last executing test programs: 7.388344651s ago: executing program 0 (id=549): write$auto(0x3, 0x0, 0xfdef) 6.859107556s ago: executing program 3 (id=550): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x67c140, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x5c, 0xdf, 0xeb1, 0x401, 0x100000000008000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r1, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(r0, &(0x7f0000000a80)={0x0, 0xffff}, 0x8) epoll_create$auto(0x7) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x450000, 0x0) 6.776881485s ago: executing program 0 (id=551): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, 0x0, 0x6a) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) setreuid$auto(0x3, 0x7) 6.116862509s ago: executing program 0 (id=556): inotify_init1$auto(0x2) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/veth1_to_hsr/mcast_solicit\x00', 0x111301, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/dummy0/forwarding\x00', 0x202, 0x0) sendfile$auto(r1, r0, 0x0, 0x48) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/ad_num_ports\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/254, 0xfe) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 5.541972414s ago: executing program 0 (id=558): r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x982, 0x0) ioctl$auto_VHOST_SET_VRING_ERR2(r1, 0x4008af22, &(0x7f0000000040)={0x2c759b00, r0}) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) semctl$auto_IPC_INFO(0x10, 0x3, 0x3, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast2}, 0x19) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 5.46194925s ago: executing program 3 (id=560): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto(0x3, 0x40081271, 0x38) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8bfb8d1ffa178e0f324273421083410618838dc3"}) quotactl_fd$auto(0xffffffffffffffff, 0x4, r2, 0x0) setpgid$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(r3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0xffffffffbffffff9, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) epoll_ctl$auto_EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4, 0x3}) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0x3) socket$nl_generic(0x10, 0x3, 0x10) 4.624744912s ago: executing program 0 (id=563): mincore$auto(0x1ff, 0x2, 0x0) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(r0, r0, 0x0) pidfd_send_signal$auto_SIGCONT(r0, 0x12, 0x0, 0x3ff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x7fffffffffffffff) r1 = getpgrp(0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x100, 0x0) ioctl$auto(r4, 0x901064aa, 0xffeffffffffffdff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) 4.460658419s ago: executing program 3 (id=564): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) (async) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r3) fstat$auto(r2, &(0x7f00000002c0)={0x5, 0x4, 0x9, 0x1cf89d47, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8000000000000001, 0x7, 0xdc, 0x6, 0x7fffffff, 0x1000000000000000, 0x5, 0x5, 0x7}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'vlan0\x00', 0x0}) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000ac0)={0x1258, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_COORDINATOR={0x1228, 0x1e, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @u32=0x1ff}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@mcast2}, @nested={0xff, 0x122, 0x0, 0x1, [@generic="87847934a526f54167abe5c8997ce95e06150c02dd51d84105285acf039c0a71cc8f8f583b7a5a3abfae225d9c4d6aade53e042c6664703d4e365e0ad0e96b7f87aebaad8f", @typed={0x8, 0x139, 0x0, 0x0, @u32=0x600}, @typed={0x8, 0x14f, 0x0, 0x0, @fd=r1}, @generic="9b703728df5229b5fdaeca362ca197237a6ea92b557559f3296f1f7ecf62f578bf4f0b46394510c8635e421308f06c48692df31abf9ad05f095d9b3ffb9db3fb2933e30633e2722014502120c823931f0e7ac367960190700524bc21048a97d7a3888c885a7c697eb3e8e4ff49a141d740d81707f7a4c8c4667ba90365e76ab97549b6b0b84c55ad5ef4d388b302f7a9d9075b08f24af53d6e14579bfb2f6312fb2b5203a124"]}, @nested={0x80, 0xf4, 0x0, 0x1, [@nested={0x4, 0x8}, @generic="60fea4d99afa1b665f4815def876a100b1e1ac", @generic="637696228265db8ad3b46db6aaaae47ca275f6fce72703f60ee0af31ee7798a6cd98245a0ce1e9c6a00a59669109259c5b4cdd61332a3f1a79d0173d6db63d40a139695f6314e4e0a36a6ca847edd4d05a1a2cdd937ad9ee1df8a18ccc", @typed={0x6, 0x14a, 0x0, 0x0, @str='-\x00'}]}, @generic="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", @typed={0x8, 0x79, 0x0, 0x0, @uid=r7}, @nested={0x1c, 0xd2, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0xcc}, @typed={0xc, 0xe, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x112}]}, @typed={0x47, 0xfd, 0x0, 0x0, @binary="e4d2c17e1cafeba41d0eaaf455a5de5fae3bea2774a7e52b541d72c71cb2b9015362cfa5f139ab0a154764d34087aca306a00c8598aac21602807f1a99011665ce811b"}, @nested={0x1c, 0x21, 0x0, 0x1, [@typed={0xc, 0xfb, 0x0, 0x0, @u64=0x616c}, @typed={0x8, 0xc3, 0x0, 0x0, @fd=r2}, @typed={0x4, 0x131}]}]}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8}]}, 0x1258}, 0x1, 0x0, 0x0, 0x2400c841}, 0x4010) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8814) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) clone$auto(0x7fff, 0x800000000000200, 0x0, 0x0, 0xf) r9 = fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) (async) r10 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r9, 0x9, 0x9, r10, 0x0) process_madvise$auto(r10, 0x0, 0x24c0000000, 0x80000001, 0x80) (async) process_madvise$auto(r10, 0x0, 0x24c0000000, 0x80000001, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r11, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) 4.44093881s ago: executing program 2 (id=565): r0 = socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x2000d, 0x8, 0xeb0, r0, 0x10007ffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r3, 0x7, 0x6}, 0x4, 0x100000) getsockopt$auto_SO_MAX_PACING_RATE(r4, 0x1, 0x2f, &(0x7f0000000100)='\'\x1e\x00', &(0x7f0000000200)=0x9) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x40, r2, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0x9, 0x5, 0x0, 0x1, [@generic="5647f82231"]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x40}}, 0x24048084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00'}) shmctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x6, 0xee01, 0x0, 0x3, 0x7, 0x4, 0xfa}, 0x7, 0x6, 0x0, 0x4, @inferred, @raw=0xffff42b0, 0x6, 0x0, &(0x7f0000000080)="29c4a769c02e3e77a00ffe49c0a16f3bd7b082cbc567432f15e7bc1b47a7dac67fc7bbef4b3e9eb1e424ae479f1fa653889e3d2d6641e66ca01527a5e0c832662bbc8eae2e493cab28eb5e5e430b86b8c07f695a7b2ff9483fae25dca2fce25f49b49c5a214203d6f60345ddd69bbe4b7ece25de269d4c9e6310358f3cf4510381b4bd6f4c662e171dd98bc5f8aee01a7a287d556d7e1b438ec0d4b329cf2a0ded504900bcab912f69d83ae3bac6adc81699daffc118142561aaddb29737a80e43d213702c8ae29f335436faf1e675de2007424869da71b85090379afe8673244a42", &(0x7f0000000180)="5a529f4e9910acbdbbaecf1e85adbf35e9d2be3dbb3702f3a3bdb2dae9641c904884f98b74169dbd86d224e03c40665fd32dfdaaeadc12894c6a97228ae8b62cc1d4943a2f3c0a738c7934425f405cbeabae2f3b7150a4d7c3cd3c53e5e0ca9438b7f5"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'xfrm0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) bpf$auto(0x9, &(0x7f0000000100)=@token_create={0x2}, 0x9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xfffffffffffffff1, 0x19) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) 3.703006243s ago: executing program 2 (id=567): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x7) (async) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) r2 = socket(0xa, 0x2, 0x0) (async) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$auto_TUNGETVNETLE(r3, 0x800454dd, &(0x7f00000000c0)=0x3) sendto$auto(r2, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 3.500829713s ago: executing program 2 (id=568): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x80) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r0, 0x4008af04, 0x0) msgctl$auto(0x5, 0xff, &(0x7f0000000540)={{0x8db, 0x0, 0xee00, 0x8, 0x8, 0xd4aadd4, 0x7c}, &(0x7f00000004c0)=0xfd, &(0x7f0000000500)=0xdb, 0x3a, 0xf, 0xb3, 0x4, 0x3, 0x9, 0xe, 0xfff, @raw=0x8001, @raw=0x6}) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x141003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x5, 0x54f, 0xa, 0x400, 0x1087181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x23, 0x4, 0x200003fffffe, 0x384, 0xffffffeffffffffa, 0x0, 0x4000000, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x67aa4df3, 0x84}, 0xb, 0x3) r2 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) readv$auto(r2, &(0x7f0000000180)={&(0x7f0000000140), 0x9}, 0x4) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0xe) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rt6_stats\x00', 0x10081, 0x0) 3.500092197s ago: executing program 3 (id=576): fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) getpid() unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000300)="64074c974bc700bf3e0ea3cb2a0e6fb39becec71e3a4d0a56fd330f661933ddee8f7e24e910a635beff3ee8ee14b1c06ea42210c954dbb2646ec4926a181e72e60e162246177fab5b4ca997754a8c9cddab6d3c54cbfb66c3783772d50cc1e5778975d5b19cb2cf6de8f594e2311768d1b3d94adef00"/136, 0x40200}, 0x3) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x44098) r1 = socket(0x18, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x4004) r2 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x0, 0x4000000df, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) setsockopt$auto(0x3, 0x10000000084, 0x7e, 0x0, 0x7) r4 = fsmount$auto(0xffffffffffffffff, 0xfff, 0x7) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) setsockopt$auto(r2, 0x10000000084, 0x23, 0x0, 0x8) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x4000000) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=0x30, 0x10001, 0x8}) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) open(&(0x7f0000000080)='./cgroup\x00', 0x101000, 0x0) socket(0x1d, 0x3, 0x1) setsockopt$auto(r3, 0xfffffffe, 0x105, 0x0, 0xaf8) 3.226868545s ago: executing program 1 (id=569): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x67c140, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x5c, 0xdf, 0xeb1, 0x401, 0x100000000008000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r1, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(r0, &(0x7f0000000a80)={0x0, 0xffff}, 0x8) epoll_create$auto(0x7) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x450000, 0x0) 2.15059361s ago: executing program 3 (id=570): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto(0x3, 0x40081271, 0x38) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8bfb8d1ffa178e0f324273421083410618838dc3"}) quotactl_fd$auto(0xffffffffffffffff, 0x4, r2, 0x0) setpgid$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(r3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0xffffffffbffffff9, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) epoll_ctl$auto_EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4, 0x3}) write$auto(0x3, 0x0, 0xfdef) 2.149684158s ago: executing program 1 (id=579): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x10, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x2, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) mmap$auto(0x2, 0x207, 0x7, 0x80000011, r1, 0xfffffffffffffff8) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon28\x00', 0x101000, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x200b8, 0x0, &(0x7f00000007c0)={{0x2, 0xee01, 0x0, 0x5, 0x6, 0x1, 0x5}, 0x502, 0x5, 0x0, 0x467, @raw=0x9, @raw=0xc, 0x7, 0x0, &(0x7f0000000540)="cf796bac33e50ef646b5c94256be85e94833a0bcf2346a0b01999bc9177cdf8f39cf60440eeca77358234d4a1f40f05c9a28c2872717452b8ddd190807df4882205c2295206215ebaa946bd9636c71b3e51b35afb2d3a705265d2820d8b8adee2448eb9bb546e2cd5a2b0c8873e51a07a022a3477c1a66cfb1bd10d140e052a3115757ca537ee690c197b90096c919b92823cb0cb4d0ecd4a895d993973b81501b4fe39b7605583ffb04181baa61e0a7a7", &(0x7f0000000600)="da6ef5fd9c3b334e61bf88b0ce4475425e4c78c1532a57ca2d737bad4df767de6c84f3a5adbd94e6bd20015d54d39d0019a9522e86313eb4c2273952e06dd291460abd4100d76b652108aeb9efd5817d5adb424af07a9e8d81d19f926a506a19edc2a93bbf45fb1ce24d1693a4cb4711ffcddb94e101deca6e964e2e3a575c42c47cceab038d0ad709e0eb3c42b922841d942da7d4f64b903c82b56122e0750865b8f4c0b251ca40ce625e2ea94ed4932ef145bdd0028e58433fc46a48ddf37cf30d22d693651b3a1427b5e4a75d2c3f1403e30f82596edb81c57f11390b0fe79bee3ce85ca8875f71c2a267c2b440dc99d0a6ff"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r4, 0x6c, 0x40000000, 0xfffffffffffffffe, 0x0) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r5, 0x0, 0x39b8) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) ioctl$auto(0xffffffffffffffff, 0x5602, 0x1) mmap$auto(0x0, 0xc, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4, 0x3, 0x20eb1, 0x40000000000a5, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x40000000001, 0x0, 0xa, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_GOV_NAME={0x5, 0xd, ','}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x19, 0x607dfdd9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) 2.148792786s ago: executing program 2 (id=571): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x74fd02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:01/options\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x7fffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="13002ebd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0400d100"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d0}, 0xc000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) shmctl$auto_SHM_LOCK(0x9, 0xb, &(0x7f0000001400)={{0x7, 0xee00, 0xee00, 0x6, 0x5a, 0x8, 0x5}, 0x0, 0x4, 0x6, 0x7, @raw=0x8, @inferred=0xffffffffffffffff, 0xb, 0x0, &(0x7f0000000380)="15171d3f1d172fd9adbd8e61f62cc2aed3778c6c7ff5fdfb43e28862c6a9619bb51a41c08c32efb0eef4c9a78cb0b30ff3de481d916612ff5e314af60ed809edcc310f95683a0fc5c57ee73b6c0c3fd8b3a03b826d1ffa204005b8dbed775f38a25766", &(0x7f0000000400)="6c38e4c1ce4bb92c3ef6adb2a4a221618ed3c3d453dc83444b9e82304b334faf1ba6320c4b267b238536974ebd2d7a4a0d01e38c01966c07b298895a0812ce8b0533c91b70b42a7134685604869c68ae00db6bde9b4d6687beaa883e941f457756d67e7e64864840b7ef3311a681abc3ea7e4b8170a4f61f54ec98c7b7995c748cd169e8d2f9a7e7cae4d135cd3f4454df424c12bbf422d29cb7ba4b370c3bbd653ac9e8e8b2af45873f43efb04f8c79a9eedd6034170e8593be7a2b5baa7d2c29f029608eb9ab42200f4871ea60ad03eb8361d8d7c01c9a7b5d63700996ed8bc82b1fdc0caa8b59db469c15cddf0c618c9922e36750fe7b9a02eceaa4359ccc269b5ab5938083547550d724e9efd01fafe54bfb55947ebe94e99189d5a38d1567150d72af853693ba1f134b7c36662546d1b828b930b87fcc5286dd6ff16decc14f0c84b36e2036efe912bd5187baa0c0cfcd84cf0c1a08f58bad1fc8e3caec58acdb4186ee38c5d5e1ae9e901988c154cfc1bc114171361b69b90442e93a09a5b9b52e31bf72d553cc685a1ee5f0a1029d4e02cf1132f3927b3d31a4ac9e9f8f2137715990c536c26a074a9af06206c4f4dafe4215eecbab148cd086f7445ea2663f2276dcf8c8509036b9a9bfc546e0454057bf44ba4812590468ca0f8893bf3beb59e68112fcbe047f812d226786ace047057d852288263f5cb4320cfd24916546df71c9462a3e49d6637711b592ca22de3d3ef6472cb61006f166aa7c020f60d43fc4fd202e71a3dc6fd2f235f32866743ebda6940f9da8ec445a119ea1340b963610f59cc5bea5052619f25e8ce7e290123c8f5c9895288c6924305727d9a5909bd0883959fea23d51c1e94558c01c812f1e093384645811f9d1dfc9a46787dc0ce38c64f66db2b77631bc33480b8946b7c49dc6256edc27706dec71f6d5ccb8beb7f983665ce980c4ce0c5b9f7bfbffd2bfbf1884e04aa89c69df68b8dd42733e858b55a6badf26335132ba2fdceee8b0c66cfb4cb4e857ed5306345117492d1250662c852de38ed2a70f6367d50c4da64d0954afb3784fb68e69e0cdc175c82fb82dcaa9c8692e0d03bf86a6126ec67bf7804edae8b975320ef53ddf82f3836df7e938683bfe82f05214ad67857138ab00e1989c8cd413e505c07efd1f474381e848ff6f553abdb92367732a3a57eefe860e7037c7ab8faa5bb5bf852842972493bfe4d1e96c4c7559f44f070d24a0e62f4f46cd42902c13f54fffac6ecd8f30b4559deda377a38d3037040f751faf953d9b0c3149f39027689ea9f598170ef925e5d4b60f819a78f8278d31c5a35088cbd20179f2090849a899f9b44c573d85c1f885ee658fe939b6f2a0bd889eff8480f7c2710f74e3691c8c3b60e8921c197038424f191d4376d344a836ee664bfc24835abe006a15337f46aff3880c7ea63713401619bbc3e9a7f06fa4c19b740b44a6f976be5539b504471e290c52903d57ef489e6a1e731ef1d33b1e24c34a43b2b1324ac140664d00daa86da371ca1f2c13dd56a00b5641086d472bdd664cc1060ad126aeb2eef0c6218b0490813660c7cd39af809d0e07bb114789a7067fd51adaec9ae2ef5eb320d5f65f68e16465e4507eb8711e00ff062a432713e30b4cd648643a9590bcfe9fced9391b0b56c08ad960cbd64f19a91ac62b91d8282a4a89817d69de9beabea8504f67d6563f2110042b001c305bca32edf1b9d0cd875b8ef47ce9467789ba187f96084464abe310e5ee2f23c7ea152550d446ea2e49e1b7365eb12b408eb063443a7d02a72503f5a8eab6a7812ee43fdbe52bee87df3d664f972061c2572dc80fa94de735daf9969a4cb455e5888be7be77fa17f40356a9523bfd87c20cc6252525536752d59ba9de365f2e50130e5c64417d7af017182981c291cfefc2e5aae83b08a1a69605eed1b4998fddbff1af4dc79e7357fc2de016a82269f5cf1dfcf9f0ca7c2a7477bf5343289864dfb1c7cd3d7cd0a08d64477cec0a8d850406bf8428636f5664f495d6b8ba755249e06512f91390090addcffb11287666fa755eda4b53d4704cbd0a6d5366d62b1144b2f8585c8b773c6f7057d26d91494350193299608660fd3cb12ce12061e904b9f21d8f0b28f4fae87f1c163722b3ee52b4cf466c5ef8286fc68bec6d32c6b987d7f0760021532ff1d5f721dcbfafcad67d398f31832b0ca036eb3dfcaf4afb0d1f69cd32ebe7b95af1590b5b28384ea417231f5f8d340d738feca1551aca39df0bcd5b13b9b34ff91e049d37c9438393540c57ca8af8974f2b6997db4c92d969d51a8dfca415b1dbabe74773efc992c339cd76d3f00494531c29b41241dc14c1f03718158dc76d2628f29d0569ffb1df8b6f3be0ed9bc0ba7725d28c15e3c60d7306b005cabc186bff67fc676c63431001f1178a94c76ad1aa09ab91c6846db687a663f35a54466798f608365535de311aa958c03ef0dd20bfee10438c9148497b5d59ac4492add485156776b01de8a488cb57aa177eb585c2e0e8ec873c5c0919df601f958842b1f144f5cb081d8462d727574d57607440f501f73e0c1b79fdc36ff260ff0a879b94b2d484733805138db572119797cac93fdf882f23134e74f5ec6a098ed615c5aaee9dcd96a97a9c24464b5ebbdfb645a108bb44b8f728c36e3a3746516a36fd9fc289f89da4c0a2797f6875327e0f4876f89c9c5877547982b1c88dc8f45b3ea658263cd54ea33ae6168a7f67636217045f52cc567c0d0e43cdedb5d105b3e93b39b6a17cd7c871f6ae0f51ab61c1073db4018b442b55f25dc88f8be190f44ae7522c148795a269b07771e01ececb06badc1fa19a35e6a6ff57262961cb54249cacf89dc8919707cea3c1c803a98642aa3dd0dcc9fafe4db681dfe8b4215c8481d3085e5281b2bbe36532358fe1464d1f44aacbf61a61375b3083e3c593cfe597c86e8887506b932f5cd079c0fd4738c876d3366e78f2f7311cc09a05917f49e65617abe2126602433c58c801b746dc50975bcf935030528d9b466cb2ead08c3cc3e57af483cea5fdfd6cba715e0a6de9dcbf394399b2df0b46b1535cebd901a18254c4d5a71c6c9ca11056c1d567eb2a47ae41070e2dae07422a4433b75d801ca1971b0fda0f621a9b9778ae6854df52d315033455409e8c84abb3675d3c6cef8427f055d6ef8fc0d39c808f76e311749c656df19c5693a1c88cffa78cf4f4f858e188a04c1572163a3814c42186cc496f380e818f9e0b0e7ea98c841b1486a9a6a43c3f0c0a003ece0c73af1ef3068e2c64cee3c037396147588c89d549de44277a0001d44b7be1b3f1c1d4a2b48fd3a70bfa1acf9ae7f18808140b6dd1cc4e2fed8454561c7ac388c7d819bb17422ace429ee73e1b7fe2a45bed5144683721456263ec18b20879e5e89ecd272ac58d3401f1966e809114ef5e6bc5f9fa9f20be60327248ac40957d5748eb27b519e02ab177d7241b115806aa9f2dd79a11d9c71544ea81ab52f452a1e523eafcfe89d7e65013389e7e9c52e1e9e2e566f3a2dbcbb3a8f5f7ba1ef4f9dd3177a6b3658b218067a950724089616474ebb48a699ad93bbb95d63da92c48f46209a4f9534a243705ae5b593f04ef0919780ac1060011b5e54a0095ba1dcf55ed4522513aaa32e96895ff68c9ce59ee04a369db59ba41ec64852ae7b0d227765b54db04ba63c91535e77a4ad307dd528d29c7513bcc45d48cb1d7688ab3510cbd92b07b0a1e0bb77e52a4d3fca2717bf9753f9915322d951f9afafee415d9ebcf9791887bcb11587e4e4f0e38fdc9ad319c0cc28efcbd88420102afede5681f680c31c215f3f4cfab643fde5c56185dda6b709b6ff7d593893d275f4eb0cfac5673b4eba83497a9941bd438ed3bbf53cff37639c26e52dbd3e1dd9b7c080d5348ed524fd061150f4c5ad50300cf4855c90b784835b94ff7278315ec1351df233adbd6ded217dce04ae944dd7fd3707bacbf8ac09beb663412151076f4d67c9d726e585c951b03460b26e98d1966d137b32ab211d6629b87bf5824c03b654ee964e8b4dd77bf273388bb18cbaf3dd2ce034f48d45c9ceb6a624b5991840c1ba27413f511c074dac6632abde6e7333fd627d2185a22af5a4bc38952e3a10815209aec7ccdc57a01105557d35b463da262c01876d5b0f6cc122cc9ca31c129be9d50e62be0699af7d758dce8f438f6f9748d39d980f203774825c7de0367232e3118f2ad9b6ab295bdd2a5bc0904a99e20f0bfaad5310a9884c146234e1ed5d98c7afab9046ec360e8495373f28bda73d34c428d720e31948757f99a6a815818337c7e245973e631261b43956df3bef00cfad5edafa6e75bc762f53c383020b89465a9be1397823b7a6cb093acc8d5c05f82d862fa3861ceac3b03e00781124403ae59dd189cf8e202310fca644a9ccac2d418721e7851fae3c85ff9c2f7f73234d8a7499b1f81d4f118bea499957415351a7fd5fb11d229c01064bf7704b6882d1b4a2453055498c3e0c3f11bb1faf61ac403c7d588076666967f3e842e6db4fdb79c1d3139790c02faa7149e389e7c4cc6173867adaf6e83892f4573a78a02b7063db5e49efdbaf69bc99adba5d89f28a6588bc3cd9847b557cca4a11edd946eb8824726a1426216d211555c4be7830b2986bc47002b4ca2ea4c0360d7f4f9dce07e05a36603003fec97d7f7c199b6f39eed1a9350487abb6343a2e31ec36a4780afc095e43d91f0e2372e2974ef748888dce28081ea5d0e5c4a4b0fb5d629084dd528335b4d701a061007e1d7c9680d0e26a213d2ebef0a8647fcdeb62abf049daaf74436543144cd0c3d78956873def36267e48786b6e6062934986f111187a473db6a16151835e7faf1d8ddd5ed3b57ce5cfbb5a0dc581b05832c81ffe35b0279e13f94b03aef21ae4beec1003cb74dff7179cd24e36e4d543898aa5441f160bb28f9db8875d2ad46152ca6e6602a891e97d793f9487e80eeac3ce3bbf939142226513dcfa89c0c2a28eadec04055872f57f81d6d558fe09d4316860984d3f2556726e1f703a47fd2403c57d1688616b9fef7a6de4c2606cb9a3e1befcacee54c888545e6054d60204ca68dbde35b062a85f2a07dc2533706854cff4e7cee8241e05144e2d2a762cf3cd6ea29a9754bda473765f0d5c713a17b8839effde58b328015fa03120b4d1cb5f09ca637bad98a5a9d2c921c943a09456d994efcd987b276ff66c201239699d6fd6e30719460066d14cce5c15338c70173eb22d89c9535e6f8f397a30e67e669cdc94bc1b87374985a908e93024f1a7043e6f435155e969b90fba215fc2df1edce0dc08a5b7035b73acb054886366dbe19e32f147c75ae729c2b2bbd2941710a5d37dad5be3ddcf8ae58a4353e1c4baf575792bef7f2a4609072296f5037f43b7bb503564aeb2abc14d5507a8cd4c445e7c65a886ec4cb9d9df560d4e7efa1a63f17ba177127710f561d8d9c5c1904c16b84222b9cdd4e512635039394658c63d033835aa5753f89e17c9184bcf3663014cae40589f3507dad3a662fc15fea983c21efe39cd2a6c5d05d75bf764ef0ffd3b307edb76a9a203fdbbd82ffcb6833b95d0dd684b56a32f8e9c4d15d6de1a98bd39738be6a883ac9623cffc8643fa9d83c532fe6c33849b8e4e3a2295564c41ff889505f636bb9ceafc2d3610e8c9306ab5ad22878c57b2216b1881c25618a5ddf1e472ecf4ca0ce4fe33a2f8128469ceed16b6c4ad1a9273c0883d82ec59e8c5d1b35d7"}) quotactl_fd$auto(0xffffffffffffffff, 0xfffffff7, r5, &(0x7f0000001480)="5e939457ed673a705894490bf7631d2eb55698bda4708de6d0f6f4b6061423989c4b2228d3eaf1ecce2685118d5ba231973dde54d69cde89fb10f42c944dc24d26c529a98742eea02cc578b2cb35466e948a927332a8a3e9dab8574cfadc656bd88035038f33a288e5336a1b43f248238c868c368cf929b32becbec9e85b2b0bb763c21f969b978d919662f4") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0xc3002, 0x0) r6 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) io_getevents$auto(0x26, 0xffffffff, 0x4, 0x0, 0xfffffffffffffffd) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x80000000, 0x0, 0x22, 0xb}, 0x1}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c009900f300000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x26044000}, 0x48000) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x240048c0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x902, 0x0, 0x1, 0x0, 0x100000000, 0x3}, 0x7}, 0x60798e89, 0x7fffffff) shutdown$auto(0x200000003, 0x3d) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x2080000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 1.933363169s ago: executing program 2 (id=572): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x8910, 0x0) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b67, r3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e1, 0x91) 1.355194087s ago: executing program 1 (id=573): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto(0x3, 0x40081271, 0x38) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8bfb8d1ffa178e0f324273421083410618838dc3"}) quotactl_fd$auto(0xffffffffffffffff, 0x4, r2, 0x0) setpgid$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(r3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0xffffffffbffffff9, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) epoll_ctl$auto_EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4, 0x3}) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0x3) socket$nl_generic(0x10, 0x3, 0x10) 471.933101ms ago: executing program 1 (id=574): mmap$auto(0x0, 0x400008, 0x8000000000000001, 0x9b72, 0xffffffffffffffff, 0xffffffffffffffff) r0 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS2(r0, 0xc2604111, &(0x7f0000000300)={0x4, [{[0x10000, 0x80, 0xac7, 0x7, 0x10000, 0x10, 0x857c, 0x4]}, {[0x5, 0x0, 0x8001, 0x6, 0x4, 0x0, 0x0, 0x8000]}, {[0x3, 0x0, 0x8, 0xcf20, 0xffffff80, 0x2, 0xffffffff, 0x6]}], [{[0x0, 0x54b, 0x2, 0x3, 0x81, 0x8, 0x7, 0x4]}, {[0x40, 0x6, 0x43a, 0x0, 0x6, 0x0, 0x2, 0x4]}, {[0x9, 0x7, 0x5, 0x4, 0x1, 0x7, 0x3, 0x4]}, {[0x8000000, 0x6, 0x3, 0x9, 0xfffffffe, 0x80, 0x0, 0xff]}, {[0xc, 0x5, 0x2, 0x8, 0xfffffffe, 0xd, 0x101, 0x480000]}], [{0x6, 0x0, 0x0, 0x1}, {0xffff, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x28, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x10, 0x1, 0x0, 0x1, 0x1}, {0xd5b, 0x0, 0x1, 0x0, 0x1}, {0xf, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x1}, {0x0, 0x6}, {0x3, 0x7a0, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x5511, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x15e5, 0x0, 0x0, 0x1, 0x0, 0x1}], [{0xe1, 0x8, 0x0, 0x1, 0x1}, {0x5, 0x1ff, 0x1, 0x0, 0x0, 0x1}, {0x8001, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x4}, {0x5, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x33, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x80000001, 0x1, 0x0, 0x1}, {0x4d, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x2, 0x0, 0x1, 0x1, 0x1}], 0x0, 0xffffffff, 0x9, 0xfe, 0x1, 0x9, 0x7c8f, "afbdf3c4cee1c748c566ba00b418dbdd", "afa8be5074d5063d3f323cefe91860a412de14f0b2fb1510aee34aa82fe35cf6cd07e2f2c09f169ef38c6bb8ea53a193"}) (async, rerun: 32) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='\x00\x00\x00', 0x3) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) (async) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xe, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0xa, 0x2, 0x73) (async) r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) socket(0x1, 0x1, 0x0) (async) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) (async) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSSuccessCount\x00', 0x800, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r5, 0x0, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x1ac}}, 0x40000) (async) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000000)={0x230, 0xff, 0x0, @inferred=r4}}) (async) r7 = socket(0xa, 0x3, 0x3a) setsockopt$auto_SO_ZEROCOPY(r7, 0xff, 0x3c, 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) setsockopt$auto_SO_MARK(r2, 0x7, 0x24, 0x0, 0x2) (rerun: 64) 414.03758ms ago: executing program 3 (id=575): fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) getpid() unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000300)="64074c974bc700bf3e0ea3cb2a0e6fb39becec71e3a4d0a56fd330f661933ddee8f7e24e910a635beff3ee8ee14b1c06ea42210c954dbb2646ec4926a181e72e60e162246177fab5b4ca997754a8c9cddab6d3c54cbfb66c3783772d50cc1e5778975d5b19cb2cf6de8f594e2311768d1b3d94adef00"/136, 0x40200}, 0x3) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x44098) r1 = socket(0x18, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x4004) r2 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x0, 0x4000000df, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x7e, 0x0, 0x7) r4 = fsmount$auto(0xffffffffffffffff, 0xfff, 0x7) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) setsockopt$auto(r2, 0x10000000084, 0x23, 0x0, 0x8) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x4000000) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=0x30, 0x10001, 0x8}) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) open(&(0x7f0000000080)='./cgroup\x00', 0x101000, 0x0) socket(0x1d, 0x3, 0x1) setsockopt$auto(r3, 0xfffffffe, 0x105, 0x0, 0xaf8) 347.523645ms ago: executing program 0 (id=577): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/state\x00', 0x103, 0x0) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x10e00, 0x0) flistxattr$auto(r0, &(0x7f0000000040)='/dev/v4l-subdev5\x00', 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/v4l-subdev5\x00', 0x149000, 0x0) socket(0x2, 0xe, 0x1) ioctl$auto(r1, 0xc0445624, r1) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r4 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000440)={@siginfo_0_0={0x3, 0x7, 0x0, @_timer={0x0, 0x81, @sival_int, 0x9}}}, 0x5, &(0x7f00000005c0)={{0xfffffffffffff001, 0x8}, {0x5, 0x7}, 0x7fffffffffffffff, 0x10000, 0x5, 0x2, 0xc00000000, 0x3, 0xb9, 0x9, 0x6, 0xc, 0x0, 0x6, 0xf4, 0x3}) move_pages$auto(r4, 0xab6, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841ee8b23bd6328ec1f44d0e7dbd1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a366afe742a68adc370cc5ed04ed96e11d8e2e1bea6d96ed39a2ad189a650f927b6d61eca01710abc718fa", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r6 = open_by_handle_at$auto(r3, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) setsockopt$auto(r6, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0xfffffffffffffffa, 0x400008, 0xdf, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf257e000000000066004e21000000002680000002000400000000000200000000000000010009000000000001000400000000000200070000000000980006000000000014010f000000000007001f5198dea666bad033b7aea5d7529adf1ae5607ef3d022c60a57cd1649952c00000080004dec6ee46088e64587adba9ba7537f79f056fbd60490f11a3498560bfa783badf6fa39e3aa9815705e629beb9573271a53f5c4ee3859bf0313d7dad665a019c4e908768bb5b896533bbd3b39e4768150289646864a302e8ded90a5b83ada85575e6657023fb727d3723ff97af53540e2fbc15e85a0c6a5644432b997ba3bdc423b0be181bf0d501cf098551e7b2ce99ac721bf9145ebc91fe7c9230b30f9b88ac5b2c404ddfac531ea9fcaf6d514daf8c13a9f382059488c3280a13754303b49d3eddff53520086a38cbb1075e09f556c208c26f727717e52ad91b929b37df820ffca5a077087bc540d3c30fa84b5986b17605e72c7af63bd4264355ec1e043e6ae397fd5b925bc6ee277f7e42b305fbe861e8e9974efb062206bd7fef4b13f19f926c090b1367e4599ea549d1e97c1c2b214d06c5de3e7dc0bae99b9030f72ae011f303fa7ea798a612fd252f9e9c238f07ccc755d8c4aff22798a08e567e0b8f3975fc1b30522f1b82ed37fecc8927a2f8265cb2423f4272359a5b097f54bdb65f51f0911ca880641493cce6f3f00edfefe3d7f007bc5c57214dde959740b9e0a70b28d191e10eb5c3eccfdf045407c80e026f4e9fe766eca822b77df002210db69f60480ae2e21fced2bf22dde077e0ccbe2e05f58ba0db3d9f6469382574a23009202a928c2e7a67623eeeb3976036936871d6056bca11541ed5d795853e233149c9ea3e3d478b5e35cf5e551002a79ac8a33d81b60fde70ccbf125c4b4243160db218068b7a2db851b3dfad23f584b6db1b9ec1428635f27d4bb08cb9b0d4d9c725595fbd59622038dc6cb2f70282ae273c9927dfc884b8e99578c897e90ffeec2c4f3b1e4c5cadc23ff40dd06e618b0f798c0d4a87c7728de7b03a7a8021dcdbd1f4c8b29ea50d2130cf3099a8b37a4d894a5020bc583feaf86c00b8d917567b988f875af819935a325517e76850262d5558ff1fcf9f5b7b26a9645bb26d20104227757359a6e52317edbdd2fde26c3b3f26ee6e2714d9668cfafe1f1c83c24d7e3b55127b38315b1b9053d3ed9561c14e0cf3b173f89e739337a63e5d13fb97466b9b36556adb4af4e9b18d4778c369692333cb70c72d968aff999fe3f08690fdc345eceedb90782bc907b20d4a06867f2930ebb553494aeceabf2f33f1295753241986835af90226970a126a27d9c1f3a04f9b917fa57524fb70f161e619ab83cff4edceef04362c497dc4804af7e7837a4b4241521a2cb28a08fe7001ce941a8cf3f2a4266dbc5fd02c56a5a16fe2a0af334673588ea9b161c65b7ab9a67e4808f1e8c6cf55641a97082348e1e31ed07154364d1fb134e988d32277a2c5224985ab2e3b518c927af3338cfeab947dc38466b8e58f40402d97417a895d335dcd5ccf6ed33ba8a54c80ea0cfe0c66993e86f8b2699d860ff1b2d00db394a18a92e0ed026737e46d52978bae076c156be5e6530222fe8c93c8e4ecd29bfd1823b2730515eb3e99ecb867e0117fafafb495f34fe5c82c7af4e163ef7c543d5327b011b65e661db58838a0821f66c65a9b2d598fe497d778ced9bb1c48369c70a3ab32dd9626f0b575d47a0b7398fcaebce8048504cc3ebcc4498894bf079758aa008906c570f9a4ce0c5faefd8326dde933dccf7a2896a3b86ceb8add2b7f69943b006c8ca893916b156458c9dd28e1e21770e7ba6d7fb8ebdde22ff23346cd0f6d0c90a093fae2f128f759418402b13fae56d033f6adde7442b46db3aedb8665718b37055df3b0710f5e31ea2e04abbca71d7c8cc71325a1124d38c4245587ff29c5e0f1cbfdf7b865099a395dd9c2f7e29200bda2c2b20b17b7f33e1c277c57925b59aca80821a48085b7eab507385849a0e22c2ac4a526e7b786fd9442fd2df0eb05cb1df98795853536dc12b6fea234a4c32a57059049c0dedee032615da106c88fe54e73226cb88b4863c1f905dac6dffd4e5e53873f746e19ee631e8cab802ef174df5cb6e88e513aa10a0e1dd7d43075bc19b94491b9cb8fe1efac7d300e4c6253d42198c94f76fef50405405c348b9bfe0c4e09b6668655baaff6d464b20c5db5aa72b6e5345aa6af3c2b2e508ab94ed2f3ae27947c30f6c9435396cccca249745963693d456f0b13551ebd2714a5d2aa5eec9d61d2d6b9aba3d482f4c49906435b1d783f381a7180a5077358717dfc2e117d31e141382b11db23fb0c7d8ec13b0e2e542cfe4b44f2e9b0a440dcf9143f3be9494f3bc2004047e86405b4190fb667d269f2a7d1c48509fbdc3bb3e99d6f68a309ffff000006007347b9c70c7a48913b05957bbb9826fc681df1b98ace4a88eebe405b8400e41aa87a86c1aca27323448d0dfed2b28ecfa7d65c7264311080712e8fa3874f7ee38b02120b885602b84d954479702f51ac45a331dfe2ef76c45014c84415189885b9c9613c2acb7a41c6ace876ee5af4fc50407fc3361a128a2e59e60f11b47277c9a5f3cbe0424d3886a3a3a0f40c5ef46d2b331ca3d83f2f444bc6998d06926c6a1cb162ef14fb7ab2ee731fdc7f0fc553a3c07226a2160d350ed7f30000360103e17d2b53cce133a6674f5b8600a49a8403c6bdfd3e0c464ed8a2fe254a5939fb09cb1dc350c9230c189febda65557207893e11deb595e622008d945c914692afa24b99bf04b003881b9fc35a628e8a1f7dd36490920c7ce2dbffcf61124f39b5329db3d8f56f48af0b3b31b588771b14d045e0ea69404cf54596db22abd3d35b4f3d484faa4ac1eca1bbbe82ed861aee4715f465c010e98899929b521dea88b03c97f8d005000000987004d3b262d91b7e4b6d005ebb201517953c89225c186080b4836ccb358d624f4b134a11c7ec39e49d80d2c40312c250508a0e8c0969f1fe6830e50c3f2623b31882a5409300737b3fe096e8da90fa050194db696c605c6f82e18f9fc334aa232483df49ed13478a9bd48a"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r5, @ANYRESOCT=r7], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) 110.49865ms ago: executing program 2 (id=578): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) unshare$auto(0x40000080) (async) socket(0x15, 0x4, 0x0) (async) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0xf00, 0x1, 0x101, 0x0, 0x0}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) mmap$auto(0x4, 0x6, 0x1f50, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) tgkill$auto(0x0, 0x1, 0x1) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) r5 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r6 = ioctl$auto_TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000240)=0x2) ioctl$auto_UI_SET_MSCBIT(r6, 0x40045568, &(0x7f0000000280)=0x5) (async) mmap$auto(0x0, 0x7, 0x3, 0xeb5, r5, 0x8000) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) (async) read$auto(r4, 0x0, 0x0) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20002, 0x0) writev$auto(r7, 0x0, 0x3) r8 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r8, 0xc004743e, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) sendfile$auto(r9, r9, 0x0, 0x71) 13.023718ms ago: executing program 1 (id=580): r0 = openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x2020, 0x0) socketpair$auto(0x6, 0x8, 0x8, &(0x7f00000000c0)=0x5) fadvise64$auto(r0, 0x9, 0x8000000000000000, 0x20af2b8f) (async) fadvise64$auto(r0, 0x9, 0x8000000000000000, 0x20af2b8f) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) shutdown$auto(0x200000003, 0x0) (async) shutdown$auto(0x200000003, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) mount$auto(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) openat2$dir(0xffffff9c, 0x0, &(0x7f00000002c0)={0x400000, 0x71fae78b53f8a505, 0x20}, 0x18) umount2$auto(&(0x7f0000000040)='.\x00', 0x5) 0s ago: executing program 1 (id=581): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000340)={0x18, 0x0, 0x4, 0x1, 0x8, 0x1, 0x0, 0x6, 0x5, 0x1fd, 0xffff7ffe, 0x80000000, 0x7ff, 0x7, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) r4 = clone3$auto(&(0x7f0000000140)={0x6, 0xb333, 0x3e45, 0x8, 0x3, 0x7, 0x2, 0x6, 0x0, 0x80000000, 0x8}, 0x80000000) shmctl$auto_IPC_INFO(0x1000, 0x3, &(0x7f0000000280)={{0x200, 0xee01, 0x0, 0x6, 0x3, 0x0, 0xf}, 0x6, 0x3bd, 0xcfb00000, 0x7fffffffffffffff, @raw=0x2, @raw=0x80000000, 0xa280, 0x0, &(0x7f00000001c0)="b84cb1f966c40f29877e154924e57be4219e478a23cd58036304cfae7b9b484c8a65faf5fe8589335cff2c170af51e52b1e94ee96de18d4fda374a8f1bc6d841f7b0e0c3cc3b6c5699378329d461a0d6dbfa43aa2c", &(0x7f0000000240)="7d8b3650ed29301d985c21479eceb8ea2d0ab09ae46297a0fb3774ddc71abf53812068d07ecdfe"}) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x200, &(0x7f0000000380)={@siginfo_0_0={0x2, 0x76, 0x3, @_sigchld={r4, r5, 0x7, 0xf, 0x101}}}, 0xfffffffe) fsconfig$auto(r0, 0xffff, &(0x7f0000000300)='/dev/sda1\x00', &(0x7f0000000400)="1b8128d5cc5345b205e2b5ba12994470", 0xee00) bind$auto(r3, &(0x7f0000000040)=@generic={0x26, "3e3284c31ab939b1082f015635ba"}, 0xfffffffb) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20001, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r6, 0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 74.350316][ T5813] cgroup: Unknown subsys name 'net' [ 74.520430][ T5813] cgroup: Unknown subsys name 'cpuset' [ 74.529146][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.980678][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.068454][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.087862][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.095598][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.104157][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.112444][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.136775][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.197719][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.205889][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.217976][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.225661][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.233331][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.241315][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.257936][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.265565][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.266574][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.273689][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.289754][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.297250][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.308324][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.317498][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.698215][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 78.828661][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 78.948249][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 79.011809][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.019152][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.026515][ T5822] bridge_slave_0: entered allmulticast mode [ 79.033793][ T5822] bridge_slave_0: entered promiscuous mode [ 79.042345][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 79.070504][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.077881][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.085030][ T5822] bridge_slave_1: entered allmulticast mode [ 79.092221][ T5822] bridge_slave_1: entered promiscuous mode [ 79.159446][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.166604][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.174342][ T5826] bridge_slave_0: entered allmulticast mode [ 79.181461][ T5826] bridge_slave_0: entered promiscuous mode [ 79.196159][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.225591][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.232984][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.240192][ T5826] bridge_slave_1: entered allmulticast mode [ 79.248358][ T5826] bridge_slave_1: entered promiscuous mode [ 79.282975][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.343008][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.352892][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.360351][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.367692][ T5832] bridge_slave_0: entered allmulticast mode [ 79.374622][ T5832] bridge_slave_0: entered promiscuous mode [ 79.394785][ T5822] team0: Port device team_slave_0 added [ 79.414448][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.424587][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.431908][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.439784][ T5832] bridge_slave_1: entered allmulticast mode [ 79.446732][ T5832] bridge_slave_1: entered promiscuous mode [ 79.454964][ T5822] team0: Port device team_slave_1 added [ 79.472195][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.479584][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.487001][ T5831] bridge_slave_0: entered allmulticast mode [ 79.494618][ T5831] bridge_slave_0: entered promiscuous mode [ 79.548712][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.555667][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.582515][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.594179][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.601774][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.609173][ T5831] bridge_slave_1: entered allmulticast mode [ 79.616346][ T5831] bridge_slave_1: entered promiscuous mode [ 79.634381][ T5826] team0: Port device team_slave_0 added [ 79.651871][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.658930][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.685294][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.711538][ T5826] team0: Port device team_slave_1 added [ 79.719896][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.739689][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.762069][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.785575][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.840538][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.848007][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.874132][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.897496][ T5832] team0: Port device team_slave_0 added [ 79.908721][ T5822] hsr_slave_0: entered promiscuous mode [ 79.914988][ T5822] hsr_slave_1: entered promiscuous mode [ 79.936498][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.943727][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.969750][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.982896][ T5832] team0: Port device team_slave_1 added [ 79.991190][ T5831] team0: Port device team_slave_0 added [ 80.026207][ T5831] team0: Port device team_slave_1 added [ 80.059600][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.066558][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.093618][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.116809][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.123871][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.150303][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.168651][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.175602][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.201807][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.223870][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.230911][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.257333][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.268432][ T5833] Bluetooth: hci0: command tx timeout [ 80.315710][ T5826] hsr_slave_0: entered promiscuous mode [ 80.317356][ T5833] Bluetooth: hci2: command tx timeout [ 80.322449][ T5825] Bluetooth: hci1: command tx timeout [ 80.333513][ T5826] hsr_slave_1: entered promiscuous mode [ 80.339998][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 80.345773][ T5826] Cannot create hsr debugfs directory [ 80.397255][ T5825] Bluetooth: hci3: command tx timeout [ 80.414983][ T5831] hsr_slave_0: entered promiscuous mode [ 80.421681][ T5831] hsr_slave_1: entered promiscuous mode [ 80.427872][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 80.433598][ T5831] Cannot create hsr debugfs directory [ 80.514245][ T5832] hsr_slave_0: entered promiscuous mode [ 80.520524][ T5832] hsr_slave_1: entered promiscuous mode [ 80.526605][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 80.532387][ T5832] Cannot create hsr debugfs directory [ 80.783814][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.822460][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.832997][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.865095][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.942687][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.954862][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.968822][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.982345][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.068757][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.080742][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.092728][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.107511][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.176428][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.199530][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.211211][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.222261][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.322585][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.342827][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.379610][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.418575][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.425772][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.435412][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.442606][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.463956][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.486711][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.493968][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.518374][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.525618][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.564612][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.574576][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.609597][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.649608][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.656724][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.676767][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.683939][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.718745][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.764430][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.771601][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.825128][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.832390][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.119096][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.224001][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.301744][ T5822] veth0_vlan: entered promiscuous mode [ 82.317707][ T5825] Bluetooth: hci0: command tx timeout [ 82.343564][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.362424][ T5822] veth1_vlan: entered promiscuous mode [ 82.385412][ T5826] veth0_vlan: entered promiscuous mode [ 82.399689][ T5825] Bluetooth: hci1: command tx timeout [ 82.400762][ T5833] Bluetooth: hci2: command tx timeout [ 82.411715][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.430456][ T5826] veth1_vlan: entered promiscuous mode [ 82.477714][ T5833] Bluetooth: hci3: command tx timeout [ 82.489899][ T5822] veth0_macvtap: entered promiscuous mode [ 82.521762][ T5832] veth0_vlan: entered promiscuous mode [ 82.528332][ T5822] veth1_macvtap: entered promiscuous mode [ 82.543690][ T5826] veth0_macvtap: entered promiscuous mode [ 82.556273][ T5826] veth1_macvtap: entered promiscuous mode [ 82.576375][ T5831] veth0_vlan: entered promiscuous mode [ 82.587870][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.605493][ T5832] veth1_vlan: entered promiscuous mode [ 82.616341][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.632306][ T5831] veth1_vlan: entered promiscuous mode [ 82.655133][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.668169][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.689778][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.711444][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.721565][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.744317][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.761903][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.772233][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.796872][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.807882][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.826551][ T5831] veth0_macvtap: entered promiscuous mode [ 82.841373][ T5832] veth0_macvtap: entered promiscuous mode [ 82.875035][ T5831] veth1_macvtap: entered promiscuous mode [ 82.900688][ T5832] veth1_macvtap: entered promiscuous mode [ 82.949209][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.959655][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.975391][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.984191][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.985873][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.003152][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.051281][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.071009][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.092323][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.101164][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.120228][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.129685][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.142141][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.154491][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.157143][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.170595][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.212113][ T3069] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.249175][ T3069] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.249698][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.289042][ T3069] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.299249][ T3069] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.501703][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.519218][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.592423][ T5912] mmap: syz.0.1 (5912) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.607358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.620216][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.629152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.649093][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.740184][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.773243][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.207582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.302305][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.325176][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.398430][ T5833] Bluetooth: hci0: command tx timeout [ 84.479986][ T5833] Bluetooth: hci1: command tx timeout [ 84.479996][ T5825] Bluetooth: hci2: command tx timeout [ 84.564661][ T5922] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.567148][ T5825] Bluetooth: hci3: command tx timeout [ 84.597208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.039365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.299922][ T5947] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 85.697534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.228083][ T5965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11'. [ 86.288286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 86.297983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.497149][ T5825] Bluetooth: hci0: command tx timeout [ 86.557343][ T5825] Bluetooth: hci2: command tx timeout [ 86.562817][ T5833] Bluetooth: hci1: command tx timeout [ 86.637483][ T5825] Bluetooth: hci3: command tx timeout [ 86.905064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.147668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.758056][ T5985] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 88.379752][ T5994] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 88.447423][ T5997] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.014750][ T6032] vhci_hcd: invalid port number 255 [ 90.054815][ T6035] futex_wake_op: syz.2.21 tries to shift op by -2048; fix this program [ 90.124344][ T6035] futex_wake_op: syz.2.21 tries to shift op by -2048; fix this program [ 90.218102][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'. [ 90.389123][ T6045] input: jJǸ-¶š9ã%vø“û¨ as /devices/virtual/input/input5 [ 90.626507][ T6032] netlink: 342 bytes leftover after parsing attributes in process `syz.3.22'. [ 90.702028][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 90.723860][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 91.134685][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26'. [ 91.690945][ T6068] ubi0: attaching mtd0 [ 91.701270][ T6068] ubi0: scanning is finished [ 91.706492][ T6068] ubi0: empty MTD device detected [ 91.933987][ T24] cfg80211: failed to load regulatory.db [ 92.007367][ T6068] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 92.077254][ T6068] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 92.086123][ T6068] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 92.095148][ T6068] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 92.102697][ T6068] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 92.245267][ T6068] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 92.275510][ T6068] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 582721442 [ 92.332910][ T6068] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 92.347276][ T6070] ubi0: background thread "ubi_bgt0d" started, PID 6070 [ 94.185422][ T6111] Zero length message leads to an empty skb [ 94.302007][ T6113] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.399805][ T6119] nbd: socks must be embedded in a SOCK_ITEM attr [ 95.789186][ T6128] Console: switching to colour VGA+ 80x25 [ 97.331291][ T6144] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 97.457731][ T6158] FAULT_INJECTION: forcing a failure. [ 97.457731][ T6158] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.493289][ T6158] CPU: 1 UID: 0 PID: 6158 Comm: syz.1.53 Not tainted syzkaller #0 PREEMPT(full) [ 97.493325][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.493345][ T6158] Call Trace: [ 97.493354][ T6158] [ 97.493364][ T6158] dump_stack_lvl+0x16c/0x1f0 [ 97.493410][ T6158] should_fail_ex+0x512/0x640 [ 97.493453][ T6158] _copy_from_user+0x2e/0xd0 [ 97.493479][ T6158] do_sock_getsockopt+0x3ca/0x440 [ 97.493507][ T6158] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 97.493530][ T6158] ? __fget_files+0x204/0x3c0 [ 97.493575][ T6158] __sys_getsockopt+0x123/0x1b0 [ 97.493617][ T6158] __x64_sys_getsockopt+0xbd/0x160 [ 97.493651][ T6158] ? do_syscall_64+0x91/0xfa0 [ 97.493686][ T6158] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.493722][ T6158] do_syscall_64+0xcd/0xfa0 [ 97.493760][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.493785][ T6158] RIP: 0033:0x7fb473b8eec9 [ 97.493814][ T6158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.493838][ T6158] RSP: 002b:00007fb474983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 97.493863][ T6158] RAX: ffffffffffffffda RBX: 00007fb473de6090 RCX: 00007fb473b8eec9 [ 97.493880][ T6158] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000008 [ 97.493895][ T6158] RBP: 00007fb473c11f91 R08: 0000200000000080 R09: 0000000000000000 [ 97.493911][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.493926][ T6158] R13: 00007fb473de6128 R14: 00007fb473de6090 R15: 00007ffc2230a108 [ 97.493961][ T6158] [ 97.657117][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.930808][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 99.041804][ T6185] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 99.211795][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.52'. [ 99.511907][ T6191] FAULT_INJECTION: forcing a failure. [ 99.511907][ T6191] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.513596][ T6182] team0 (unregistering): Port device team_slave_0 removed [ 99.525506][ T6191] CPU: 1 UID: 0 PID: 6191 Comm: syz.1.54 Not tainted syzkaller #0 PREEMPT(full) [ 99.525541][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.525556][ T6191] Call Trace: [ 99.525564][ T6191] [ 99.525579][ T6191] dump_stack_lvl+0x16c/0x1f0 [ 99.525625][ T6191] should_fail_ex+0x512/0x640 [ 99.525668][ T6191] should_fail_alloc_page+0xe7/0x130 [ 99.525694][ T6191] prepare_alloc_pages+0x3c2/0x610 [ 99.525724][ T6191] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 99.525761][ T6191] ? __pfx_stack_trace_save+0x10/0x10 [ 99.525793][ T6191] ? stack_depot_save_flags+0x29/0x9c0 [ 99.525829][ T6191] ? find_held_lock+0x2b/0x80 [ 99.525865][ T6191] ? kasan_save_stack+0x42/0x60 [ 99.525897][ T6191] ? kasan_save_stack+0x33/0x60 [ 99.525939][ T6191] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.525972][ T6191] ? alloc_vmap_area+0x648/0x29e0 [ 99.526009][ T6191] ? __vmalloc_node_range_noprof+0x271/0x1480 [ 99.526037][ T6191] ? copy_process+0x2c77/0x76a0 [ 99.526075][ T6191] ? kernel_clone+0xfc/0x930 [ 99.526102][ T6191] ? __do_sys_clone+0xce/0x120 [ 99.526120][ T6191] ? do_syscall_64+0xcd/0xfa0 [ 99.526152][ T6191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.526191][ T6191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.526226][ T6191] ? policy_nodemask+0xea/0x4e0 [ 99.526252][ T6191] alloc_pages_mpol+0x1fb/0x550 [ 99.526279][ T6191] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 99.526313][ T6191] alloc_pages_noprof+0x131/0x390 [ 99.526338][ T6191] get_free_pages_noprof+0x10/0xb0 [ 99.526373][ T6191] kasan_populate_vmalloc+0x9f/0x2d0 [ 99.526407][ T6191] ? alloc_vmap_area+0x8b5/0x29e0 [ 99.526449][ T6191] alloc_vmap_area+0x960/0x29e0 [ 99.526500][ T6191] ? __pfx_alloc_vmap_area+0x10/0x10 [ 99.526546][ T6191] __get_vm_area_node+0x1ca/0x330 [ 99.526578][ T6191] __vmalloc_node_range_noprof+0x271/0x1480 [ 99.526605][ T6191] ? kernel_clone+0xfc/0x930 [ 99.526650][ T6191] ? kernel_clone+0xfc/0x930 [ 99.526694][ T6191] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.526728][ T6191] ? rcu_is_watching+0x12/0xc0 [ 99.526764][ T6191] ? kernel_clone+0xfc/0x930 [ 99.526803][ T6191] __vmalloc_node_noprof+0xad/0xf0 [ 99.526829][ T6191] ? kernel_clone+0xfc/0x930 [ 99.526868][ T6191] copy_process+0x2c77/0x76a0 [ 99.526925][ T6191] ? __pfx_copy_process+0x10/0x10 [ 99.526964][ T6191] ? futex_private_hash_put+0x176/0x300 [ 99.527010][ T6191] ? futex_private_hash_put+0x18a/0x300 [ 99.527057][ T6191] kernel_clone+0xfc/0x930 [ 99.527094][ T6191] ? __pfx_futex_wake+0x10/0x10 [ 99.527121][ T6191] ? __pfx_kernel_clone+0x10/0x10 [ 99.527176][ T6191] __do_sys_clone+0xce/0x120 [ 99.527198][ T6191] ? __pfx___do_sys_clone+0x10/0x10 [ 99.527235][ T6191] ? xfd_validate_state+0x61/0x180 [ 99.527261][ T6191] ? __pfx_ksys_write+0x10/0x10 [ 99.527304][ T6191] do_syscall_64+0xcd/0xfa0 [ 99.527341][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.527366][ T6191] RIP: 0033:0x7fb473b8eec9 [ 99.527386][ T6191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.527408][ T6191] RSP: 002b:00007fb4749a3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 99.527433][ T6191] RAX: ffffffffffffffda RBX: 00007fb473de5fa0 RCX: 00007fb473b8eec9 [ 99.527450][ T6191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000208000 [ 99.527466][ T6191] RBP: 00007fb473c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.527481][ T6191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 99.527495][ T6191] R13: 00007fb473de6038 R14: 00007fb473de5fa0 R15: 00007ffc2230a108 [ 99.527530][ T6191] [ 99.529143][ T6191] syz.1.54: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 99.667647][ T6194] netlink: 330 bytes leftover after parsing attributes in process `syz.1.54'. [ 99.674306][ T6191] ,cpuset= [ 99.685699][ T6182] team0 (unregistering): Port device team_slave_1 removed [ 99.695908][ T6191] /,mems_allowed=0-1 [ 99.932199][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.1.54 Not tainted syzkaller #0 PREEMPT(full) [ 99.932232][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.932247][ T6191] Call Trace: [ 99.932256][ T6191] [ 99.932266][ T6191] dump_stack_lvl+0x16c/0x1f0 [ 99.932304][ T6191] warn_alloc+0x248/0x3a0 [ 99.932334][ T6191] ? __pfx_warn_alloc+0x10/0x10 [ 99.932364][ T6191] ? kfree+0x2b8/0x6d0 [ 99.932385][ T6191] ? __get_vm_area_node+0x2cd/0x330 [ 99.932412][ T6191] ? __get_vm_area_node+0x2cd/0x330 [ 99.932433][ T6191] ? __get_vm_area_node+0x208/0x330 [ 99.932463][ T6191] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 99.932499][ T6191] ? kernel_clone+0xfc/0x930 [ 99.932541][ T6191] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.932573][ T6191] ? rcu_is_watching+0x12/0xc0 [ 99.932609][ T6191] ? kernel_clone+0xfc/0x930 [ 99.932643][ T6191] __vmalloc_node_noprof+0xad/0xf0 [ 99.932668][ T6191] ? kernel_clone+0xfc/0x930 [ 99.932707][ T6191] copy_process+0x2c77/0x76a0 [ 99.932758][ T6191] ? __pfx_copy_process+0x10/0x10 [ 99.932793][ T6191] ? futex_private_hash_put+0x176/0x300 [ 99.932843][ T6191] ? futex_private_hash_put+0x18a/0x300 [ 99.932886][ T6191] kernel_clone+0xfc/0x930 [ 99.932922][ T6191] ? __pfx_futex_wake+0x10/0x10 [ 99.932949][ T6191] ? __pfx_kernel_clone+0x10/0x10 [ 99.933003][ T6191] __do_sys_clone+0xce/0x120 [ 99.933025][ T6191] ? __pfx___do_sys_clone+0x10/0x10 [ 99.933063][ T6191] ? xfd_validate_state+0x61/0x180 [ 99.933088][ T6191] ? __pfx_ksys_write+0x10/0x10 [ 99.933130][ T6191] do_syscall_64+0xcd/0xfa0 [ 99.933167][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.933191][ T6191] RIP: 0033:0x7fb473b8eec9 [ 99.933211][ T6191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.933236][ T6191] RSP: 002b:00007fb4749a3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 99.933260][ T6191] RAX: ffffffffffffffda RBX: 00007fb473de5fa0 RCX: 00007fb473b8eec9 [ 99.933276][ T6191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000208000 [ 99.933291][ T6191] RBP: 00007fb473c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.933305][ T6191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 99.933320][ T6191] R13: 00007fb473de6038 R14: 00007fb473de5fa0 R15: 00007ffc2230a108 [ 99.933355][ T6191] [ 99.933467][ T6191] Mem-Info: [ 100.180322][ T6191] active_anon:6607 inactive_anon:0 isolated_anon:0 [ 100.180322][ T6191] active_file:12082 inactive_file:40302 isolated_file:0 [ 100.180322][ T6191] unevictable:768 dirty:815 writeback:0 [ 100.180322][ T6191] slab_reclaimable:10777 slab_unreclaimable:91158 [ 100.180322][ T6191] mapped:24413 shmem:1361 pagetables:1036 [ 100.180322][ T6191] sec_pagetables:0 bounce:0 [ 100.180322][ T6191] kernel_misc_reclaimable:0 [ 100.180322][ T6191] free:1329739 free_pcp:20653 free_cma:0 [ 100.228390][ T6191] Node 0 active_anon:26428kB inactive_anon:0kB active_file:48328kB inactive_file:161012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97652kB dirty:3252kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11304kB pagetables:4012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 100.231545][ T6187] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 100.269493][ T6191] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 100.269781][ T6187] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 100.375297][ T6194] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 100.417183][ T6191] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.470546][ T6191] lowmem_reserve[]: 0 2483 2485 2485 2485 [ 100.478390][ T6191] Node 0 DMA32 free:1417892kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22428kB inactive_anon:0kB active_file:48328kB inactive_file:161012kB unevictable:1536kB writepending:3252kB zspages:32kB present:3129332kB managed:2543608kB mlocked:0kB bounce:0kB free_pcp:60344kB local_pcp:29144kB free_cma:0kB [ 100.512506][ T6191] lowmem_reserve[]: 0 0 1 1 1 [ 100.527131][ T6191] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.559654][ T6191] lowmem_reserve[]: 0 0 0 0 0 [ 100.564442][ T6191] Node 1 Normal free:3892500kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21680kB local_pcp:9904kB free_cma:0kB [ 100.578947][ T6201] capability: warning: `syz.2.56' uses 32-bit capabilities (legacy support in use) [ 100.625576][ T6191] lowmem_reserve[]: 0 0 0 0 0 [ 100.635468][ T6191] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.648592][ T6191] Node 0 DMA32: 495*4kB (UME) 472*8kB (UME) 218*16kB (UM) 279*32kB (UME) 129*64kB (UME) 91*128kB (UM) 58*256kB (UM) 14*512kB (UME) 12*1024kB (UM) 7*2048kB (UM) 325*4096kB (M) = 1417916kB [ 100.679981][ T6199] ucma_write: process 76 (syz.2.56) changed security contexts after opening file descriptor, this is not allowed. [ 100.735011][ T6191] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 100.750255][ T6191] Node 1 Normal: 5*4kB (UE) 54*8kB (UME) 35*16kB (UME) 23*32kB (UME) 19*64kB (UME) 5*128kB (UME) 3*256kB (ME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (UM) = 3892500kB [ 100.774030][ T6191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.830793][ T6191] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 100.841567][ T6191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.855758][ T6191] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.904449][ T6191] 53743 total pagecache pages [ 100.916377][ T6191] 4 pages in swap cache [ 100.921029][ T6191] Free swap = 124996kB [ 100.925262][ T6191] Total swap = 124996kB [ 100.931908][ T6191] 2097051 pages RAM [ 100.935796][ T6191] 0 pages HighMem/MovableOnly [ 100.940975][ T6191] 429059 pages reserved [ 100.966022][ T6191] 0 pages cma reserved [ 101.028557][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.58'. [ 101.059845][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'. [ 102.097373][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'. [ 102.562602][ T6236] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 104.662115][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.76'. [ 104.690144][ T6282] FAULT_INJECTION: forcing a failure. [ 104.690144][ T6282] name failslab, interval 1, probability 0, space 0, times 0 [ 104.690178][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.0.73 Not tainted syzkaller #0 PREEMPT(full) [ 104.690194][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.690203][ T6282] Call Trace: [ 104.690208][ T6282] [ 104.690214][ T6282] dump_stack_lvl+0x16c/0x1f0 [ 104.690239][ T6282] should_fail_ex+0x512/0x640 [ 104.690260][ T6282] ? __kmalloc_cache_noprof+0x5f/0x780 [ 104.690281][ T6282] should_failslab+0xc2/0x120 [ 104.690295][ T6282] __kmalloc_cache_noprof+0x72/0x780 [ 104.690312][ T6282] ? __pfx___debug_object_init+0x10/0x10 [ 104.690329][ T6282] ? con_set_default_unimap+0x534/0x6d0 [ 104.690351][ T6282] ? con_set_default_unimap+0x534/0x6d0 [ 104.690368][ T6282] con_set_default_unimap+0x534/0x6d0 [ 104.690390][ T6282] vc_allocate+0x6a6/0x880 [ 104.690405][ T6282] ? __pfx_vc_allocate+0x10/0x10 [ 104.690426][ T6282] con_install+0xa1/0x600 [ 104.690442][ T6282] ? __pfx_con_install+0x10/0x10 [ 104.690461][ T6282] ? __pfx_con_install+0x10/0x10 [ 104.690476][ T6282] tty_init_dev.part.0+0x9c/0x500 [ 104.690495][ T6282] tty_open+0xa4f/0xf90 [ 104.690514][ T6282] ? __pfx_tty_open+0x10/0x10 [ 104.690531][ T6282] ? chrdev_open+0x58c/0x6a0 [ 104.690554][ T6282] ? __pfx_tty_open+0x10/0x10 [ 104.690570][ T6282] chrdev_open+0x234/0x6a0 [ 104.690591][ T6282] ? __pfx_chrdev_open+0x10/0x10 [ 104.690612][ T6282] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 104.690635][ T6282] do_dentry_open+0x982/0x1530 [ 104.690655][ T6282] ? __pfx_chrdev_open+0x10/0x10 [ 104.690679][ T6282] vfs_open+0x82/0x3f0 [ 104.690697][ T6282] path_openat+0x1de4/0x2cb0 [ 104.690725][ T6282] ? __pfx_path_openat+0x10/0x10 [ 104.690745][ T6282] ? __lock_acquire+0xb8a/0x1c90 [ 104.690771][ T6282] do_filp_open+0x20b/0x470 [ 104.690791][ T6282] ? __pfx_do_filp_open+0x10/0x10 [ 104.690825][ T6282] ? alloc_fd+0x471/0x7d0 [ 104.690850][ T6282] do_sys_openat2+0x11b/0x1d0 [ 104.690865][ T6282] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.690889][ T6282] __x64_sys_openat+0x174/0x210 [ 104.690904][ T6282] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.690928][ T6282] do_syscall_64+0xcd/0xfa0 [ 104.690949][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.690963][ T6282] RIP: 0033:0x7f00fe58eec9 [ 104.690975][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.690989][ T6282] RSP: 002b:00007f00ff3c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.691003][ T6282] RAX: ffffffffffffffda RBX: 00007f00fe7e5fa0 RCX: 00007f00fe58eec9 [ 104.691013][ T6282] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 104.691022][ T6282] RBP: 00007f00fe611f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.691030][ T6282] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 104.691039][ T6282] R13: 00007f00fe7e6038 R14: 00007f00fe7e5fa0 R15: 00007ffdfd3bed08 [ 104.691059][ T6282] [ 104.776376][ T6286] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 105.654744][ T6282] tty tty26: ldisc open failed (-12), clearing slot 25 [ 105.795803][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 106.203391][ T6311] FAULT_INJECTION: forcing a failure. [ 106.203391][ T6311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.216986][ T6311] CPU: 1 UID: 0 PID: 6311 Comm: syz.3.80 Not tainted syzkaller #0 PREEMPT(full) [ 106.217007][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.217016][ T6311] Call Trace: [ 106.217021][ T6311] [ 106.217033][ T6311] dump_stack_lvl+0x16c/0x1f0 [ 106.217073][ T6311] should_fail_ex+0x512/0x640 [ 106.217116][ T6311] should_fail_alloc_page+0xe7/0x130 [ 106.217133][ T6311] prepare_alloc_pages+0x3c2/0x610 [ 106.217147][ T6311] ? rcu_is_watching+0x12/0xc0 [ 106.217168][ T6311] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 106.217186][ T6311] ? register_lock_class+0x41/0x4c0 [ 106.217204][ T6311] ? __lock_acquire+0x622/0x1c90 [ 106.217219][ T6311] ? css_rstat_updated+0x1c2/0x510 [ 106.217239][ T6311] ? __pfx_css_rstat_updated+0x10/0x10 [ 106.217259][ T6311] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.217280][ T6311] ? rcu_is_watching+0x12/0xc0 [ 106.217304][ T6311] ? __lock_acquire+0x622/0x1c90 [ 106.217317][ T6311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.217336][ T6311] ? policy_nodemask+0xea/0x4e0 [ 106.217358][ T6311] alloc_pages_mpol+0x1fb/0x550 [ 106.217373][ T6311] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 106.217389][ T6311] ? filemap_get_entry+0x1a7/0x3b0 [ 106.217412][ T6311] folio_alloc_noprof+0x20/0x2d0 [ 106.217430][ T6311] filemap_alloc_folio_noprof+0x3a1/0x470 [ 106.217443][ T6311] ? filemap_add_folio+0x110/0x610 [ 106.217462][ T6311] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 106.217477][ T6311] ? rcu_is_watching+0x12/0xc0 [ 106.217499][ T6311] __filemap_get_folio+0x5e1/0xc30 [ 106.217523][ T6311] ioctx_alloc+0x761/0x2120 [ 106.217551][ T6311] ? __pfx_ioctx_alloc+0x10/0x10 [ 106.217569][ T6311] ? __might_fault+0x13b/0x190 [ 106.217591][ T6311] __x64_sys_io_setup+0xc9/0x210 [ 106.217612][ T6311] do_syscall_64+0xcd/0xfa0 [ 106.217633][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.217648][ T6311] RIP: 0033:0x7ff293b8eec9 [ 106.217660][ T6311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.217674][ T6311] RSP: 002b:00007ff2949d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 106.217688][ T6311] RAX: ffffffffffffffda RBX: 00007ff293de6090 RCX: 00007ff293b8eec9 [ 106.217698][ T6311] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 106.217706][ T6311] RBP: 00007ff293c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.217714][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.217722][ T6311] R13: 00007ff293de6128 R14: 00007ff293de6090 R15: 00007ffe8376bc88 [ 106.217742][ T6311] [ 106.967716][ T6325] ICMPv6: process `syz.0.82' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 109.415017][ T6358] bond0: option arp_interval: invalid value () [ 109.503523][ T6358] bond0: option arp_interval: allowed values 0 - 2147483647 [ 109.568753][ T30] audit: type=1806 audit(1760633034.759:2): xattr="" res=-22 [ 109.756377][ T6352] FAULT_INJECTION: forcing a failure. [ 109.756377][ T6352] name failslab, interval 1, probability 0, space 0, times 0 [ 109.870477][ T6352] CPU: 1 UID: 0 PID: 6352 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT(full) [ 109.870511][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.870526][ T6352] Call Trace: [ 109.870534][ T6352] [ 109.870543][ T6352] dump_stack_lvl+0x16c/0x1f0 [ 109.870587][ T6352] should_fail_ex+0x512/0x640 [ 109.870623][ T6352] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 109.870657][ T6352] should_failslab+0xc2/0x120 [ 109.870683][ T6352] kmem_cache_alloc_noprof+0x75/0x6e0 [ 109.870715][ T6352] ? vm_area_dup+0x27/0x8d0 [ 109.870749][ T6352] ? vm_area_dup+0x27/0x8d0 [ 109.870775][ T6352] vm_area_dup+0x27/0x8d0 [ 109.870806][ T6352] __split_vma+0x18e/0x1070 [ 109.870836][ T6352] ? flush_tlb_func+0x2a5/0x710 [ 109.870864][ T6352] ? __pfx___split_vma+0x10/0x10 [ 109.870890][ T6352] ? mark_held_locks+0x49/0x80 [ 109.870927][ T6352] ? lock_acquire+0x179/0x350 [ 109.870956][ T6352] vms_gather_munmap_vmas+0x1cb/0x1340 [ 109.870985][ T6352] ? move_page_tables+0x140d/0x4230 [ 109.871017][ T6352] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 109.871044][ T6352] ? move_page_tables+0xf9e/0x4230 [ 109.871087][ T6352] do_vmi_align_munmap+0x286/0x7e0 [ 109.871122][ T6352] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 109.871209][ T6352] do_vmi_munmap+0x204/0x3e0 [ 109.871249][ T6352] move_vma+0xb5f/0x1770 [ 109.871288][ T6352] ? __pfx_move_vma+0x10/0x10 [ 109.871340][ T6352] ? vrm_set_new_addr+0x208/0x290 [ 109.871372][ T6352] mremap_to+0x1b7/0x450 [ 109.871405][ T6352] do_mremap+0x13a8/0x2020 [ 109.871439][ T6352] ? futex_private_hash_put+0xf0/0x300 [ 109.871488][ T6352] ? __pfx_do_mremap+0x10/0x10 [ 109.871527][ T6352] ? do_writev+0x218/0x340 [ 109.871569][ T6352] __do_sys_mremap+0x119/0x170 [ 109.871601][ T6352] ? __pfx___do_sys_mremap+0x10/0x10 [ 109.871644][ T6352] ? __x64_sys_futex+0x1e0/0x4c0 [ 109.871690][ T6352] do_syscall_64+0xcd/0xfa0 [ 109.871727][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.871752][ T6352] RIP: 0033:0x7f00fe58eec9 [ 109.871772][ T6352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.871795][ T6352] RSP: 002b:00007f00ff3c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 109.871819][ T6352] RAX: ffffffffffffffda RBX: 00007f00fe7e5fa0 RCX: 00007f00fe58eec9 [ 109.871836][ T6352] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000004000 [ 109.871852][ T6352] RBP: 00007f00fe611f91 R08: 0000000100000000 R09: 0000000000000000 [ 109.871868][ T6352] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 109.871881][ T6352] R13: 00007f00fe7e6038 R14: 00007f00fe7e5fa0 R15: 00007ffdfd3bed08 [ 109.871916][ T6352] [ 110.143339][ T6361] FAULT_INJECTION: forcing a failure. [ 110.143339][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 110.254933][ T6361] CPU: 1 UID: 0 PID: 6361 Comm: syz.2.91 Not tainted syzkaller #0 PREEMPT(full) [ 110.254966][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.254981][ T6361] Call Trace: [ 110.254988][ T6361] [ 110.254996][ T6361] dump_stack_lvl+0x16c/0x1f0 [ 110.255034][ T6361] should_fail_ex+0x512/0x640 [ 110.255076][ T6361] ? __kmalloc_noprof+0xca/0x880 [ 110.255106][ T6361] should_failslab+0xc2/0x120 [ 110.255126][ T6361] __kmalloc_noprof+0xdd/0x880 [ 110.255153][ T6361] ? sk_prot_alloc+0x1a8/0x2a0 [ 110.255180][ T6361] ? sk_prot_alloc+0x1a8/0x2a0 [ 110.255199][ T6361] sk_prot_alloc+0x1a8/0x2a0 [ 110.255223][ T6361] sk_alloc+0x36/0xc20 [ 110.255253][ T6361] __netlink_create+0x5e/0x2c0 [ 110.255278][ T6361] ? __wake_up+0x3f/0x60 [ 110.255311][ T6361] netlink_create+0x39e/0x620 [ 110.255339][ T6361] ? __pfx_genl_bind+0x10/0x10 [ 110.255358][ T6361] ? __pfx_genl_unbind+0x10/0x10 [ 110.255377][ T6361] ? __pfx_genl_release+0x10/0x10 [ 110.255401][ T6361] __sock_create+0x338/0x8d0 [ 110.255431][ T6361] __sys_socket+0x14d/0x260 [ 110.255453][ T6361] ? __x64_sys_openat+0x174/0x210 [ 110.255477][ T6361] ? __pfx___sys_socket+0x10/0x10 [ 110.255502][ T6361] ? xfd_validate_state+0x61/0x180 [ 110.255532][ T6361] __x64_sys_socket+0x72/0xb0 [ 110.255561][ T6361] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.255593][ T6361] do_syscall_64+0xcd/0xfa0 [ 110.255631][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.255653][ T6361] RIP: 0033:0x7f654a18eec9 [ 110.255670][ T6361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.255693][ T6361] RSP: 002b:00007f654aff2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 110.255713][ T6361] RAX: ffffffffffffffda RBX: 00007f654a3e6180 RCX: 00007f654a18eec9 [ 110.255728][ T6361] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 110.255740][ T6361] RBP: 00007f654a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.255752][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.255764][ T6361] R13: 00007f654a3e6218 R14: 00007f654a3e6180 R15: 00007ffeec28fd78 [ 110.255793][ T6361] [ 110.576176][ T6360] kexec: Could not allocate control_code_buffer [ 110.769691][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 111.646649][ T6380] netlink: 'syz.2.97': attribute type 11 has an invalid length. [ 112.643619][ T6400] process 'syz.1.101' launched ':,' with NULL argv: empty string added [ 113.552664][ T6435] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.166353][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 115.339394][ T6456] usb usb16: usbfs: process 6456 (syz.1.113) did not claim interface 0 before use [ 116.069597][ T6471] sysfs_service_op_store: Client not running :-5: [ 116.158400][ T6471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.115'. [ 116.636463][ T6471] bond0: (slave bond_slave_0): Releasing backup interface [ 117.046072][ T6483] FAULT_INJECTION: forcing a failure. [ 117.046072][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 117.058970][ T6483] CPU: 0 UID: 0 PID: 6483 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT(full) [ 117.058990][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.058998][ T6483] Call Trace: [ 117.059004][ T6483] [ 117.059010][ T6483] dump_stack_lvl+0x16c/0x1f0 [ 117.059035][ T6483] should_fail_ex+0x512/0x640 [ 117.059057][ T6483] ? fs_reclaim_acquire+0xae/0x150 [ 117.059072][ T6483] should_failslab+0xc2/0x120 [ 117.059086][ T6483] __kmalloc_noprof+0xdd/0x880 [ 117.059104][ T6483] ? tomoyo_encode2+0x100/0x3e0 [ 117.059126][ T6483] ? tomoyo_encode2+0x100/0x3e0 [ 117.059143][ T6483] tomoyo_encode2+0x100/0x3e0 [ 117.059164][ T6483] tomoyo_encode+0x29/0x50 [ 117.059182][ T6483] tomoyo_realpath_from_path+0x18f/0x6e0 [ 117.059206][ T6483] tomoyo_mkdev_perm+0x22b/0x570 [ 117.059220][ T6483] ? tomoyo_mkdev_perm+0x217/0x570 [ 117.059237][ T6483] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 117.059253][ T6483] ? do_raw_spin_lock+0x12c/0x2b0 [ 117.059275][ T6483] ? do_raw_spin_unlock+0x172/0x230 [ 117.059301][ T6483] ? __pfx_current_check_access_path+0x10/0x10 [ 117.059322][ T6483] ? simple_lookup+0x105/0x1d0 [ 117.059342][ T6483] tomoyo_path_mknod+0x12a/0x190 [ 117.059363][ T6483] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 117.059385][ T6483] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.059406][ T6483] security_path_mknod+0x161/0x310 [ 117.059424][ T6483] do_mknodat+0x239/0x5d0 [ 117.059444][ T6483] ? __pfx_do_mknodat+0x10/0x10 [ 117.059462][ T6483] ? getname_flags.part.0+0x1c5/0x550 [ 117.059480][ T6483] __x64_sys_mknod+0x87/0xb0 [ 117.059500][ T6483] do_syscall_64+0xcd/0xfa0 [ 117.059521][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.059543][ T6483] RIP: 0033:0x7f654a18eec9 [ 117.059555][ T6483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.059569][ T6483] RSP: 002b:00007f654b034038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 117.059583][ T6483] RAX: ffffffffffffffda RBX: 00007f654a3e5fa0 RCX: 00007f654a18eec9 [ 117.059592][ T6483] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 117.059601][ T6483] RBP: 00007f654a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.059609][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.059618][ T6483] R13: 00007f654a3e6038 R14: 00007f654a3e5fa0 R15: 00007ffeec28fd78 [ 117.059637][ T6483] [ 117.059655][ T6483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.836386][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 118.717147][ T6510] zswap: compressor not available [ 118.980989][ T6530] delete_channel: no stack [ 118.986557][ T6528] syz.2.127 uses obsolete (PF_INET,SOCK_PACKET) [ 119.085187][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.129'. [ 119.204533][ T6537] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 120.037885][ T6557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.133'. [ 122.039430][ T6604] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.824082][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 126.438624][ T6671] random: crng reseeded on system resumption [ 126.501122][ T6672] [U] ^@                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    syzkaller syzkaller login: [ 194.331587][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338195][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.951335][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.433'. [ 197.520662][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 197.632254][ T8093] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 201.530180][ T8094] Process accounting resumed [ 202.412207][ T8139] netlink: 52 bytes leftover after parsing attributes in process `syz.2.445'. [ 204.066874][ T5829] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 syzkaller syzkaller login: [ 205.711685][ T8184] Invalid ELF header magic: != ELF [ 207.107154][ T8203] svc: failed to register nfsdv3 RPC service (errno 111). [ 207.123438][ T8203] svc: failed to register nfsaclv3 RPC service (errno 111). [ 207.742283][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.460'. [ 208.919226][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.464'. [ 208.991918][ T8233] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 209.514594][ T8238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.465'. [ 209.627669][ T8238] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 210.441404][ T8256] Invalid ELF header magic: != ELF [ 211.703105][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.472'. [ 215.043700][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 215.653439][ T8340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.484'. [ 220.173509][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 221.233207][ T8490] Trying to write to read-only block-device ram7 [ 221.696552][ T8499] sp0: Synchronizing with TNC [ 222.883241][ T8527] __vm_enough_memory: pid: 8527, comm: syz.2.521, bytes: 4398046511104 not enough memory for the allocation [ 224.027010][ T8549] FAULT_INJECTION: forcing a failure. [ 224.027010][ T8549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.092325][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.3.519 Not tainted syzkaller #0 PREEMPT(full) [ 224.092346][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.092354][ T8549] Call Trace: [ 224.092359][ T8549] [ 224.092365][ T8549] dump_stack_lvl+0x16c/0x1f0 [ 224.092389][ T8549] should_fail_ex+0x512/0x640 [ 224.092414][ T8549] should_fail_alloc_page+0xe7/0x130 [ 224.092429][ T8549] prepare_alloc_pages+0x3c2/0x610 [ 224.092442][ T8549] ? is_bpf_text_address+0x94/0x1a0 [ 224.092459][ T8549] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 224.092477][ T8549] ? arch_stack_walk+0xa6/0x100 [ 224.092513][ T8549] ? stack_trace_save+0x8e/0xc0 [ 224.092533][ T8549] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.092551][ T8549] ? rcu_is_watching+0x12/0xc0 [ 224.092575][ T8549] ? kasan_save_track+0x14/0x30 [ 224.092594][ T8549] ? __kasan_slab_alloc+0x89/0x90 [ 224.092613][ T8549] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 224.092630][ T8549] ? __pmd_alloc+0xbf/0x8b0 [ 224.092641][ T8549] ? __handle_mm_fault+0xada/0x2aa0 [ 224.092656][ T8549] ? handle_mm_fault+0x589/0xd10 [ 224.092669][ T8549] ? __get_user_pages+0x54e/0x3530 [ 224.092681][ T8549] ? populate_vma_page_range+0x267/0x3f0 [ 224.092694][ T8549] ? __mm_populate+0x1d8/0x380 [ 224.092709][ T8549] ? vm_mmap_pgoff+0x37f/0x470 [ 224.092730][ T8549] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 224.092748][ T8549] ? __x64_sys_mmap+0x125/0x190 [ 224.092763][ T8549] ? do_syscall_64+0xcd/0xfa0 [ 224.092782][ T8549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.092801][ T8549] ? policy_nodemask+0xea/0x4e0 [ 224.092816][ T8549] alloc_pages_mpol+0x1fb/0x550 [ 224.092830][ T8549] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 224.092848][ T8549] alloc_pages_noprof+0x131/0x390 [ 224.092862][ T8549] pte_alloc_one+0x1e/0x350 [ 224.092882][ T8549] __pte_alloc+0x6d/0x380 [ 224.092902][ T8549] ? __pfx___pte_alloc+0x10/0x10 [ 224.092923][ T8549] ? do_raw_spin_lock+0x12c/0x2b0 [ 224.092941][ T8549] do_pte_missing+0x282c/0x3ba0 [ 224.092958][ T8549] ? do_raw_spin_unlock+0x172/0x230 [ 224.092974][ T8549] ? _raw_spin_unlock+0x28/0x50 [ 224.092991][ T8549] ? __pmd_alloc+0x64f/0x8b0 [ 224.093006][ T8549] __handle_mm_fault+0x1556/0x2aa0 [ 224.093027][ T8549] ? __pfx___handle_mm_fault+0x10/0x10 [ 224.093059][ T8549] handle_mm_fault+0x589/0xd10 [ 224.093078][ T8549] __get_user_pages+0x54e/0x3530 [ 224.093100][ T8549] ? __pfx___get_user_pages+0x10/0x10 [ 224.093118][ T8549] populate_vma_page_range+0x267/0x3f0 [ 224.093134][ T8549] ? __pfx_populate_vma_page_range+0x10/0x10 [ 224.093148][ T8549] ? __pfx_find_vma_intersection+0x10/0x10 [ 224.093169][ T8549] ? do_mmap+0x69c/0x1210 [ 224.093183][ T8549] __mm_populate+0x1d8/0x380 [ 224.093198][ T8549] ? __pfx___mm_populate+0x10/0x10 [ 224.093214][ T8549] ? up_write+0x1b2/0x520 [ 224.093231][ T8549] vm_mmap_pgoff+0x37f/0x470 [ 224.093254][ T8549] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 224.093280][ T8549] ? __x64_sys_futex+0x1e0/0x4c0 [ 224.093292][ T8549] ? __x64_sys_futex+0x1e9/0x4c0 [ 224.093308][ T8549] ksys_mmap_pgoff+0x7d/0x5c0 [ 224.093328][ T8549] ? xfd_validate_state+0x61/0x180 [ 224.093341][ T8549] ? __pfx_ksys_write+0x10/0x10 [ 224.093362][ T8549] __x64_sys_mmap+0x125/0x190 [ 224.093379][ T8549] do_syscall_64+0xcd/0xfa0 [ 224.093400][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.093413][ T8549] RIP: 0033:0x7ff293b8eec9 [ 224.093424][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.093437][ T8549] RSP: 002b:00007ff2949f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 224.093450][ T8549] RAX: ffffffffffffffda RBX: 00007ff293de5fa0 RCX: 00007ff293b8eec9 [ 224.093459][ T8549] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 224.093467][ T8549] RBP: 00007ff293c11f91 R08: 0000000000000007 R09: 0000000000028000 [ 224.093475][ T8549] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 224.093483][ T8549] R13: 00007ff293de6038 R14: 00007ff293de5fa0 R15: 00007ffe8376bc88 [ 224.093506][ T8549] [ 225.124850][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.520'. [ 225.493558][ T8534] can: request_module (can-proto-5) failed. [ 228.128429][ T8592] program syz.0.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.700729][ T8648] netlink: 342 bytes leftover after parsing attributes in process `syz.1.539'. [ 231.052557][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.541'. [ 232.334479][ T8669] Process accounting paused [ 233.111277][ T8691] __vm_enough_memory: pid: 8691, comm: syz.3.550, bytes: 4398046511104 not enough memory for the allocation [ 234.458589][ T8726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.559'. [ 235.494205][ T8749] netlink: 5 bytes leftover after parsing attributes in process `syz.2.565'. [ 236.803113][ T8776] __vm_enough_memory: pid: 8776, comm: syz.1.569, bytes: 4398046511104 not enough memory for the allocation [ 237.789177][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 237.819467][ T8783] netlink: 342 bytes leftover after parsing attributes in process `syz.2.571'. [ 240.138312][ T8821] ================================================================== [ 240.138333][ T8821] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 240.138377][ T8821] Read of size 256 at addr ffff88805a5863c0 by task syz.1.581/8821 [ 240.138397][ T8821] [ 240.138408][ T8821] CPU: 1 UID: 0 PID: 8821 Comm: syz.1.581 Not tainted syzkaller #0 PREEMPT(full) [ 240.138433][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.138446][ T8821] Call Trace: [ 240.138453][ T8821] [ 240.138462][ T8821] dump_stack_lvl+0x116/0x1f0 [ 240.138494][ T8821] print_report+0xcd/0x630 [ 240.138515][ T8821] ? __virt_addr_valid+0x81/0x610 [ 240.138543][ T8821] ? __phys_addr+0xe8/0x180 [ 240.138564][ T8821] ? fbcon_prepare_logo+0xa03/0xc70 [ 240.138596][ T8821] kasan_report+0xe0/0x110 [ 240.138617][ T8821] ? fbcon_prepare_logo+0xa03/0xc70 [ 240.138652][ T8821] kasan_check_range+0x100/0x1b0 [ 240.138678][ T8821] __asan_memcpy+0x23/0x60 [ 240.138707][ T8821] fbcon_prepare_logo+0xa03/0xc70 [ 240.138744][ T8821] fbcon_init+0xd77/0x1900 [ 240.138774][ T8821] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 240.138808][ T8821] visual_init+0x320/0x620 [ 240.138840][ T8821] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 240.138866][ T8821] store_bind+0x61d/0x760 [ 240.138889][ T8821] ? sysfs_file_kobj+0xe4/0x290 [ 240.138922][ T8821] ? __pfx_store_bind+0x10/0x10 [ 240.138942][ T8821] dev_attr_store+0x58/0x80 [ 240.138972][ T8821] ? __pfx_dev_attr_store+0x10/0x10 [ 240.139002][ T8821] sysfs_kf_write+0xf2/0x150 [ 240.139031][ T8821] kernfs_fop_write_iter+0x3af/0x570 [ 240.139056][ T8821] ? __pfx_sysfs_kf_write+0x10/0x10 [ 240.139086][ T8821] iter_file_splice_write+0xa24/0x12e0 [ 240.139123][ T8821] ? __pfx_iter_file_splice_write+0x10/0x10 [ 240.139154][ T8821] ? __pfx_copy_splice_read+0x10/0x10 [ 240.139187][ T8821] ? __pfx_iter_file_splice_write+0x10/0x10 [ 240.139217][ T8821] direct_splice_actor+0x192/0x6c0 [ 240.139245][ T8821] splice_direct_to_actor+0x345/0xa30 [ 240.139273][ T8821] ? __pfx_direct_splice_actor+0x10/0x10 [ 240.139303][ T8821] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 240.139334][ T8821] do_splice_direct+0x174/0x240 [ 240.139360][ T8821] ? __pfx_do_splice_direct+0x10/0x10 [ 240.139387][ T8821] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 240.139416][ T8821] ? rw_verify_area+0xcf/0x6c0 [ 240.139443][ T8821] do_sendfile+0xb06/0xe50 [ 240.139473][ T8821] ? __pfx_do_sendfile+0x10/0x10 [ 240.139502][ T8821] ? __x64_sys_futex+0x1e0/0x4c0 [ 240.139529][ T8821] ? __x64_sys_futex+0x1e9/0x4c0 [ 240.139554][ T8821] __x64_sys_sendfile64+0x1d8/0x220 [ 240.139575][ T8821] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 240.139601][ T8821] do_syscall_64+0xcd/0xfa0 [ 240.139635][ T8821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.139657][ T8821] RIP: 0033:0x7fb473b8eec9 [ 240.139673][ T8821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.139694][ T8821] RSP: 002b:00007fb4749a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 240.139716][ T8821] RAX: ffffffffffffffda RBX: 00007fb473de5fa0 RCX: 00007fb473b8eec9 [ 240.139731][ T8821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 240.139744][ T8821] RBP: 00007fb473c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 240.139758][ T8821] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 240.139772][ T8821] R13: 00007fb473de6038 R14: 00007fb473de5fa0 R15: 00007ffc2230a108 [ 240.139794][ T8821] [ 240.139802][ T8821] [ 240.139808][ T8821] Allocated by task 8715: [ 240.139819][ T8821] kasan_save_stack+0x33/0x60 [ 240.139848][ T8821] kasan_save_track+0x14/0x30 [ 240.139876][ T8821] __kasan_slab_alloc+0x89/0x90 [ 240.139908][ T8821] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 240.139936][ T8821] kmalloc_reserve+0x18b/0x2c0 [ 240.139957][ T8821] __alloc_skb+0x166/0x380 [ 240.139983][ T8821] __ip6_append_data+0x2b74/0x4740 [ 240.140004][ T8821] ip6_append_data+0x1ba/0x4c0 [ 240.140023][ T8821] rawv6_sendmsg+0x163e/0x4860 [ 240.140041][ T8821] inet_sendmsg+0x11c/0x140 [ 240.140066][ T8821] ____sys_sendmsg+0x973/0xc70 [ 240.140087][ T8821] ___sys_sendmsg+0x134/0x1d0 [ 240.140114][ T8821] __sys_sendmmsg+0x200/0x420 [ 240.140143][ T8821] __x64_sys_sendmmsg+0x9c/0x100 [ 240.140172][ T8821] do_syscall_64+0xcd/0xfa0 [ 240.140200][ T8821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.140219][ T8821] [ 240.140224][ T8821] Freed by task 8719: [ 240.140233][ T8821] kasan_save_stack+0x33/0x60 [ 240.140261][ T8821] kasan_save_track+0x14/0x30 [ 240.140291][ T8821] __kasan_save_free_info+0x3b/0x60 [ 240.140315][ T8821] __kasan_slab_free+0x5f/0x80 [ 240.140344][ T8821] kmem_cache_free+0x2d4/0x6c0 [ 240.140371][ T8821] skb_free_head+0x1b7/0x210 [ 240.140395][ T8821] skb_release_data+0x795/0x9e0 [ 240.140423][ T8821] consume_skb+0xbf/0x100 [ 240.140440][ T8821] rawv6_recvmsg+0xa03/0xd40 [ 240.140457][ T8821] sock_common_recvmsg+0xec/0x190 [ 240.140476][ T8821] ____sys_recvmsg+0x5f9/0x6b0 [ 240.140496][ T8821] ___sys_recvmsg+0x114/0x1a0 [ 240.140529][ T8821] do_recvmmsg+0x2fe/0x750 [ 240.140559][ T8821] __x64_sys_recvmmsg+0x22a/0x280 [ 240.140590][ T8821] do_syscall_64+0xcd/0xfa0 [ 240.140620][ T8821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.140640][ T8821] [ 240.140645][ T8821] The buggy address belongs to the object at ffff88805a5863c0 [ 240.140645][ T8821] which belongs to the cache skbuff_small_head of size 704 [ 240.140664][ T8821] The buggy address is located 0 bytes inside of [ 240.140664][ T8821] freed 704-byte region [ffff88805a5863c0, ffff88805a586680) [ 240.140684][ T8821] [ 240.140690][ T8821] The buggy address belongs to the physical page: [ 240.140706][ T8821] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a584 [ 240.140725][ T8821] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 240.140743][ T8821] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 240.140763][ T8821] page_type: f5(slab) [ 240.140782][ T8821] raw: 00fff00000000040 ffff8881416da280 ffffea00015c2f00 dead000000000002 [ 240.140803][ T8821] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 240.140824][ T8821] head: 00fff00000000040 ffff8881416da280 ffffea00015c2f00 dead000000000002 [ 240.140843][ T8821] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 240.140863][ T8821] head: 00fff00000000002 ffffea0001696101 00000000ffffffff 00000000ffffffff [ 240.140882][ T8821] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 240.140894][ T8821] page dumped because: kasan: bad access detected [ 240.140904][ T8821] page_owner tracks the page as allocated [ 240.140911][ T8821] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 81793803920, free_ts 27405314308 [ 240.140948][ T8821] post_alloc_hook+0x1c0/0x230 [ 240.140972][ T8821] get_page_from_freelist+0x10a3/0x3a30 [ 240.140998][ T8821] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 240.141027][ T8821] alloc_pages_mpol+0x1fb/0x550 [ 240.141046][ T8821] new_slab+0x24a/0x360 [ 240.141067][ T8821] ___slab_alloc+0xdc4/0x1ae0 [ 240.141089][ T8821] __slab_alloc.constprop.0+0x63/0x110 [ 240.141113][ T8821] kmem_cache_alloc_node_noprof+0x43c/0x770 [ 240.141140][ T8821] kmalloc_reserve+0x18b/0x2c0 [ 240.141159][ T8821] __alloc_skb+0x166/0x380 [ 240.141185][ T8821] netlink_ack+0x15d/0xb80 [ 240.141215][ T8821] netlink_rcv_skb+0x332/0x420 [ 240.141232][ T8821] netlink_unicast+0x5aa/0x870 [ 240.141261][ T8821] netlink_sendmsg+0x8c8/0xdd0 [ 240.141291][ T8821] __sys_sendto+0x4a3/0x520 [ 240.141317][ T8821] __x64_sys_sendto+0xe0/0x1c0 [ 240.141342][ T8821] page last free pid 1 tgid 1 stack trace: [ 240.141353][ T8821] __free_frozen_pages+0x7df/0x1160 [ 240.141374][ T8821] free_contig_range+0x183/0x4b0 [ 240.141395][ T8821] destroy_args+0xb69/0x12e0 [ 240.141415][ T8821] debug_vm_pgtable+0x1a32/0x3640 [ 240.141436][ T8821] do_one_initcall+0x123/0x6e0 [ 240.141456][ T8821] kernel_init_freeable+0x5c8/0x920 [ 240.141480][ T8821] kernel_init+0x1c/0x2b0 [ 240.141499][ T8821] ret_from_fork+0x675/0x7d0 [ 240.141520][ T8821] ret_from_fork_asm+0x1a/0x30 [ 240.141543][ T8821] [ 240.141548][ T8821] Memory state around the buggy address: [ 240.141558][ T8821] ffff88805a586280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.141572][ T8821] ffff88805a586300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 240.141586][ T8821] >ffff88805a586380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 240.141597][ T8821] ^ [ 240.141607][ T8821] ffff88805a586400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.141621][ T8821] ffff88805a586480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.141633][ T8821] ================================================================== [ 240.141807][ T8821] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 240.141825][ T8821] CPU: 1 UID: 0 PID: 8821 Comm: syz.1.581 Not tainted syzkaller #0 PREEMPT(full) [ 240.141853][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.141867][ T8821] Call Trace: [ 240.141875][ T8821] [ 240.141885][ T8821] dump_stack_lvl+0x3d/0x1f0 [ 240.141920][ T8821] vpanic+0x640/0x6f0 [ 240.141947][ T8821] panic+0xca/0xd0 [ 240.141971][ T8821] ? __pfx_panic+0x10/0x10 [ 240.141997][ T8821] ? fbcon_prepare_logo+0xa03/0xc70 [ 240.142031][ T8821] ? preempt_schedule_common+0x44/0xc0 [ 240.142065][ T8821] ? preempt_schedule_thunk+0x16/0x30 [ 240.142097][ T8821] check_panic_on_warn+0xab/0xb0 [ 240.142124][ T8821] end_report+0x107/0x170 [ 240.142146][ T8821] kasan_report+0xee/0x110 [ 240.142170][ T8821] ? fbcon_prepare_logo+0xa03/0xc70 [ 240.142209][ T8821] kasan_check_range+0x100/0x1b0 [ 240.142236][ T8821] __asan_memcpy+0x23/0x60 [ 240.142267][ T8821] fbcon_prepare_logo+0xa03/0xc70 [ 240.142307][ T8821] fbcon_init+0xd77/0x1900 [ 240.142342][ T8821] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 240.142379][ T8821] visual_init+0x320/0x620 [ 240.142415][ T8821] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 240.142445][ T8821] store_bind+0x61d/0x760 [ 240.142471][ T8821] ? sysfs_file_kobj+0xe4/0x290 [ 240.142504][ T8821] ? __pfx_store_bind+0x10/0x10 [ 240.142534][ T8821] dev_attr_store+0x58/0x80 [ 240.142568][ T8821] ? __pfx_dev_attr_store+0x10/0x10 [ 240.142602][ T8821] sysfs_kf_write+0xf2/0x150 [ 240.142635][ T8821] kernfs_fop_write_iter+0x3af/0x570 [ 240.142663][ T8821] ? __pfx_sysfs_kf_write+0x10/0x10 [ 240.142697][ T8821] iter_file_splice_write+0xa24/0x12e0 [ 240.142738][ T8821] ? __pfx_iter_file_splice_write+0x10/0x10 [ 240.142777][ T8821] ? __pfx_copy_splice_read+0x10/0x10 [ 240.142816][ T8821] ? __pfx_iter_file_splice_write+0x10/0x10 [ 240.142849][ T8821] direct_splice_actor+0x192/0x6c0 [ 240.142881][ T8821] splice_direct_to_actor+0x345/0xa30 [ 240.142912][ T8821] ? __pfx_direct_splice_actor+0x10/0x10 [ 240.142946][ T8821] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 240.142981][ T8821] do_splice_direct+0x174/0x240 [ 240.143011][ T8821] ? __pfx_do_splice_direct+0x10/0x10 [ 240.143042][ T8821] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 240.143074][ T8821] ? rw_verify_area+0xcf/0x6c0 [ 240.143105][ T8821] do_sendfile+0xb06/0xe50 [ 240.143138][ T8821] ? __pfx_do_sendfile+0x10/0x10 [ 240.143171][ T8821] ? __x64_sys_futex+0x1e0/0x4c0 [ 240.143195][ T8821] ? __x64_sys_futex+0x1e9/0x4c0 [ 240.143221][ T8821] __x64_sys_sendfile64+0x1d8/0x220 [ 240.143245][ T8821] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 240.143274][ T8821] do_syscall_64+0xcd/0xfa0 [ 240.143308][ T8821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.143333][ T8821] RIP: 0033:0x7fb473b8eec9 [ 240.143351][ T8821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.143374][ T8821] RSP: 002b:00007fb4749a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 240.143398][ T8821] RAX: ffffffffffffffda RBX: 00007fb473de5fa0 RCX: 00007fb473b8eec9 [ 240.143415][ T8821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 240.143429][ T8821] RBP: 00007fb473c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 240.143445][ T8821] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 240.143459][ T8821] R13: 00007fb473de6038 R14: 00007fb473de5fa0 R15: 00007ffc2230a108 [ 240.143485][ T8821] [ 240.143737][ T8821] Kernel Offset: disabled