_logo+0xa03/0xc70 [ 168.905444][ T7238] fbcon_init+0xd77/0x1900 [ 168.905473][ T7238] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 168.905504][ T7238] visual_init+0x320/0x620 [ 168.905534][ T7238] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 168.905582][ T7238] store_bind+0x61d/0x760 [ 168.905618][ T7238] ? sysfs_file_kobj+0xe4/0x290 [ 168.905646][ T7238] ? __pfx_store_bind+0x10/0x10 [ 168.905677][ T7238] dev_attr_store+0x58/0x80 [ 168.905705][ T7238] ? __pfx_dev_attr_store+0x10/0x10 [ 168.905732][ T7238] sysfs_kf_write+0xef/0x150 [ 168.905759][ T7238] kernfs_fop_write_iter+0x3ac/0x570 [ 168.905795][ T7238] ? __pfx_sysfs_kf_write+0x10/0x10 [ 168.905824][ T7238] iter_file_splice_write+0xa24/0x12e0 [ 168.905859][ T7238] ? __pfx_iter_file_splice_write+0x10/0x10 [ 168.905887][ T7238] ? __pfx_copy_splice_read+0x10/0x10 [ 168.905934][ T7238] ? __pfx_iter_file_splice_write+0x10/0x10 [ 168.905961][ T7238] direct_splice_actor+0x192/0x6c0 [ 168.905987][ T7238] splice_direct_to_actor+0x345/0xa30 [ 168.906026][ T7238] ? __pfx_direct_splice_actor+0x10/0x10 [ 168.906053][ T7238] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 168.906097][ T7238] do_splice_direct+0x174/0x240 [ 168.906143][ T7238] ? __pfx_do_splice_direct+0x10/0x10 [ 168.906183][ T7238] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 168.906224][ T7238] ? rw_verify_area+0xcf/0x6c0 [ 168.906276][ T7238] do_sendfile+0xb06/0xe50 [ 168.906307][ T7238] ? __pfx_do_sendfile+0x10/0x10 [ 168.906336][ T7238] ? __x64_sys_futex+0x1e0/0x4c0 [ 168.906368][ T7238] ? __x64_sys_futex+0x1e9/0x4c0 [ 168.906403][ T7238] __x64_sys_sendfile64+0x1d8/0x220 [ 168.906434][ T7238] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 168.906471][ T7238] do_syscall_64+0xcd/0xfa0 [ 168.906499][ T7238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.906525][ T7238] RIP: 0033:0x7f90df58eec9 [ 168.906555][ T7238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.906582][ T7238] RSP: 002b:00007f90e049b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 168.906608][ T7238] RAX: ffffffffffffffda RBX: 00007f90df7e6180 RCX: 00007f90df58eec9 [ 168.906627][ T7238] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 168.906642][ T7238] RBP: 00007f90df611f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.906658][ T7238] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 168.906673][ T7238] R13: 00007f90df7e6218 R14: 00007f90df7e6180 R15: 00007ffe1bb0c518 [ 168.906699][ T7238] [ 168.906708][ T7238] [ 168.906716][ T7238] The buggy address belongs to the physical page: [ 168.906735][ T7238] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c83a [ 168.906759][ T7238] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 168.906791][ T7238] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 168.906815][ T7238] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 168.906830][ T7238] page dumped because: kasan: bad access detected [ 168.906842][ T7238] page_owner tracks the page as freed [ 168.906850][ T7238] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5815, tgid 5815 (syz-executor), ts 83592462980, free_ts 98591753512 [ 168.906894][ T7238] post_alloc_hook+0x1c0/0x230 [ 168.906931][ T7238] get_page_from_freelist+0x10a3/0x3a30 [ 168.906954][ T7238] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 168.906978][ T7238] alloc_pages_mpol+0x1fb/0x550 [ 168.907007][ T7238] new_slab+0x24a/0x360 [ 168.907040][ T7238] ___slab_alloc+0xdc4/0x1ae0 [ 168.907072][ T7238] __slab_alloc.constprop.0+0x63/0x110 [ 168.907107][ T7238] kmem_cache_alloc_node_noprof+0x43c/0x770 [ 168.907130][ T7238] kmalloc_reserve+0x18b/0x2c0 [ 168.907160][ T7238] __alloc_skb+0x166/0x380 [ 168.907183][ T7238] tcp_stream_alloc_skb+0x34/0x560 [ 168.907217][ T7238] tcp_sendmsg_locked+0x12d9/0x42e0 [ 168.907252][ T7238] tcp_sendmsg+0x2e/0x50 [ 168.907285][ T7238] inet_sendmsg+0xb9/0x140 [ 168.907306][ T7238] sock_write_iter+0x509/0x610 [ 168.907338][ T7238] vfs_write+0x7d0/0x11d0 [ 168.907362][ T7238] page last free pid 6042 tgid 6041 stack trace: [ 168.907376][ T7238] __free_frozen_pages+0x7df/0x1160 [ 168.907407][ T7238] __put_partials+0x130/0x170 [ 168.907443][ T7238] qlist_free_all+0x4d/0x120 [ 168.907466][ T7238] kasan_quarantine_reduce+0x195/0x1e0 [ 168.907492][ T7238] __kasan_slab_alloc+0x69/0x90 [ 168.907520][ T7238] kmem_cache_alloc_noprof+0x250/0x6e0 [ 168.907541][ T7238] prepare_creds+0x2c/0x7d0 [ 168.907583][ T7238] __sys_setreuid+0x101/0xaf0 [ 168.907608][ T7238] do_syscall_64+0xcd/0xfa0 [ 168.907632][ T7238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.907656][ T7238] [ 168.907662][ T7238] Memory state around the buggy address: [ 168.907675][ T7238] ffff88807c83a280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.907693][ T7238] ffff88807c83a300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.907711][ T7238] >ffff88807c83a380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.907725][ T7238] ^ [ 168.907740][ T7238] ffff88807c83a400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.907758][ T7238] ffff88807c83a480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 168.907772][ T7238] ================================================================== [ 168.907847][ T7238] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 168.907865][ T7238] CPU: 0 UID: 0 PID: 7238 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(full) [ 168.907896][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.907912][ T7238] Call Trace: [ 168.907921][ T7238] [ 168.907931][ T7238] dump_stack_lvl+0x3d/0x1f0 [ 168.907960][ T7238] vpanic+0x640/0x6f0 [ 168.907996][ T7238] panic+0xca/0xd0 [ 168.908030][ T7238] ? __pfx_panic+0x10/0x10 [ 168.908064][ T7238] ? fbcon_prepare_logo+0xa03/0xc70 [ 168.908093][ T7238] ? preempt_schedule_common+0x44/0xc0 [ 168.908121][ T7238] ? preempt_schedule_thunk+0x16/0x30 [ 168.908155][ T7238] check_panic_on_warn+0xab/0xb0 [ 168.908191][ T7238] end_report+0x107/0x170 [ 168.908221][ T7238] kasan_report+0xee/0x110 [ 168.908252][ T7238] ? fbcon_prepare_logo+0xa03/0xc70 [ 168.908285][ T7238] kasan_check_range+0x100/0x1b0 [ 168.908320][ T7238] __asan_memcpy+0x23/0x60 [ 168.908345][ T7238] fbcon_prepare_logo+0xa03/0xc70 [ 168.908381][ T7238] fbcon_init+0xd77/0x1900 [ 168.908410][ T7238] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 168.908441][ T7238] visual_init+0x320/0x620 [ 168.908471][ T7238] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 168.908511][ T7238] store_bind+0x61d/0x760 [ 168.908545][ T7238] ? sysfs_file_kobj+0xe4/0x290 [ 168.908579][ T7238] ? __pfx_store_bind+0x10/0x10 [ 168.908608][ T7238] dev_attr_store+0x58/0x80 [ 168.908634][ T7238] ? __pfx_dev_attr_store+0x10/0x10 [ 168.908662][ T7238] sysfs_kf_write+0xef/0x150 [ 168.908689][ T7238] kernfs_fop_write_iter+0x3ac/0x570 [ 168.908726][ T7238] ? __pfx_sysfs_kf_write+0x10/0x10 [ 168.908754][ T7238] iter_file_splice_write+0xa24/0x12e0 [ 168.908790][ T7238] ? __pfx_iter_file_splice_write+0x10/0x10 [ 168.908819][ T7238] ? __pfx_copy_splice_read+0x10/0x10 [ 168.908867][ T7238] ? __pfx_iter_file_splice_write+0x10/0x10 [ 168.908894][ T7238] direct_splice_actor+0x192/0x6c0 [ 168.908922][ T7238] splice_direct_to_actor+0x345/0xa30 [ 168.908964][ T7238] ? __pfx_direct_splice_actor+0x10/0x10 [ 168.908992][ T7238] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 168.909036][ T7238] do_splice_direct+0x174/0x240 [ 168.909072][ T7238] ? __pfx_do_splice_direct+0x10/0x10 [ 168.909109][ T7238] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 168.909149][ T7238] ? rw_verify_area+0xcf/0x6c0 [ 168.909186][ T7238] do_sendfile+0xb06/0xe50 [ 168.909213][ T7238] ? __pfx_do_sendfile+0x10/0x10 [ 168.909240][ T7238] ? __x64_sys_futex+0x1e0/0x4c0 [ 168.909271][ T7238] ? __x64_sys_futex+0x1e9/0x4c0 [ 168.909303][ T7238] __x64_sys_sendfile64+0x1d8/0x220 [ 168.909334][ T7238] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 168.909370][ T7238] do_syscall_64+0xcd/0xfa0 [ 168.909397][ T7238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.909422][ T7238] RIP: 0033:0x7f90df58eec9 [ 168.909442][ T7238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.909464][ T7238] RSP: 002b:00007f90e049b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 168.909489][ T7238] RAX: ffffffffffffffda RBX: 00007f90df7e6180 RCX: 00007f90df58eec9 [ 168.909506][ T7238] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 168.909522][ T7238] RBP: 00007f90df611f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.909537][ T7238] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 168.909559][ T7238] R13: 00007f90df7e6218 R14: 00007f90df7e6180 R15: 00007ffe1bb0c518 [ 168.909587][ T7238] [ 168.909846][ T7238] Kernel Offset: disabled