last executing test programs: 1.476243922s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 422.656368ms ago: executing program 0 (id=6): recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/141, 0x8d}, 0x1}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 389.294217ms ago: executing program 1 (id=2): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x37b}, {0x0}], 0x2}, 0x2000c080) 265.456799ms ago: executing program 1 (id=7): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0405"], 0x9) 83.16209ms ago: executing program 1 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x0, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=9): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 79.840953][ T5787] cgroup: Unknown subsys name 'net' [ 80.102118][ T5787] cgroup: Unknown subsys name 'cpuset' [ 80.177721][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.946916][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.660481][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.663101][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.664393][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.703679][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.704581][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.730292][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.731289][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.733142][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.733899][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.769218][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.770562][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.771946][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.772700][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.809017][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.809824][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.924595][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.929554][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.942687][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.950872][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.952291][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.953021][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.954344][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.955069][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.044514][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.056984][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.690541][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 85.736735][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 85.774985][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 86.120061][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 86.462841][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.464215][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.464579][ T5797] bridge_slave_0: entered allmulticast mode [ 86.466244][ T5797] bridge_slave_0: entered promiscuous mode [ 86.624376][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 86.633186][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.633311][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.633782][ T5797] bridge_slave_1: entered allmulticast mode [ 86.636675][ T5797] bridge_slave_1: entered promiscuous mode [ 86.733435][ T10] cfg80211: failed to load regulatory.db [ 86.736226][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.736350][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.736539][ T5801] bridge_slave_0: entered allmulticast mode [ 86.741155][ T5801] bridge_slave_0: entered promiscuous mode [ 86.808701][ T5799] Bluetooth: hci1: command tx timeout [ 86.808706][ T5119] Bluetooth: hci0: command tx timeout [ 86.840603][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.840679][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.840810][ T5805] bridge_slave_0: entered allmulticast mode [ 86.842293][ T5805] bridge_slave_0: entered promiscuous mode [ 86.843687][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.843758][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.843854][ T5801] bridge_slave_1: entered allmulticast mode [ 86.845320][ T5801] bridge_slave_1: entered promiscuous mode [ 86.888978][ T5799] Bluetooth: hci2: command tx timeout [ 86.983636][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.983843][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.984051][ T5805] bridge_slave_1: entered allmulticast mode [ 86.989732][ T5805] bridge_slave_1: entered promiscuous mode [ 87.047316][ T5799] Bluetooth: hci4: command tx timeout [ 87.127452][ T5799] Bluetooth: hci3: command tx timeout [ 87.231578][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.479541][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.551287][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.551534][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.551665][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.551826][ T5810] bridge_slave_0: entered allmulticast mode [ 87.553530][ T5810] bridge_slave_0: entered promiscuous mode [ 87.650589][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.653119][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.653449][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.653542][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.653647][ T5810] bridge_slave_1: entered allmulticast mode [ 87.655110][ T5810] bridge_slave_1: entered promiscuous mode [ 87.740410][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.949582][ T5797] team0: Port device team_slave_0 added [ 88.429730][ T5797] team0: Port device team_slave_1 added [ 88.490545][ T5801] team0: Port device team_slave_0 added [ 88.493945][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.494176][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.494371][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.494547][ T5809] bridge_slave_0: entered allmulticast mode [ 88.496290][ T5809] bridge_slave_0: entered promiscuous mode [ 88.579266][ T5805] team0: Port device team_slave_0 added [ 88.581380][ T5801] team0: Port device team_slave_1 added [ 88.583807][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.584033][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.584138][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.584247][ T5809] bridge_slave_1: entered allmulticast mode [ 88.585713][ T5809] bridge_slave_1: entered promiscuous mode [ 88.669755][ T5805] team0: Port device team_slave_1 added [ 88.888281][ T5799] Bluetooth: hci0: command tx timeout [ 88.898444][ T5799] Bluetooth: hci1: command tx timeout [ 88.909401][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.909411][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.909424][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.967302][ T5799] Bluetooth: hci2: command tx timeout [ 89.127362][ T5799] Bluetooth: hci4: command tx timeout [ 89.207252][ T5799] Bluetooth: hci3: command tx timeout [ 89.258931][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.258947][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.258971][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.458844][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.458856][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.458869][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.461033][ T5810] team0: Port device team_slave_0 added [ 89.464501][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.477603][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.477617][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.477640][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.481928][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.481941][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.481964][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.484478][ T5810] team0: Port device team_slave_1 added [ 89.489113][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.490073][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.490085][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.490108][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.902035][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.902047][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.902060][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.904219][ T5809] team0: Port device team_slave_0 added [ 90.046252][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.046268][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.046283][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.119493][ T5809] team0: Port device team_slave_1 added [ 90.125290][ T5797] hsr_slave_0: entered promiscuous mode [ 90.126865][ T5797] hsr_slave_1: entered promiscuous mode [ 90.354926][ T5801] hsr_slave_0: entered promiscuous mode [ 90.355712][ T5801] hsr_slave_1: entered promiscuous mode [ 90.356309][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 90.356392][ T5801] Cannot create hsr debugfs directory [ 90.368651][ T5805] hsr_slave_0: entered promiscuous mode [ 90.370057][ T5805] hsr_slave_1: entered promiscuous mode [ 90.370969][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 90.370991][ T5805] Cannot create hsr debugfs directory [ 90.768790][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.768804][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.768822][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.908698][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.908709][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.908722][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.967308][ T5119] Bluetooth: hci1: command tx timeout [ 90.967457][ T5799] Bluetooth: hci0: command tx timeout [ 91.047231][ T5799] Bluetooth: hci2: command tx timeout [ 91.153917][ T5810] hsr_slave_0: entered promiscuous mode [ 91.154695][ T5810] hsr_slave_1: entered promiscuous mode [ 91.155272][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 91.155296][ T5810] Cannot create hsr debugfs directory [ 91.207371][ T5799] Bluetooth: hci4: command tx timeout [ 91.287276][ T5799] Bluetooth: hci3: command tx timeout [ 91.663197][ T5809] hsr_slave_0: entered promiscuous mode [ 91.664042][ T5809] hsr_slave_1: entered promiscuous mode [ 91.664780][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 91.664803][ T5809] Cannot create hsr debugfs directory [ 92.586965][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.626272][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.663291][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.713041][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.814631][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.852781][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.893198][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.928652][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.049624][ T5799] Bluetooth: hci0: command tx timeout [ 93.049653][ T5799] Bluetooth: hci1: command tx timeout [ 93.051217][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.102583][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.127535][ T5119] Bluetooth: hci2: command tx timeout [ 93.151556][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.197768][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.288506][ T5119] Bluetooth: hci4: command tx timeout [ 93.325215][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.350255][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.367449][ T5119] Bluetooth: hci3: command tx timeout [ 93.396893][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.445023][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.536752][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.566489][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.595385][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.641912][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.675179][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.745681][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.780747][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.781357][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.790788][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.825822][ T2240] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.825927][ T2240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.887610][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.925645][ T2240] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.925772][ T2240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.949152][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.973246][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.973352][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.035377][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.056104][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.077730][ T2240] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.077930][ T2240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.131809][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.132033][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.205509][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.255398][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.281461][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.282437][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.333136][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.333277][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.399801][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.444157][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.445072][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.486293][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.489935][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.501693][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.815732][ T5797] veth0_vlan: entered promiscuous mode [ 94.820282][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.869200][ T5797] veth1_vlan: entered promiscuous mode [ 94.975742][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.089923][ T5801] veth0_vlan: entered promiscuous mode [ 95.114506][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.132020][ T5797] veth0_macvtap: entered promiscuous mode [ 95.150168][ T5801] veth1_vlan: entered promiscuous mode [ 95.165387][ T5797] veth1_macvtap: entered promiscuous mode [ 95.259258][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.283063][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.284924][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.345315][ T1481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.368365][ T1481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.371114][ T5801] veth0_macvtap: entered promiscuous mode [ 95.379930][ T1481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.387982][ T1481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.390815][ T5810] veth0_vlan: entered promiscuous mode [ 95.402418][ T5801] veth1_macvtap: entered promiscuous mode [ 95.513404][ T5810] veth1_vlan: entered promiscuous mode [ 95.592199][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.639384][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.674117][ T5809] veth0_vlan: entered promiscuous mode [ 95.678199][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.678222][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.707083][ T2240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.716593][ T2240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.740180][ T2240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.745274][ T2240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.790007][ T5809] veth1_vlan: entered promiscuous mode [ 95.853988][ T5810] veth0_macvtap: entered promiscuous mode [ 95.864975][ T5805] veth0_vlan: entered promiscuous mode [ 95.867848][ T2240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.867866][ T2240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.945235][ T5810] veth1_macvtap: entered promiscuous mode [ 96.019812][ T5805] veth1_vlan: entered promiscuous mode [ 96.093784][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.127723][ T2240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.127743][ T2240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.146762][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.152471][ T5809] veth0_macvtap: entered promiscuous mode [ 96.235705][ T5809] veth1_macvtap: entered promiscuous mode [ 96.268414][ T2240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.272544][ T2240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.272616][ T2240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.272628][ T2240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.275170][ T2240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.322445][ T2240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.244277][ T5805] veth0_macvtap: entered promiscuous mode [ 97.289723][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.394272][ T5805] veth1_macvtap: entered promiscuous mode [ 97.457588][ T5119] Bluetooth: hci1: unexpected event 0x05 length: 6 > 4 [ 97.466997][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.544241][ T4001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.545667][ T4001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.546631][ T4001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.580225][ T4001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.670221][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.675332][ T4001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.675351][ T4001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.559052][ T5926] ================================================================== [ 98.559068][ T5926] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 98.559111][ T5926] Read of size 8 at addr ffff8880332a8af8 by task syz.1.8/5926 [ 98.559128][ T5926] [ 98.559150][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.559173][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.559192][ T5926] Call Trace: [ 98.559203][ T5926] [ 98.559212][ T5926] dump_stack_lvl+0x189/0x250 [ 98.559236][ T5926] ? __kasan_check_byte+0x12/0x40 [ 98.559258][ T5926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.559281][ T5926] ? lock_release+0x4b/0x3e0 [ 98.559305][ T5926] ? __virt_addr_valid+0x4a5/0x5c0 [ 98.559329][ T5926] print_report+0xca/0x240 [ 98.559354][ T5926] ? change_page_attr_set_clr+0x625/0xfc0 [ 98.559380][ T5926] kasan_report+0x118/0x150 [ 98.559400][ T5926] ? change_page_attr_set_clr+0x625/0xfc0 [ 98.559430][ T5926] change_page_attr_set_clr+0x625/0xfc0 [ 98.559460][ T5926] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 98.559486][ T5926] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 98.559509][ T5926] ? memtype_reserve+0x874/0xb30 [ 98.559540][ T5926] _set_pages_array+0x145/0x270 [ 98.559560][ T5926] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 98.559585][ T5926] ? drm_gem_shmem_mmap+0x18b/0x450 [ 98.559614][ T5926] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 98.559640][ T5926] ? rt_read_unlock+0x150/0x220 [ 98.559667][ T5926] drm_gem_shmem_mmap+0x193/0x450 [ 98.559691][ T5926] drm_gem_mmap_obj+0x18a/0x4e0 [ 98.559712][ T5926] drm_gem_mmap+0x38d/0x640 [ 98.559732][ T5926] ? __pfx_drm_gem_mmap+0x10/0x10 [ 98.559751][ T5926] ? __mas_set_range+0x12f/0x3c0 [ 98.559780][ T5926] mmap_region+0x18c9/0x20f0 [ 98.559805][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.559839][ T5926] ? __pfx_mmap_region+0x10/0x10 [ 98.559897][ T5926] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 98.559933][ T5926] ? bpf_lsm_mmap_addr+0x9/0x20 [ 98.559955][ T5926] ? security_mmap_addr+0x71/0x270 [ 98.559980][ T5926] ? shmem_mapping+0xd/0x50 [ 98.559996][ T5926] ? memfd_check_seals_mmap+0xcb/0x210 [ 98.560022][ T5926] do_mmap+0xc23/0x10c0 [ 98.560043][ T5926] ? __pfx_do_mmap+0x10/0x10 [ 98.560059][ T5926] ? rwbase_write_lock+0x56f/0x750 [ 98.560081][ T5926] ? __lock_acquire+0xab9/0xd20 [ 98.560103][ T5926] vm_mmap_pgoff+0x2a9/0x4d0 [ 98.560134][ T5926] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 98.560160][ T5926] ? __fget_files+0x2a/0x420 [ 98.560182][ T5926] ? __fget_files+0x3a6/0x420 [ 98.560201][ T5926] ? __fget_files+0x2a/0x420 [ 98.560222][ T5926] ksys_mmap_pgoff+0x4e9/0x720 [ 98.560241][ T5926] ? __x64_sys_mmap+0x7f/0x140 [ 98.560269][ T5926] do_syscall_64+0xfa/0xfa0 [ 98.560286][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.560312][ T5926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.560331][ T5926] ? clear_bhb_loop+0x60/0xb0 [ 98.560352][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.560371][ T5926] RIP: 0033:0x7faf6af2efc9 [ 98.560393][ T5926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.560409][ T5926] RSP: 002b:00007faf6916d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 98.560431][ T5926] RAX: ffffffffffffffda RBX: 00007faf6b186090 RCX: 00007faf6af2efc9 [ 98.560447][ T5926] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 98.560460][ T5926] RBP: 00007faf6afb1f91 R08: 0000000000000009 R09: 0000000100000000 [ 98.560474][ T5926] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 98.560487][ T5926] R13: 00007faf6b186128 R14: 00007faf6b186090 R15: 00007fff31706278 [ 98.560510][ T5926] [ 98.560517][ T5926] [ 98.560525][ T5926] Allocated by task 5926: [ 98.560534][ T5926] kasan_save_track+0x3e/0x80 [ 98.560550][ T5926] __kasan_kmalloc+0x93/0xb0 [ 98.560566][ T5926] __kvmalloc_node_noprof+0x3fd/0x920 [ 98.560585][ T5926] drm_gem_get_pages+0x169/0xa30 [ 98.560605][ T5926] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 98.560627][ T5926] drm_gem_shmem_mmap+0x193/0x450 [ 98.560647][ T5926] drm_gem_mmap_obj+0x18a/0x4e0 [ 98.560663][ T5926] drm_gem_mmap+0x38d/0x640 [ 98.560679][ T5926] mmap_region+0x18c9/0x20f0 [ 98.560700][ T5926] do_mmap+0xc23/0x10c0 [ 98.560714][ T5926] vm_mmap_pgoff+0x2a9/0x4d0 [ 98.560739][ T5926] ksys_mmap_pgoff+0x4e9/0x720 [ 98.560754][ T5926] do_syscall_64+0xfa/0xfa0 [ 98.560769][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.560786][ T5926] [ 98.560790][ T5926] The buggy address belongs to the object at ffff8880332a8a00 [ 98.560790][ T5926] which belongs to the cache kmalloc-256 of size 256 [ 98.560806][ T5926] The buggy address is located 0 bytes to the right of [ 98.560806][ T5926] allocated 248-byte region [ffff8880332a8a00, ffff8880332a8af8) [ 98.560827][ T5926] [ 98.560832][ T5926] The buggy address belongs to the physical page: [ 98.560850][ T5926] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x332a8 [ 98.560867][ T5926] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 98.560883][ T5926] flags: 0x80000000000040(head|node=0|zone=1) [ 98.560905][ T5926] page_type: f5(slab) [ 98.560923][ T5926] raw: 0080000000000040 ffff88813ff26b40 dead000000000122 0000000000000000 [ 98.560939][ T5926] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 98.560957][ T5926] head: 0080000000000040 ffff88813ff26b40 dead000000000122 0000000000000000 [ 98.560973][ T5926] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 98.560990][ T5926] head: 0080000000000001 ffffea0000ccaa01 00000000ffffffff 00000000ffffffff [ 98.561006][ T5926] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 98.561015][ T5926] page dumped because: kasan: bad access detected [ 98.561028][ T5926] page_owner tracks the page as allocated [ 98.561035][ T5926] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5851, tgid 5851 (udevd), ts 97624635183, free_ts 97577696792 [ 98.561068][ T5926] post_alloc_hook+0x240/0x2a0 [ 98.561084][ T5926] get_page_from_freelist+0x28c0/0x2960 [ 98.561105][ T5926] __alloc_frozen_pages_noprof+0x181/0x370 [ 98.561125][ T5926] alloc_pages_mpol+0xd1/0x380 [ 98.561143][ T5926] allocate_slab+0x96/0x3a0 [ 98.561166][ T5926] ___slab_alloc+0xb12/0x13f0 [ 98.561185][ T5926] __slab_alloc+0xc6/0x1f0 [ 98.561205][ T5926] __kmalloc_noprof+0x14b/0x7d0 [ 98.561221][ T5926] security_inode_init_security+0x107/0x3f0 [ 98.561239][ T5926] shmem_mknod+0x1f6/0x3e0 [ 98.561260][ T5926] path_openat+0x1500/0x3840 [ 98.561283][ T5926] do_filp_open+0x1fa/0x410 [ 98.561305][ T5926] do_sys_openat2+0x121/0x1c0 [ 98.561325][ T5926] __x64_sys_openat+0x138/0x170 [ 98.561346][ T5926] do_syscall_64+0xfa/0xfa0 [ 98.561360][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.561377][ T5926] page last free pid 28 tgid 28 stack trace: [ 98.561387][ T5926] __free_frozen_pages+0xfb6/0x1140 [ 98.561404][ T5926] rcu_cpu_kthread+0xbf6/0x1b50 [ 98.561424][ T5926] smpboot_thread_fn+0x542/0xa60 [ 98.561439][ T5926] kthread+0x711/0x8a0 [ 98.561457][ T5926] ret_from_fork+0x4bc/0x870 [ 98.561480][ T5926] ret_from_fork_asm+0x1a/0x30 [ 98.561502][ T5926] [ 98.561507][ T5926] Memory state around the buggy address: [ 98.561516][ T5926] ffff8880332a8980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.561529][ T5926] ffff8880332a8a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 98.561543][ T5926] >ffff8880332a8a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 98.561552][ T5926] ^ [ 98.561564][ T5926] ffff8880332a8b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.561577][ T5926] ffff8880332a8b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.561592][ T5926] ================================================================== [ 98.561609][ T5926] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.561623][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.561645][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.561656][ T5926] Call Trace: [ 98.561664][ T5926] [ 98.561672][ T5926] dump_stack_lvl+0x99/0x250 [ 98.561694][ T5926] ? __asan_memcpy+0x40/0x70 [ 98.561720][ T5926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.561743][ T5926] ? __pfx__printk+0x10/0x10 [ 98.561770][ T5926] vpanic+0x237/0x6d0 [ 98.561789][ T5926] ? __pfx_vpanic+0x10/0x10 [ 98.561812][ T5926] panic+0xb9/0xc0 [ 98.561829][ T5926] ? __pfx_panic+0x10/0x10 [ 98.561845][ T5926] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 98.561875][ T5926] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 98.561907][ T5926] ? change_page_attr_set_clr+0x625/0xfc0 [ 98.561933][ T5926] check_panic_on_warn+0x89/0xb0 [ 98.561956][ T5926] ? change_page_attr_set_clr+0x625/0xfc0 [ 98.561982][ T5926] end_report+0x78/0x160 [ 98.562001][ T5926] kasan_report+0x129/0x150 [ 98.562022][ T5926] ? change_page_attr_set_clr+0x625/0xfc0 [ 98.562052][ T5926] change_page_attr_set_clr+0x625/0xfc0 [ 98.562082][ T5926] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 98.562108][ T5926] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 98.562132][ T5926] ? memtype_reserve+0x874/0xb30 [ 98.562163][ T5926] _set_pages_array+0x145/0x270 [ 98.562183][ T5926] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 98.562206][ T5926] ? drm_gem_shmem_mmap+0x18b/0x450 [ 98.562230][ T5926] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 98.562255][ T5926] ? rt_read_unlock+0x150/0x220 [ 98.562280][ T5926] drm_gem_shmem_mmap+0x193/0x450 [ 98.562305][ T5926] drm_gem_mmap_obj+0x18a/0x4e0 [ 98.562325][ T5926] drm_gem_mmap+0x38d/0x640 [ 98.562345][ T5926] ? __pfx_drm_gem_mmap+0x10/0x10 [ 98.562365][ T5926] ? __mas_set_range+0x12f/0x3c0 [ 98.562393][ T5926] mmap_region+0x18c9/0x20f0 [ 98.562417][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.562452][ T5926] ? __pfx_mmap_region+0x10/0x10 [ 98.562510][ T5926] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 98.562546][ T5926] ? bpf_lsm_mmap_addr+0x9/0x20 [ 98.562568][ T5926] ? security_mmap_addr+0x71/0x270 [ 98.562598][ T5926] ? shmem_mapping+0xd/0x50 [ 98.562614][ T5926] ? memfd_check_seals_mmap+0xcb/0x210 [ 98.562640][ T5926] do_mmap+0xc23/0x10c0 [ 98.562661][ T5926] ? __pfx_do_mmap+0x10/0x10 [ 98.562678][ T5926] ? rwbase_write_lock+0x56f/0x750 [ 98.562700][ T5926] ? __lock_acquire+0xab9/0xd20 [ 98.562722][ T5926] vm_mmap_pgoff+0x2a9/0x4d0 [ 98.562754][ T5926] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 98.562782][ T5926] ? __fget_files+0x2a/0x420 [ 98.562804][ T5926] ? __fget_files+0x3a6/0x420 [ 98.562823][ T5926] ? __fget_files+0x2a/0x420 [ 98.562844][ T5926] ksys_mmap_pgoff+0x4e9/0x720 [ 98.562863][ T5926] ? __x64_sys_mmap+0x7f/0x140 [ 98.562891][ T5926] do_syscall_64+0xfa/0xfa0 [ 98.562908][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.562934][ T5926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.562953][ T5926] ? clear_bhb_loop+0x60/0xb0 [ 98.562974][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.562993][ T5926] RIP: 0033:0x7faf6af2efc9 [ 98.563009][ T5926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.563024][ T5926] RSP: 002b:00007faf6916d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 98.563044][ T5926] RAX: ffffffffffffffda RBX: 00007faf6b186090 RCX: 00007faf6af2efc9 [ 98.563059][ T5926] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 98.563072][ T5926] RBP: 00007faf6afb1f91 R08: 0000000000000009 R09: 0000000100000000 [ 98.563085][ T5926] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 98.563097][ T5926] R13: 00007faf6b186128 R14: 00007faf6b186090 R15: 00007fff31706278 [ 98.563120][ T5926] [ 98.563368][ T5926] Kernel Offset: disabled