last executing test programs: 6.517484802s ago: executing program 1 (id=2): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) mmap$auto(0x0, 0xf, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) connect$auto(0x3, 0x0, 0x54) 3.998199s ago: executing program 1 (id=12): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x4) lsm_get_self_attr$auto(0x2, 0x0, &(0x7f00000008c0)=0x1ff, 0xfffffffd) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/005/001\x00', 0x12081, 0x0) read$auto(r2, &(0x7f0000000140)='\'\x00', 0x4) ioctl$auto_USBDEVFS_SUBMITURB32(r3, 0x802c550a, &(0x7f0000000080)={0x4, 0x4, 0x401, 0x9, 0x7, 0x7fffffff, 0x7, 0x80000800, 0x3, 0xff, 0xffff0000, 0x2, [{0xb, 0x72, 0x5}, {0x8, 0x9, 0x5}, {0x1, 0x8, 0x2}, {0x8000, 0x7, 0x2}, {0x4dc, 0x7, 0x7}, {0x0, 0x2, 0x3}, {0x606, 0x6d, 0x8}]}) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000180)={0x80, 0x100000}) 3.754008891s ago: executing program 3 (id=13): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x6) close_range$auto(0x0, r0, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) setsockopt$auto_SO_ERROR(0xffffffffffffffff, 0xfff, 0x4, 0x0, 0x3) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x21, 0x101}, 0x9}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = getsockopt$auto(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x24044000) mmap$auto(0x2000000, 0x40009, 0xdf, 0x9b72, 0x7, 0x28200) socket(0x2c, 0x3, 0x10000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) 3.541047143s ago: executing program 0 (id=14): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\\\x00', 0xf4a, 0x100000001) pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x7f) mmap$auto(0x0, 0x2020009, 0x800000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(0x0, 0x40bc2, 0x1c0) write$auto(r0, 0x0, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x641, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.392027702s ago: executing program 3 (id=16): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x80004508, 0xffffffffffffffff) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@info={0xffffffffffffffff, 0x380, 0x9752}, 0x8) r1 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x4201, 0x0) write$auto(r1, 0x0, 0x7) pread64$auto(0xffffffffffffffff, 0x0, 0x10001, 0x830) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.483073598s ago: executing program 0 (id=17): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0xa, 0x9) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'dummy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0) unshare$auto(0x40000080) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 2.457887494s ago: executing program 2 (id=18): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a401, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x5, 0x63, 0x0, 0x0, 0x0, 0x49, 0x200, 0x800000000100002, 0x40000407, 0x2, 0xfffffffffffffffe, 0x2, 0x19, 0x2000000000d, 0x7}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xffd}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000180)="3bb52db856f2ba82c1461bc3adb87f16f1af6bc87fe3d0661749cbfd96367a9d17814b162df12acbf18ca85216b13a5aa9e1a6a39e0722ddd1e881", 0x1ffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xc018aec0, 0x38) 2.209060973s ago: executing program 3 (id=19): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) unshare$auto(0x40000080) mmap$auto(0x7, 0x40009, 0x9, 0x9b71, 0xffffffffffffffff, 0x4028000) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) pidfd_getfd$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000040)="9bbf5f", 0x3) r0 = socket(0x10, 0x7, 0xf) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, 0x0, 0x4000090) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 1.83191423s ago: executing program 0 (id=20): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x163b40, 0x175) socket(0xa, 0x1, 0x84) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 1.7619782s ago: executing program 2 (id=21): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x11, 0x80003, 0x300) socket(0xa, 0x3, 0x6) bpf$auto(0x0, 0x0, 0x92) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x11, 0xa, 0x9) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) fsopen$auto(0x0, 0x1) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.676231243s ago: executing program 0 (id=22): inotify_init1$auto(0x3000000000000) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8) clock_nanosleep$auto(0xb, 0xa000001c, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x404480, 0x0) sysfs$auto(0x2, 0x3e, 0x0) fanotify_init$auto(0x89, 0x8000) open$dir(&(0x7f0000000000)='./file0\x00', 0x208002, 0x4) 1.196574418s ago: executing program 1 (id=23): mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x1, 0x84) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES64=r0], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80) 1.169243707s ago: executing program 3 (id=24): modify_ldt$auto(0x0, &(0x7f0000000180)="64838369409871859b0a951bb01d88efbf1b2e30935780697480c39c380fa3e60754275446eab06b8b6d7aa3e1aefaf3e22da26016a32937ad406f2a81574ec936057145a4ae842320d912e2adc214a7b057ccb665305439b392d4ecfb25aabee22a82fc05edf519c441d434077a1b1e964204c248a5dfc33c09f80625542d33dfbcc0a82a872a2bf17ef640c5777fb36f724314f9187b98bea96900ddc39f0465fda1146a81f905b6f1867e49fbcb663e4bbed8a76733fcf927b9740f821534fb", 0x1) r0 = socket(0x29, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000040)=@generic={0x8, "00010100"}, 0x5c) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20440, 0x0) ioctl$auto_SNDCTL_TMR_SELECT(r2, 0x40045408, &(0x7f0000000080)="82fe745df4ac52ea0de7c72eec86bb8fd48fe02f620757bbd918ad2e69325cd4f515915d1d22e021abc4aa2b4a1b7533860ae4685d18995bc86a5a779c0c385f256c5e9f738808f8b458629725d7140a9ef682ece43d04eb6d2097a10747b5be") sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x31, 0x1, 0x6}]}, 0x10e}}, 0x10004010) 1.084496416s ago: executing program 2 (id=25): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0x7f366afe, 0x401, 0x8000) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy0/total_ps_buffered\x00', 0x88000, 0x0) read$auto(r0, &(0x7f0000001200)='\x00', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x3a, 0xffffffffffffffff, 0x3) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) sysfs$auto(0x2, 0x10000000000002c, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x149942, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) write$auto_uhid_fops_uhid(r1, 0x0, 0x0) memfd_create$auto(&(0x7f0000000100)='l2tp\x00', 0x100) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) 975.948245ms ago: executing program 2 (id=26): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/snd/midiC2D2\x00', 0x40881, 0x0) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r0, 0xc0585605, r0) 960.157215ms ago: executing program 1 (id=27): close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x160, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x61, 0xe8, "ca26b094d839fd374b69801e1ad226e8a4eb2b1028577be745ee058c93f1d02a3741bce73d31415fcc149eb6477eb5ba7cf466a442cfa9377043778b47dd1cb3617ca60c81dec99e78695bbf39baf0b2b977cef3a812984198bc18c865"}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x7}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0xfff8}, @NL80211_ATTR_VENDOR_DATA={0xc7, 0xc5, "bc1ca65d99dadbcccf7919ff9f23779efbf8da2eb09511b33d596a7a178c6b45f8f1c9d13c71828b051aff3c08330a38952ea131a455645d2b64154a761816a0cc2ee1ae21acf2efb62aa621807d07e4aa36dce937b20ad9eeb0db8819742a317a929a86744c6b45a804398b233b0c0707fd5b968279a395d2be265f5e0095743b4a0b15e6616b5256754ecdee03b384b33c6b101bd668b50787a66cb5cc6f2b58fd6d515d0e9dceddcdad8d8563398ae11e0117e543ade17cb65ec99a7d6bfb576904"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "a3eef8"}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = socket(0x2, 0x1, 0x106) recvfrom$auto(r2, 0x0, 0x0, 0xc84, &(0x7f0000000080)=@sco, &(0x7f00000000c0)=0x7fff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) fremovexattr$auto(r0, &(0x7f0000000040)='s}stem.\xa5\x1aE\x8d\x9e\xb9\x81\xf0\x01\xc2\xa9\xe9\x8d\x87/\xe7') sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x5, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x5}, {0x100, 0x1, 0x52, 0x5, 0x101, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x14, 0x0, 0x83) 810.639125ms ago: executing program 0 (id=28): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp8\x00', 0x600, 0x0) ioctl$auto(0x3, 0x402c542d, r2) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffff8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xe}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2400c04d}, 0x50) write$auto(0xffffffffffffffff, &(0x7f0000000200)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x9c\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe9\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2\x96\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf0L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xe4\xe2\xf4(\x05\xf6g5\x1f\xa0\x8e\xeb\xc0\x84\x80^\xff\x99m\x99\x1b\xd0\xf3\x00Z\xf3}\xc4\xb0_\xde\f\xfeR=\x88\xbe\xeda\xfc\x17\x85\x107u\x00\x00\x00\x00\x00\x00\x00', 0x8001) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff2, 0x456, 0x0, 0x0}) 524.460643ms ago: executing program 2 (id=29): socket(0x23, 0x6, 0x7ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) lsetxattr$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='\x00', 0x0, 0x7, 0x2f) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) munmap$auto(0x9, 0x9076) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) read$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, 0x0, 0xa3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) 511.537564ms ago: executing program 1 (id=30): mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000f7dbdf250100083f060002"], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x80) socket(0x10, 0x2, 0x0) r0 = socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket(0x11, 0x80003, 0x300) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 503.049843ms ago: executing program 3 (id=31): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x2, 0x6) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x800455cc, 0x0) 393.04784ms ago: executing program 0 (id=32): mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\a\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5) sysfs$auto(0x2, 0x3e, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) 246.39819ms ago: executing program 3 (id=33): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x100006, 0x0) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/Writeback-1/output_bpc\x00', 0x101000, 0x0) lseek$auto(r0, 0x7fffffffffffffff, 0x1) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x28, 0x0, 0xc) write$auto_console_fops_tty_io(r1, &(0x7f00000000c0)="c80d1b5d399b58116143ff9d524529f94c9b16d4a3444befb1767965a7b84b407741f36c8abe079d5f089ad5f0be89ae4b277ef6417c16a45b8e3a9907ed045a695e6517db43475709e0ffcc1d40689b503600d12f142b098f80864904cbc8c703c0ee645564962683e5a24d167cbdb9b145a1ee2552dac57b50bee0bbe351584981c54da4b181f84727739c8e727cabecadffb6cf34d025c6b2035316a45970e6a95f3856f1353395320a1b9da849fa42ce63d95bf6900fe217af", 0xbb) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x50100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) write$auto(r3, 0x0, 0xf) 137.411443ms ago: executing program 1 (id=34): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x540b, r0) 0s ago: executing program 2 (id=35): mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x2, 0x3c, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) msync$auto(0x200000, 0x2000000005, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 78.240568][ T5620] cgroup: Unknown subsys name 'net' [ 78.348627][ T5620] cgroup: Unknown subsys name 'cpuset' [ 78.357168][ T5620] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.836501][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.741004][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.753112][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.761943][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.774311][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.785518][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.791970][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.793316][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.803674][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.809740][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.823326][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.823794][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.832706][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.840017][ T5647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.853774][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.855302][ T5647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.864037][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.871894][ T5647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.875536][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.891230][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.900276][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.594970][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.602774][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.610545][ T5641] bridge_slave_0: entered allmulticast mode [ 83.617790][ T5641] bridge_slave_0: entered promiscuous mode [ 83.652270][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.659528][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.666805][ T5641] bridge_slave_1: entered allmulticast mode [ 83.674088][ T5641] bridge_slave_1: entered promiscuous mode [ 83.778929][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.788294][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.796968][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.804375][ T5631] bridge_slave_0: entered allmulticast mode [ 83.811405][ T5631] bridge_slave_0: entered promiscuous mode [ 83.826871][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.834476][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.841657][ T5632] bridge_slave_0: entered allmulticast mode [ 83.849301][ T5632] bridge_slave_0: entered promiscuous mode [ 83.859353][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.880805][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.888151][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.895822][ T5631] bridge_slave_1: entered allmulticast mode [ 83.902939][ T5631] bridge_slave_1: entered promiscuous mode [ 83.918926][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.926195][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.933473][ T5632] bridge_slave_1: entered allmulticast mode [ 83.940496][ T5632] bridge_slave_1: entered promiscuous mode [ 83.966065][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.973363][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.980711][ T5636] bridge_slave_0: entered allmulticast mode [ 83.988366][ T5636] bridge_slave_0: entered promiscuous mode [ 83.995343][ T50] Bluetooth: hci3: command tx timeout [ 83.995522][ T50] Bluetooth: hci1: command tx timeout [ 84.001286][ T5633] Bluetooth: hci0: command tx timeout [ 84.007501][ T4948] Bluetooth: hci2: command tx timeout [ 84.028233][ T5641] team0: Port device team_slave_0 added [ 84.044523][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.051962][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.059405][ T5636] bridge_slave_1: entered allmulticast mode [ 84.067107][ T5636] bridge_slave_1: entered promiscuous mode [ 84.102785][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.114144][ T5641] team0: Port device team_slave_1 added [ 84.122060][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.143017][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.177432][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.189067][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.229457][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.240845][ T5632] team0: Port device team_slave_0 added [ 84.248519][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.255976][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.282147][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.330950][ T5632] team0: Port device team_slave_1 added [ 84.337340][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.344362][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.370821][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.384032][ T5631] team0: Port device team_slave_0 added [ 84.419842][ T5631] team0: Port device team_slave_1 added [ 84.427319][ T5636] team0: Port device team_slave_0 added [ 84.453683][ T5636] team0: Port device team_slave_1 added [ 84.470951][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.478065][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.504611][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.554439][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.561563][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.588018][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.610951][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.618015][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.644581][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.666894][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.674403][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.700433][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.713456][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.720450][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.746553][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.764164][ T5641] hsr_slave_0: entered promiscuous mode [ 84.770642][ T5641] hsr_slave_1: entered promiscuous mode [ 84.778193][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.785352][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.811644][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.869574][ T5632] hsr_slave_0: entered promiscuous mode [ 84.876048][ T5632] hsr_slave_1: entered promiscuous mode [ 84.882166][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 84.888325][ T5632] Cannot create hsr debugfs directory [ 84.995951][ T5631] hsr_slave_0: entered promiscuous mode [ 85.002256][ T5631] hsr_slave_1: entered promiscuous mode [ 85.008594][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 85.014507][ T5631] Cannot create hsr debugfs directory [ 85.039789][ T5636] hsr_slave_0: entered promiscuous mode [ 85.046183][ T5636] hsr_slave_1: entered promiscuous mode [ 85.052730][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 85.058597][ T5636] Cannot create hsr debugfs directory [ 85.456997][ T5641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.472900][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.481495][ T5641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.494736][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.502676][ T5641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.512391][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.520659][ T5641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.531627][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.620613][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.631420][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.644998][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.657157][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.665439][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.675812][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.687078][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.698108][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.791864][ T5636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.802715][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.811258][ T5636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.821276][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.830630][ T5636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.842508][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.850433][ T5636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.861064][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.960129][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.997195][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.008192][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.017794][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.029374][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.047907][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.058630][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.066686][ T4948] Bluetooth: hci2: command tx timeout [ 86.067727][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.074135][ T50] Bluetooth: hci1: command tx timeout [ 86.080339][ T4948] Bluetooth: hci0: command tx timeout [ 86.085662][ T50] Bluetooth: hci3: command tx timeout [ 86.095987][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.102746][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.126929][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.134792][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.175283][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.182454][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.247821][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.315222][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.350165][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.357407][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.387795][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.417326][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.424630][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.461419][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.505555][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.512779][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.537863][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.555705][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.562903][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.635179][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.686670][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.693903][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.733998][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.741216][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.888228][ T29] cfg80211: failed to load regulatory.db [ 87.120656][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.311937][ T5641] veth0_vlan: entered promiscuous mode [ 87.366677][ T5641] veth1_vlan: entered promiscuous mode [ 87.486923][ T5641] veth0_macvtap: entered promiscuous mode [ 87.517952][ T5641] veth1_macvtap: entered promiscuous mode [ 87.577566][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.616864][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.670137][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.695483][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.728383][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.748474][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.841206][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.896307][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.948915][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.982703][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.004943][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.070614][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.080583][ T5632] veth0_vlan: entered promiscuous mode [ 88.082177][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.099903][ T5636] veth0_vlan: entered promiscuous mode [ 88.125943][ T5636] veth1_vlan: entered promiscuous mode [ 88.143697][ T50] Bluetooth: hci3: command tx timeout [ 88.143718][ T4948] Bluetooth: hci2: command tx timeout [ 88.155148][ T50] Bluetooth: hci0: command tx timeout [ 88.155488][ T5645] Bluetooth: hci1: command tx timeout [ 88.188726][ T5632] veth1_vlan: entered promiscuous mode [ 88.209331][ T5641] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.212996][ T5631] veth0_vlan: entered promiscuous mode [ 88.241253][ T5631] veth1_vlan: entered promiscuous mode [ 88.354587][ T5636] veth0_macvtap: entered promiscuous mode [ 88.390841][ T5636] veth1_macvtap: entered promiscuous mode [ 88.402217][ T5632] veth0_macvtap: entered promiscuous mode [ 88.435734][ T5631] veth0_macvtap: entered promiscuous mode [ 88.461557][ T5632] veth1_macvtap: entered promiscuous mode [ 88.480126][ T5631] veth1_macvtap: entered promiscuous mode [ 88.495976][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.537400][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.557759][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.587127][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.596335][ T1177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.620245][ T1177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.636723][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.649211][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.659344][ T1177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.669972][ T1177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.707744][ T1177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.735733][ T5787] Zero length message leads to an empty skb [ 88.769185][ T1177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.778925][ T1177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.796770][ T1177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.810272][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.843555][ T1177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.857702][ T1177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.897650][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.977372][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.990156][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.089607][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.098648][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.124456][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.152345][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.236954][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.251845][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.524669][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.524695][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.597927][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.597951][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.224068][ T4948] Bluetooth: hci0: command tx timeout [ 90.224091][ T5645] Bluetooth: hci3: command tx timeout [ 90.229775][ T50] Bluetooth: hci2: command tx timeout [ 90.234972][ T5633] Bluetooth: hci1: command tx timeout [ 91.563827][ T5843] netlink: 25 bytes leftover after parsing attributes in process `syz.3.9'. [ 91.930335][ T5850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 92.022776][ T5852] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.573480][ T5869] FAULT_INJECTION: forcing a failure. [ 92.573480][ T5869] name failslab, interval 1, probability 0, space 0, times 1 [ 92.600838][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 92.600894][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.600915][ T5869] Call Trace: [ 92.600925][ T5869] [ 92.600935][ T5869] dump_stack_lvl+0x100/0x190 [ 92.600977][ T5869] should_fail_ex.cold+0x5/0xa [ 92.601043][ T5869] should_failslab+0xc2/0x120 [ 92.601079][ T5869] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 92.601129][ T5869] ? __proc_create+0x2cb/0x8c0 [ 92.601172][ T5869] __proc_create+0x2cb/0x8c0 [ 92.601210][ T5869] ? __pfx___proc_create+0x10/0x10 [ 92.601244][ T5869] ? do_raw_spin_lock+0x128/0x260 [ 92.601288][ T5869] proc_create_reg+0x75/0x170 [ 92.601330][ T5869] proc_create_net_data+0x8e/0x1c0 [ 92.601377][ T5869] ? __pfx_proc_create_net_data+0x10/0x10 [ 92.601418][ T5869] ? __pfx___netlink_kernel_create+0x10/0x10 [ 92.601470][ T5869] fib_proc_init+0x5e/0x1d0 [ 92.601513][ T5869] fib_net_init+0x2af/0x3f0 [ 92.601546][ T5869] ? is_module_address+0x69/0xf0 [ 92.601579][ T5869] ? __pfx_fib_net_init+0x10/0x10 [ 92.601616][ T5869] ? timer_init_key+0x155/0x330 [ 92.601686][ T5869] ? __pfx_nl_fib_input+0x10/0x10 [ 92.601737][ T5869] ? devinet_init_net+0x56c/0x8d0 [ 92.601777][ T5869] ? __pfx_fib_net_init+0x10/0x10 [ 92.601808][ T5869] ops_init+0x1e2/0x5f0 [ 92.601841][ T5869] setup_net+0x118/0x3a0 [ 92.601873][ T5869] ? __pfx_setup_net+0x10/0x10 [ 92.601901][ T5869] ? mutex_init_lockdep+0xf1/0x120 [ 92.601935][ T5869] copy_net_ns+0x46f/0x7c0 [ 92.601969][ T5869] create_new_namespaces+0x3ea/0xac0 [ 92.602010][ T5869] unshare_nsproxy_namespaces+0xf2/0x220 [ 92.602059][ T5869] ksys_unshare+0x438/0xab0 [ 92.602103][ T5869] ? __pfx_ksys_unshare+0x10/0x10 [ 92.602140][ T5869] ? xfd_validate_state+0x129/0x190 [ 92.602182][ T5869] __x64_sys_unshare+0x31/0x40 [ 92.602222][ T5869] do_syscall_64+0x115/0x840 [ 92.602261][ T5869] ? clear_bhb_loop+0x40/0x90 [ 92.602297][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.602326][ T5869] RIP: 0033:0x7f5e14d9ce59 [ 92.602349][ T5869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.602375][ T5869] RSP: 002b:00007f5e15bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 92.602410][ T5869] RAX: ffffffffffffffda RBX: 00007f5e15015fa0 RCX: 00007f5e14d9ce59 [ 92.602430][ T5869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 92.602447][ T5869] RBP: 00007f5e14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 92.602464][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.602476][ T5869] R13: 00007f5e15016038 R14: 00007f5e15015fa0 R15: 00007fffcce746d8 [ 92.602510][ T5869] [ 92.744146][ T5873] FAULT_INJECTION: forcing a failure. [ 92.744146][ T5873] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.954848][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 92.954889][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.954906][ T5873] Call Trace: [ 92.954915][ T5873] [ 92.954927][ T5873] dump_stack_lvl+0x100/0x190 [ 92.954963][ T5873] should_fail_ex.cold+0x5/0xa [ 92.954994][ T5873] ? fs_reclaim_acquire+0x70/0x100 [ 92.955032][ T5873] should_fail_alloc_page+0xeb/0x140 [ 92.955066][ T5873] prepare_alloc_pages+0x1f0/0x5f0 [ 92.955106][ T5873] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 92.955155][ T5873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 92.955201][ T5873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 92.955253][ T5873] ? stack_depot_save_flags+0x479/0x9d0 [ 92.955304][ T5873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 92.955348][ T5873] ? __lock_acquire+0x4a5/0x2630 [ 92.955392][ T5873] ? blk_trace_setup_prepare+0x35c/0x6c0 [ 92.955423][ T5873] ? blk_trace_ioctl+0x245/0x320 [ 92.955456][ T5873] ? blkdev_ioctl+0x17c/0x6f0 [ 92.955506][ T5873] ? __x64_sys_ioctl+0x18e/0x210 [ 92.955532][ T5873] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.955581][ T5873] ? find_held_lock+0x2b/0x80 [ 92.955615][ T5873] ? rcu_read_unlock+0x17/0x60 [ 92.955650][ T5873] ? rcu_read_unlock+0x17/0x60 [ 92.955684][ T5873] ? rcu_read_unlock+0x17/0x60 [ 92.955719][ T5873] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.955760][ T5873] ? policy_nodemask+0xed/0x4f0 [ 92.955797][ T5873] alloc_pages_mpol+0x1fb/0x540 [ 92.955832][ T5873] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 92.955867][ T5873] ? __kvmalloc_node_noprof+0x6af/0xa00 [ 92.955895][ T5873] ? relay_open_buf.part.0+0x199/0xb70 [ 92.955940][ T5873] alloc_pages_noprof+0x1a/0x160 [ 92.955980][ T5873] relay_open_buf.part.0+0x261/0xb70 [ 92.956025][ T5873] relay_open+0x7b9/0xa00 [ 92.956066][ T5873] blk_trace_setup_prepare+0x35c/0x6c0 [ 92.956104][ T5873] blk_trace_setup+0x217/0x440 [ 92.956142][ T5873] ? __pfx_blk_trace_setup+0x10/0x10 [ 92.956172][ T5873] ? lockdep_hardirqs_on+0x36/0x100 [ 92.956223][ T5873] ? __pfx_vsnprintf+0x10/0x10 [ 92.956281][ T5873] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.956323][ T5873] ? do_vfs_ioctl+0x226/0x13e0 [ 92.956358][ T5873] blk_trace_ioctl+0x245/0x320 [ 92.956394][ T5873] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 92.956436][ T5873] ? find_held_lock+0x2b/0x80 [ 92.956470][ T5873] ? __fget_files+0x215/0x3d0 [ 92.956509][ T5873] ? hook_file_ioctl_common+0x149/0x410 [ 92.956552][ T5873] blkdev_ioctl+0x17c/0x6f0 [ 92.956596][ T5873] ? __pfx_blkdev_ioctl+0x10/0x10 [ 92.956646][ T5873] ? __pfx_blkdev_ioctl+0x10/0x10 [ 92.956691][ T5873] __x64_sys_ioctl+0x18e/0x210 [ 92.956724][ T5873] do_syscall_64+0x115/0x840 [ 92.956763][ T5873] ? clear_bhb_loop+0x40/0x90 [ 92.956799][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.956829][ T5873] RIP: 0033:0x7fa73c79ce59 [ 92.956853][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.956880][ T5873] RSP: 002b:00007fa73a9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.956907][ T5873] RAX: ffffffffffffffda RBX: 00007fa73ca16090 RCX: 00007fa73c79ce59 [ 92.956927][ T5873] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 92.956945][ T5873] RBP: 00007fa73c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 92.956962][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.956979][ T5873] R13: 00007fa73ca16128 R14: 00007fa73ca16090 R15: 00007fff72a37548 [ 92.957018][ T5873] [ 93.269591][ T5875] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.574793][ T5885] netlink: 186 bytes leftover after parsing attributes in process `syz.2.18'. [ 93.672892][ T5886] netlink: 13 bytes leftover after parsing attributes in process `syz.0.17'. [ 94.324622][ T5898] FAULT_INJECTION: forcing a failure. [ 94.324622][ T5898] name failslab, interval 1, probability 0, space 0, times 0 [ 94.353389][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 94.353427][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.353445][ T5898] Call Trace: [ 94.353455][ T5898] [ 94.353467][ T5898] dump_stack_lvl+0x100/0x190 [ 94.353507][ T5898] should_fail_ex.cold+0x5/0xa [ 94.353546][ T5898] should_failslab+0xc2/0x120 [ 94.353582][ T5898] __kmalloc_node_noprof+0xe6/0x850 [ 94.353625][ T5898] ? alloc_slab_obj_exts+0xae/0x270 [ 94.353673][ T5898] alloc_slab_obj_exts+0xae/0x270 [ 94.353719][ T5898] __memcg_slab_post_alloc_hook+0x3c2/0xff0 [ 94.353768][ T5898] ? kasan_save_track+0x14/0x30 [ 94.353801][ T5898] kmem_cache_alloc_noprof+0x58a/0x6e0 [ 94.353845][ T5898] ? anon_vma_clone+0x2ba/0xcd0 [ 94.353890][ T5898] anon_vma_clone+0x2ba/0xcd0 [ 94.353941][ T5898] anon_vma_fork+0x1bb/0x6b0 [ 94.353986][ T5898] dup_mmap+0x143e/0x21b0 [ 94.354038][ T5898] ? __pfx_dup_mmap+0x10/0x10 [ 94.354074][ T5898] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 94.354118][ T5898] ? __lock_acquire+0x4a5/0x2630 [ 94.354162][ T5898] ? find_held_lock+0x2b/0x80 [ 94.354196][ T5898] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 94.354268][ T5898] copy_process+0x6c78/0x7ed0 [ 94.354302][ T5898] ? __futex_wait+0x256/0x300 [ 94.354360][ T5898] ? __pfx_copy_process+0x10/0x10 [ 94.354407][ T5898] ? find_held_lock+0x2b/0x80 [ 94.354458][ T5898] kernel_clone+0x176/0x9e0 [ 94.354495][ T5898] ? __pfx_futex_wait+0x10/0x10 [ 94.354533][ T5898] ? __pfx_kernel_clone+0x10/0x10 [ 94.354594][ T5898] __do_sys_clone+0xd9/0x120 [ 94.354632][ T5898] ? __pfx___do_sys_clone+0x10/0x10 [ 94.354670][ T5898] ? fd_install+0x24f/0x580 [ 94.354729][ T5898] ? rcu_is_watching+0x12/0xc0 [ 94.354766][ T5898] do_syscall_64+0x115/0x840 [ 94.354804][ T5898] ? clear_bhb_loop+0x40/0x90 [ 94.354836][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.354865][ T5898] RIP: 0033:0x7f5e14d9ce59 [ 94.354888][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.354913][ T5898] RSP: 002b:00007f5e15bcdfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 94.354941][ T5898] RAX: ffffffffffffffda RBX: 00007f5e15015fa0 RCX: 00007f5e14d9ce59 [ 94.354960][ T5898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 94.354977][ T5898] RBP: 00007f5e14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 94.354994][ T5898] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 94.355010][ T5898] R13: 00007f5e15016038 R14: 00007f5e15015fa0 R15: 00007fffcce746d8 [ 94.355049][ T5898] [ 94.676048][ T5896] netlink: 25 bytes leftover after parsing attributes in process `syz.2.21'. [ 94.822586][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 94.887115][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 95.031276][ T5906] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 95.051716][ T5906] netlink: 33 bytes leftover after parsing attributes in process `syz.3.24'. [ 95.608573][ T5931] netlink: 17 bytes leftover after parsing attributes in process `syz.1.30'. [ 95.961445][ T5939] ================================================================== [ 95.961462][ T5939] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 95.961505][ T5939] Write of size 8 at addr ffffc900049895c0 by task syz.0.32/5939 [ 95.961528][ T5939] [ 95.961540][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 95.961571][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.961588][ T5939] Call Trace: [ 95.961596][ T5939] [ 95.961607][ T5939] dump_stack_lvl+0x100/0x190 [ 95.961634][ T5939] print_report+0x13d/0x4b0 [ 95.961672][ T5939] ? _raw_spin_lock_irqsave+0x52/0x60 [ 95.961707][ T5939] ? sys_imageblit+0x19fb/0x1d60 [ 95.961737][ T5939] kasan_report+0xdf/0x1d0 [ 95.961768][ T5939] ? sys_imageblit+0x19fb/0x1d60 [ 95.961802][ T5939] sys_imageblit+0x19fb/0x1d60 [ 95.961836][ T5939] ? __pfx_sys_imageblit+0x10/0x10 [ 95.961869][ T5939] ? prb_read_valid+0x78/0xa0 [ 95.961895][ T5939] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 95.961937][ T5939] soft_cursor+0x524/0xa10 [ 95.961964][ T5939] ? __probestub_notifier_run+0x10/0x10 [ 95.962002][ T5939] ? fb_get_color_depth+0x120/0x250 [ 95.962041][ T5939] bit_cursor+0xca1/0x1490 [ 95.962070][ T5939] ? __pfx_bit_cursor+0x10/0x10 [ 95.962097][ T5939] ? __lock_acquire+0x4a5/0x2630 [ 95.962139][ T5939] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.962175][ T5939] ? get_color+0x1da/0x450 [ 95.962210][ T5939] ? __pfx_bit_cursor+0x10/0x10 [ 95.962233][ T5939] fbcon_cursor+0x43c/0x5e0 [ 95.962269][ T5939] ? add_softcursor+0x190/0x290 [ 95.962298][ T5939] set_cursor+0x1db/0x250 [ 95.962332][ T5939] con_write+0x89/0xb0 [ 95.962364][ T5939] n_tty_write+0x431/0x11c0 [ 95.962410][ T5939] ? __pfx_n_tty_write+0x10/0x10 [ 95.962447][ T5939] ? kasan_quarantine_put+0x104/0x240 [ 95.962473][ T5939] ? __pfx_woken_wake_function+0x10/0x10 [ 95.962501][ T5939] ? file_tty_write.isra.0+0x630/0x890 [ 95.962532][ T5939] ? file_tty_write.isra.0+0x694/0x890 [ 95.962563][ T5939] ? kfree+0x223/0x6c0 [ 95.962597][ T5939] ? __pfx_n_tty_write+0x10/0x10 [ 95.962635][ T5939] file_tty_write.isra.0+0x4d2/0x890 [ 95.962670][ T5939] redirected_tty_write+0xd4/0x120 [ 95.962702][ T5939] vfs_write+0x6ac/0x1070 [ 95.962731][ T5939] ? __pfx_redirected_tty_write+0x10/0x10 [ 95.962764][ T5939] ? __pfx_vfs_write+0x10/0x10 [ 95.962790][ T5939] ? find_held_lock+0x2b/0x80 [ 95.962830][ T5939] ksys_write+0x12a/0x250 [ 95.962857][ T5939] ? __pfx_ksys_write+0x10/0x10 [ 95.962887][ T5939] ? rcu_is_watching+0x12/0xc0 [ 95.962916][ T5939] do_syscall_64+0x115/0x840 [ 95.962951][ T5939] ? clear_bhb_loop+0x40/0x90 [ 95.962980][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.963007][ T5939] RIP: 0033:0x7f5e14d9ce59 [ 95.963026][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.963050][ T5939] RSP: 002b:00007f5e12bf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.963073][ T5939] RAX: ffffffffffffffda RBX: 00007f5e15016270 RCX: 00007f5e14d9ce59 [ 95.963092][ T5939] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 95.963108][ T5939] RBP: 00007f5e14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 95.963124][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.963140][ T5939] R13: 00007f5e15016308 R14: 00007f5e15016270 R15: 00007fffcce746d8 [ 95.963164][ T5939] [ 95.963173][ T5939] [ 95.963180][ T5939] The buggy address belongs to a vmalloc virtual mapping [ 95.963197][ T5939] Memory state around the buggy address: [ 95.963210][ T5939] ffffc90004989480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 95.963238][ T5939] ffffc90004989500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 95.963256][ T5939] >ffffc90004989580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 95.963270][ T5939] ^ [ 95.963284][ T5939] ffffc90004989600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 95.963302][ T5939] ffffc90004989680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 95.963327][ T5939] ================================================================== [ 95.972907][ T5939] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.972929][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 95.972958][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.972968][ T5939] Call Trace: [ 95.972973][ T5939] [ 95.972979][ T5939] dump_stack_lvl+0x100/0x190 [ 95.972997][ T5939] vpanic+0x552/0x970 [ 95.973012][ T5939] ? __pfx_vpanic+0x10/0x10 [ 95.973029][ T5939] ? sys_imageblit+0x19fb/0x1d60 [ 95.973047][ T5939] panic+0xd1/0xe0 [ 95.973060][ T5939] ? __pfx_panic+0x10/0x10 [ 95.973073][ T5939] ? sys_imageblit+0x19fb/0x1d60 [ 95.973090][ T5939] ? preempt_schedule_common+0x42/0xc0 [ 95.973112][ T5939] check_panic_on_warn.cold+0x19/0x34 [ 95.973128][ T5939] end_report.part.0+0x3a/0x90 [ 95.973149][ T5939] kasan_report.cold+0xe/0x18 [ 95.973169][ T5939] ? sys_imageblit+0x19fb/0x1d60 [ 95.973189][ T5939] sys_imageblit+0x19fb/0x1d60 [ 95.973209][ T5939] ? __pfx_sys_imageblit+0x10/0x10 [ 95.973236][ T5939] ? prb_read_valid+0x78/0xa0 [ 95.973279][ T5939] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 95.973333][ T5939] soft_cursor+0x524/0xa10 [ 95.973367][ T5939] ? __probestub_notifier_run+0x10/0x10 [ 95.973410][ T5939] ? fb_get_color_depth+0x120/0x250 [ 95.973453][ T5939] bit_cursor+0xca1/0x1490 [ 95.973486][ T5939] ? __pfx_bit_cursor+0x10/0x10 [ 95.973514][ T5939] ? __lock_acquire+0x4a5/0x2630 [ 95.973560][ T5939] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.973601][ T5939] ? get_color+0x1da/0x450 [ 95.973641][ T5939] ? __pfx_bit_cursor+0x10/0x10 [ 95.973668][ T5939] fbcon_cursor+0x43c/0x5e0 [ 95.973709][ T5939] ? add_softcursor+0x190/0x290 [ 95.973741][ T5939] set_cursor+0x1db/0x250 [ 95.973771][ T5939] con_write+0x89/0xb0 [ 95.973806][ T5939] n_tty_write+0x431/0x11c0 [ 95.973854][ T5939] ? __pfx_n_tty_write+0x10/0x10 [ 95.973896][ T5939] ? kasan_quarantine_put+0x104/0x240 [ 95.973925][ T5939] ? __pfx_woken_wake_function+0x10/0x10 [ 95.973957][ T5939] ? file_tty_write.isra.0+0x630/0x890 [ 95.973993][ T5939] ? file_tty_write.isra.0+0x694/0x890 [ 95.974028][ T5939] ? kfree+0x223/0x6c0 [ 95.974067][ T5939] ? __pfx_n_tty_write+0x10/0x10 [ 95.974110][ T5939] file_tty_write.isra.0+0x4d2/0x890 [ 95.974151][ T5939] redirected_tty_write+0xd4/0x120 [ 95.974186][ T5939] vfs_write+0x6ac/0x1070 [ 95.974219][ T5939] ? __pfx_redirected_tty_write+0x10/0x10 [ 95.974257][ T5939] ? __pfx_vfs_write+0x10/0x10 [ 95.974287][ T5939] ? find_held_lock+0x2b/0x80 [ 95.974375][ T5939] ksys_write+0x12a/0x250 [ 95.974392][ T5939] ? __pfx_ksys_write+0x10/0x10 [ 95.974409][ T5939] ? rcu_is_watching+0x12/0xc0 [ 95.974428][ T5939] do_syscall_64+0x115/0x840 [ 95.974448][ T5939] ? clear_bhb_loop+0x40/0x90 [ 95.974465][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.974480][ T5939] RIP: 0033:0x7f5e14d9ce59 [ 95.974493][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.974507][ T5939] RSP: 002b:00007f5e12bf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.974522][ T5939] RAX: ffffffffffffffda RBX: 00007f5e15016270 RCX: 00007f5e14d9ce59 [ 95.974533][ T5939] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 95.974542][ T5939] RBP: 00007f5e14e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 95.974552][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.974561][ T5939] R13: 00007f5e15016308 R14: 00007f5e15016270 R15: 00007fffcce746d8 [ 95.974576][ T5939] [ 95.974869][ T5939] Kernel Offset: disabled