last executing test programs: 8.798850433s ago: executing program 1 (id=393): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x80, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/user_reserve_kbytes\x00', 0x103142, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x6) tee$auto(r3, r0, 0x3, 0x401) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r4 = socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0xfffe, @remote}, 0x55) setsockopt$auto(r2, 0x1, 0x41, 0x0, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, &(0x7f0000000080)={0x0, 0x8}, 0x4) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/dfscache\x00', 0xc2402, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) ioctl$auto_CEC_G_MODE(r4, 0x80046108, &(0x7f0000000140)=0x8) read$auto(0x3, 0x0, 0x80) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000040)={0x100, [0x3, 0xc1f5, 0x2], [{0x8000, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x2, 0x1}, {0xfffffff8, 0x1ff}, {0x5, 0x7, 0x1, 0x1, 0x1}, {0xe, 0x9, 0x1, 0x0, 0x1}, {0x401, 0x8, 0x1, 0x0, 0x1}, {0x2, 0x40e04f8a, 0x0, 0x1, 0x1, 0x1}, {0xab5, 0x3}, {0x1, 0x40, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x5, 0x0, 0x1, 0x1}, {0xffff, 0x7, 0x0, 0x0, 0x1}, {0x891e, 0xfffff0a9, 0x0, 0x0, 0x1, 0x1}], 0x10001, 0x1, 0x2, 0x4, 0x9ab, 0xcb, 0x1, "6d9693d7de5baaa01382778a9b429a69012f1b06a68c7d51f742e0d535ac6323cc2c145468fda1b80412c4cadd0b633a296b771df34664a6163124579fa712c3"}) write$auto(0x3, 0x0, 0xfffffdef) 7.569886787s ago: executing program 1 (id=398): r0 = socket(0xa, 0x3, 0x84) getsockopt$auto(r0, 0x82, 0x8, 0x0, 0x0) mknod$auto(&(0x7f0000000240)='./file0/file0\x00', 0x4, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x101a01, 0x120) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, r0, 0x8) clock_nanosleep$auto(0x800000, 0xfffffffe, &(0x7f0000000180)={0x400040, 0x9}, &(0x7f00000001c0)={0x8000000000001c, 0xfffffffffffffffa}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyy9\x00', 0x4aa6db18c8b4a00c, 0x0) r1 = socket(0x2, 0x5, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x40, &(0x7f00000002c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,&\xd5z\xe6\x93\xb9\aE\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000110) connect$auto(0x3, &(0x7f0000000080)=@hci={0x1f, 0x3, 0x3}, 0x54) shutdown$auto(r1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x627c2, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x200000000000000, 0x400006, 0xdf, 0x12, 0x2, 0x8001) madvise$auto(0x0, 0xffffffffffff0002, 0x19) mbind$auto(0x2001, 0x2, 0x108000000, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x20600, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x64ce, 0xffffffffffffd4b4) syz_clone(0xa00800, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200), 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x9, 0x200, 0x3fd6, 0x3, 0x4228) 7.356381844s ago: executing program 2 (id=399): mmap$auto(0x0, 0x2, 0x4, 0x17, 0xffffffffffffffff, 0x200) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) write$auto(r1, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x4000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x3, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x3, 0xd, 0x4008fd6, 0x9, 0x3, 0x15f4da0a, 0x3, 0x3, 0x80062, 0x80000001, 0x4, 0xa, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x18380, 0x0) unshare$auto(0x40000080) mmap$auto(0x100400000000000, 0x8001, 0x7, 0xfffffffffffff810, 0xfffffffffffffffa, 0x1000000008000) 6.63402016s ago: executing program 1 (id=401): mmap$auto(0xfffffffffffffffe, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffc) (async) r0 = io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0xfa, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) (async) r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x24080, 0x0) write$auto_event_trigger_fops_trace(r1, &(0x7f0000000240)='!', 0x1) (async) socket(0xf, 0xa, 0x5) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x6, 0x101, 0x1, 0xfffffffffffffff1, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x422201, 0x0) write$auto_proc_mem_operations_base(r2, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0xc1b, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) listmount$auto(&(0x7f0000000100)={0x1f, @inferred=r0, 0x80000002, 0x8, 0x2}, 0x0, 0x80000000f4240, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r3, 0x0, 0x2b6) syz_clone3(&(0x7f0000000080)={0xe0000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, {r0}}, 0xffffffffffffff97) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x106) ioctl$auto_FS_IOC_GETFSUUID(r2, 0x80111500, 0xac) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) (async) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x2, 0xfffffffe, 0x0, 0x1230, 0x10000002) (async) shmget$auto(0x8, 0x10563, 0x568d1af2) (async) madvise$auto(0x0, 0xffffffffffff0004, 0x19) 6.416802545s ago: executing program 1 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'gre0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080028bd7000ffdbdf252000000008000c000100000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="66bc75040800270001000020070000000707000003002a0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) (async) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r5, 0x301, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)="5d3d4b8c60c2f201bbdecdf45a36e14cf63e57caea0fdf108d") (rerun: 64) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_expire_count\x00', 0x40a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)=""/76, 0x4c) madvise$auto(0x1, 0x9, 0xa) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x9, 0x1, 0x1, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) (async) io_uring_setup$auto(0x1, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async, rerun: 64) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) (async) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x8080, 0x0) (async) unshare$auto(0x40000080) keyctl$auto(0x2000000000000016, 0xfeffffffffffff, 0xfffffffffffffffc, 0x1, 0xc) 5.170315023s ago: executing program 0 (id=406): mmap$auto(0x800000000000000, 0x20009, 0x4, 0x14, 0x401, 0x7fff) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) write$auto(r0, &(0x7f0000000040)='\x00', 0x8) r1 = ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=0x1994000) write$auto(r1, &(0x7f00000000c0)='+:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) r3 = gettid() waitid$auto_P_PGID(0x2, r3, 0x0, 0x4, 0x0) write$auto(r2, &(0x7f0000000040)='+:\x00', 0x8) recvmmsg$auto(0x4, 0x0, 0x600, 0x7fffffff, 0x0) 5.004098654s ago: executing program 0 (id=407): mmap$auto(0x0, 0x8000000000000001, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2b, 0x800, 0x2) (async) madvise$auto(0x1, 0x200007, 0x9) remap_file_pages$auto(0x3, 0x1000, 0x0, 0x3, 0x4) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) mmap$auto(0xfedd, 0x0, 0x206, 0x3ff, 0x7, 0x1) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r0, 0x104000000000010e, 0xb, 0x0, 0x400) (async) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01eb25bd7000fedbdf25040000000c000800000000000000000004070000000005003f840000"], 0x2c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) madvise$auto(0x9ff, 0x9, 0x833) (async) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x3, 0x1001, 0x401, 0x9, 0x400001}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x2a0842, 0x0) unshare$auto(0x200) (async) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000e00)="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", 0xc83) (async) pread64$auto(r2, &(0x7f00000000c0)='\'\x00', 0x6, 0x5) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x468400, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) 4.998117135s ago: executing program 2 (id=408): r0 = socket(0x11, 0x3, 0x6) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010326"], 0x14}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) (async) read$auto(0x3, 0x0, 0x80) iopl$auto(0x1) (async) modify_ldt$auto(0x11, 0x0, 0x10) (async) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) (async) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r1) (async) lstat$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x4, 0x4, 0x3, 0x7, 0xee00, 0xee00, 0x0, 0x0, 0x5, 0x6, 0x5, 0xffffffffffffff01, 0x3, 0x7, 0x7, 0x4, 0x9}) (async) msgctl$auto_MSG_STAT_ANY(0xb1, 0xd, &(0x7f0000000340)={{0x7, 0xffffffffffffffff, 0xee00, 0x2, 0x6, 0x7, 0x5}, &(0x7f00000002c0)=0x4, &(0x7f0000000300), 0x2, 0x1, 0x7, 0xffffffffffffffff, 0xffffffffffff5f7e, 0x5, 0x8, 0x8}) (async) lstat$auto(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x81, 0xffffffffffffffff, 0x7, 0x3, 0xee00, 0xee01, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x6, 0x5, 0x7ff, 0xe, 0x59f}) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)={0x1568, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1265, 0x3, 0x0, 0x1, [@generic="9948a6228799309d75beb41d1759908020332c225e0eb19bad370b222edcbf072e8486a882875951ec1f11777f6cdb28f7102569487f3831d8cf665e30037c2028e613d508d47930710bf50b4e056503aef4bedf0ec157944e608bdb3cc3eff6c170ef740a0fb6acb5141429c55dd3ab066c426e02b510f9838a60f9e7ce941bec94975298d9372cd141ebdb1b5eb3af0b8fc3cdf5bda63194581fcb8c727c1ad272fa73", @nested={0x10f1, 0x66, 0x0, 0x1, [@typed={0x89, 0xe7, 0x0, 0x0, @binary="06db66ab65d154aaefb4fa57c150aed7223c7e899e46160ca7caa8a64ca5db1a7af2e0e4b43f6d681bd2398e51aaba50016f8e96eb11fa1f181a0f25cc9490aa6ad225a4e49f3eeb6ac20da2e198e9a4468c9225fee506b85bde5ccb6adb7cd91eb20558e80bc0536a14da8fd812ea4f272268c858ddc14645a7ff3cd7ad37d71a8c94e523"}, @generic="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", @generic="1862543a6f95028a12968cedb7bc68a2fbd2272368789051380a6a68597f2a9dd614a933349b33cc95a6c6993dc7f15b7469aa857a7daaab8eb7150a391db0ab864e1befb338c38a2398a64838c42c63346e52b2cdf30d9c56e010e12a", @nested={0x4, 0x11b}]}, @nested={0x4c, 0x126, 0x0, 0x1, [@nested={0x4, 0xdb}, @typed={0x4, 0x97}, @typed={0x4, 0xf4}, @typed={0x2d, 0x143, 0x0, 0x0, @binary="e0b8924446c8c079a089fd89e1557435223cc7b579db4bcd7074c689c81b2fdc7fc6e4725bc182b339"}, @typed={0xc, 0x13b, 0x0, 0x0, @u64=0x7f}]}, @typed={0x33, 0x4c, 0x0, 0x0, @binary="36e2afc5ba6335e77eb5e13596d07197b33bc287610b909654316e740f7a67b14ade0917f0ee0210854fe57e4bb300"}, @generic="3bdbd5f7b6a3cfe433b22b166e1aaf9c72d0994d4b067647e00eb384531de0a552da68fa0c57603654cc998f9ea0ca55598a5b71ff62f32addd855b2acdf36f7ba3f183f0bef696385"]}, @TIPC_NLA_SOCK={0x2ec, 0x2, 0x0, 0x1, [@nested={0x49, 0x93, 0x0, 0x1, [@typed={0x9, 0x93, 0x0, 0x0, @str='#()$\x00'}, @typed={0x4, 0xe1}, @generic="b1b5cc970eadc8a60e64767b0304f8c6ff0f6d2ec03ce2a5f29bc3b75577f0ea68880137c41c940448", @nested={0x4, 0x6e}, @typed={0x8, 0xa0, 0x0, 0x0, @uid=r3}]}, @nested={0x13f, 0x80, 0x0, 0x1, [@generic="e73ecc5d554ceca9bd78edb1eaee4ba448c5f975064758ce2ab2f1f2db3aea5c146d088c50aae6457a5085d3039e704b90504a7658c2e3b0600e905dbf03b0fbd709effc2402c6ccb229949a50605b80443955b43390f565adae456ccd4ac5cda82caa36", @typed={0x8, 0x92, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x7}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x6e}, @nested={0x4, 0x62}, @generic="1c82e39c1f02f425be845df83a7413f57fe2f979346d8581ae091808bc09e2c93cfbe2635386d704abde61dea3351d3e7a464347f4195b8b750ec6ce2840fa32d44a4823106644051079500647753fa33bc37b5090b5ea875d8ef44b4f10c227d5203ea88f9d600739c666e245a41988ad307659fb150c759b25fd7692591a7acf192592b86db1c076f886d09dbbf8227fa23edb1c05734ae15794be59bea75f18cf7d3cd8c74a74d9f61913bc731fed6bf091", @typed={0x8, 0xe9, 0x0, 0x0, @uid=r5}]}, @generic="449abfa43c4afc2fe475c887bf6eed0bccbbf71e362806ec50d8242f4030e53c2808344c245061dee8f478279597bb89158065b330aecef13eb831638b48838874c597fd42558741e63e2a4bad83e98d4635df48474cb417ebb6494289d33e80c0d053d8ef26fc338dd4515ccb75a623158fdd6f788d28211b6aee1b54a2c3db9390509668af8f06da2b27096c2dc1fc28720228bc280e5c863589e13724b9fc3ea2138da72e9a2d78f4ee212bab8ae931d5aaa6b57b3a121b64cd5acf4b393b5ef8de04ac08600c907de083701591219b39f6b8184267483e6e67b3664889d063b9849f185963e1e859f80780de4da309", @typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="553092c05c513efc15a7be5801348f648bcc05dec705d5f70c48fa55c059381b0ffbc526f54ca8a9351d4b2f5dcfd32b44187a58a817748b72b40bc72cb3cb27e36e41fdbde24a19ac4c6d90fdf020f488a8664ce0cd0c"]}]}, 0x1568}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0xf1c94a9441a4a651, 0x0) (async) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mem\x00', 0x0, 0x0) 4.438247326s ago: executing program 0 (id=410): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x74000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') ioctl$auto_XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f00000000c0)=0x10) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r2, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x6, 0xfff, 0x5, 0x400, 0x8, 0xfffffffffffffffa, 0x8, 0x7f, 0x7, 0x2, 0x6, 0x8264, "6184fab2a95ad342e0d71b9879a9799bcce38b0d3dd0087366383aed4ab400ce93922b3d2566a4a7e5d163119b63012b5c1f9856b62a1848"}) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000001200)=""/22, 0x16) socket(0xa, 0x2, 0x88) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getrusage$auto(0x0, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) socket(0xa, 0x1, 0x84) bind$auto(r2, &(0x7f0000000100)=@in={0x2, 0x3, @rand_addr=0x64010101}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) madvise$auto(0x8, 0x7, 0x5) 4.437642205s ago: executing program 1 (id=411): ioperm$auto(0x7ff, 0x1, 0x100) munlock$auto(0x4, 0x29b9) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$auto(0x3, 0x6, 0x8, 0x14, r0, 0x8004) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = semctl$auto(0x1ff, 0x100000001, 0x13, 0x9) r3 = prctl$auto(0x20023, 0x7, r2, 0x100000001, 0x0) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r4, 0xc0105702, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) accept4$auto(r5, 0x0, 0x0, 0x3) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) getresuid$auto(0x0, 0x0, 0x0) socket(0x2, 0x1, 0x84) setsockopt$auto_SO_DOMAIN(r1, 0xd0b6, 0x27, &(0x7f00000000c0)='/sys/kernel/debug/sync/sw_sync\x00', 0xdf0a) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x9, &(0x7f0000000540)={&(0x7f0000000400)={0xfffffffffffffdc5, 0x0, 0x1, 0x70bd2d, 0x27dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4}, 0x24040804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0080, 0x0) pread64$auto(r8, 0x0, 0xb69c, 0x6) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r7, 0x40047459, 0x0) 3.88336912s ago: executing program 2 (id=412): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event1\x00', 0x22040, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r0, 0x4008ae90, 0x0) 3.556229827s ago: executing program 3 (id=413): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps\x00', 0x20000, 0x0) ioctl$auto(r0, 0x40046207, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40, 0x0) read$auto(0x3, 0x0, 0x80) 3.370635591s ago: executing program 0 (id=414): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x80000001) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x80ffff, 0x4, 0x8000000008011, 0x3, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x39b8) write$auto(r0, 0x0, 0xffffffffffff8001) msync$auto(0x3, 0x0, 0x400000004) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) ioperm$auto(0x2, 0x31c, 0x4) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x1, r0, 0x0, 0x3) close_range$auto(r0, r0, 0x9) ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0xb) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) socket(0x10, 0x2, 0x14) sysfs$auto(0x2, 0x101000000000007, 0x0) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) 3.216414606s ago: executing program 2 (id=415): mmap$auto(0x80, 0x3, 0x8, 0xeb1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r0 = socket(0x3, 0x1, 0xfe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x71) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socket(0x1f, 0x3, 0x200000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x2, 0xf) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r1, 0x0, 0xc0d1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x80, 0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(&(0x7f00000000c0)=')-(&\x00', 0x5) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x210882, 0x47) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010]) 3.010912151s ago: executing program 3 (id=416): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0x4) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0x2, 0x9, 0x3, 0x0, 0x7, 0x2, 0xffffffffffffffff, [0x95, 0x9], {0xffffff80, 0x9, 0x10, 0xb831, 0x3, 0xdbb, 0x3, 0xee9, 0x2}, {0x8001, 0x6, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0xf}}) r1 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000380)={&(0x7f0000000180), 0xf}, 0x2e, 0x0, 0x7, 0x1083}, 0x5}, 0x2, 0x100) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) read$auto(0xffffffffffffffff, 0x0, 0x100000001) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x400000000000003, 0xeb5, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='x\f\x00L', @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250300000006000600810000000600070000800000060006000e0000000a00050000000000000000000a00010000000000000000000a000500aaaaaaaaaa400000080003003f00000008000200", @ANYRES32=0x0, @ANYBLOB="08000400800000"], 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x44098) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.476921866s ago: executing program 3 (id=417): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x6, 0x1) socket(0x2, 0x1, 0x100) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x3, 0x7, 0x2, 0x2) (async) sched_setaffinity$auto(0x0, 0xcf4d, &(0x7f00000000c0)=0xffffffffffffffff) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x1, 0x1a09, 0xfffffff9, 0x5cd}, 0x8000, 0x0, 0x6) (async) socket(0xa, 0x2, 0x84) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) (async) exit$auto(0x7) (async) sched_setaffinity$auto(0x0, 0x80000000, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 2.407303778s ago: executing program 0 (id=418): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) r1 = prctl$auto_PR_SCHED_CORE_GET(0x7fffffff, 0x0, 0xffffffffffffffff, 0x5a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) socket(0x1f, 0x800, 0xffffff01) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) ioctl$auto_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0x0) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(r0, 0x11, 0x2688, 0x5, 0x0, 0x7) socket(0x15, 0x5, 0x0) sysfs$auto(0x2, 0x14, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 1.978027569s ago: executing program 3 (id=419): socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80302, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, 0x0, 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r3, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r3, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf250200000008004f343135cbf142970b00000200000814b39cd34e2791ae13ce8e79000900"], 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x48010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xc43a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000000100)={&(0x7f00000000c0)=0xffffffffffffffff, 0x7fff, 0x0, 0x0}) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) 1.659523278s ago: executing program 2 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto_SHMEM_HUGE_FORCE(r0, 0x4, &(0x7f0000000580)='veth1_to_hsr\x00', &(0x7f00000005c0), 0xfffffffffffffffe) pidfd_open$auto(0x1, 0x0) (async) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount_setattr$auto(r1, 0x0, 0x0, &(0x7f0000000640)={0x6, 0x9}, 0x283) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/21, 0x15) (async) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/21, 0x15) r2 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto_dev_fops_plock(r2, &(0x7f0000000740)="cacbc35874f3520ede8ad842e90500ae67af5c4b22cd56582e0f3d8bc5c5f248d71a9dea75b359f918bd7aa8c9691bba9d686ef9a6ca1081bfbb40e2ea75159b", 0x40) 1.411406096s ago: executing program 2 (id=421): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0x2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r0, 0x5420, &(0x7f0000000240)="7c595e5a92f0e28ff6f4ff30a979d2b7e57b1b612f4ae13d0bac342d2af639f678f784d49936e3d5b9cdab55bf9551428c5f53a38af84e07611a983b37c34af2a9af645497d98dde0feede674982cc77e75b107976a59c6440e6999b57784af7411221806552412524f5d2f406c9d8d0f738281dbe6ea5c496387d9cd94af720a15ebd3a577e597b928c497bbb7ed2d7626297d0a2a9731e0ad057ed5e5441399ecf612af8879b4ef204f28cb59235be50c58c4f6778ec21c66a62aac49d321ff1dadef74c64085e091ef3") (async) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r0, 0x5420, &(0x7f0000000240)="7c595e5a92f0e28ff6f4ff30a979d2b7e57b1b612f4ae13d0bac342d2af639f678f784d49936e3d5b9cdab55bf9551428c5f53a38af84e07611a983b37c34af2a9af645497d98dde0feede674982cc77e75b107976a59c6440e6999b57784af7411221806552412524f5d2f406c9d8d0f738281dbe6ea5c496387d9cd94af720a15ebd3a577e597b928c497bbb7ed2d7626297d0a2a9731e0ad057ed5e5441399ecf612af8879b4ef204f28cb59235be50c58c4f6778ec21c66a62aac49d321ff1dadef74c64085e091ef3") mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) socket(0x8, 0x80805, 0x0) keyctl$auto_KEYCTL_CLEAR(0x7, 0x7, 0x9, 0x2, 0x4662) (async) keyctl$auto_KEYCTL_CLEAR(0x7, 0x7, 0x9, 0x2, 0x4662) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x4c, &(0x7f0000000000)='\x00', 0xbb) unshare$auto(0x40000080) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') shmat$auto(0x1, &(0x7f0000000000)='/proc/self/smaps_rollup\x00', 0x80000001) write$auto(0xffffffffffffffff, 0x0, 0x7) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x2000, 0x100000004, 0x100000002, 0x0, 0x6, 0x6) 1.231434742s ago: executing program 0 (id=422): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0x2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto_MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={0x0, 0x0, 0xfff}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmat$auto(0x1, &(0x7f0000000000)='/proc/self/smaps_rollup\x00', 0x80000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$auto(0x3, 0x0, 0x5c8) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x2000, 0x100000004, 0x100000002, 0x0, 0x6, 0x6) mmap$auto(0x0, 0x7fffffffffffffff, 0xdf, 0x15, 0x7, 0x28000) 954.550255ms ago: executing program 3 (id=423): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event1\x00', 0x22040, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r0, 0x4008ae90, 0x0) 593.949176ms ago: executing program 1 (id=424): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps\x00', 0x20000, 0x0) ioctl$auto(r0, 0x40046207, 0x9) exit$auto(0x7) read$auto(0x3, 0x0, 0x80) 0s ago: executing program 3 (id=425): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x7000000, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0xffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.204' (ED25519) to the list of known hosts. [ 102.252758][ T24] cfg80211: failed to load regulatory.db [ 102.693244][ T5818] cgroup: Unknown subsys name 'net' [ 102.886451][ T5818] cgroup: Unknown subsys name 'cpuset' [ 102.897423][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 105.011634][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.164463][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.173357][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.190775][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.199222][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.207572][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.258915][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.269106][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.294259][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.321166][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.340671][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.350237][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.372107][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.387334][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.394811][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.403684][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.408566][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.419270][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.419984][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.426671][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.445859][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.010255][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 108.042467][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 108.231872][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 108.397617][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 108.416760][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.424427][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.432903][ T5836] bridge_slave_0: entered allmulticast mode [ 108.441463][ T5836] bridge_slave_0: entered promiscuous mode [ 108.452779][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.459977][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.467558][ T5833] bridge_slave_0: entered allmulticast mode [ 108.475007][ T5833] bridge_slave_0: entered promiscuous mode [ 108.514769][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.522241][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.529462][ T5836] bridge_slave_1: entered allmulticast mode [ 108.537158][ T5836] bridge_slave_1: entered promiscuous mode [ 108.561136][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.568301][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.576621][ T5833] bridge_slave_1: entered allmulticast mode [ 108.584251][ T5833] bridge_slave_1: entered promiscuous mode [ 108.732365][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.739599][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.747348][ T5837] bridge_slave_0: entered allmulticast mode [ 108.754926][ T5837] bridge_slave_0: entered promiscuous mode [ 108.765912][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.779808][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.792776][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.804956][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.859489][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.867548][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.876930][ T5837] bridge_slave_1: entered allmulticast mode [ 108.885472][ T5837] bridge_slave_1: entered promiscuous mode [ 108.939291][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.947122][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.957131][ T5843] bridge_slave_0: entered allmulticast mode [ 108.964722][ T5843] bridge_slave_0: entered promiscuous mode [ 109.011116][ T5836] team0: Port device team_slave_0 added [ 109.019694][ T5833] team0: Port device team_slave_0 added [ 109.026996][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.035110][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.042572][ T5843] bridge_slave_1: entered allmulticast mode [ 109.050061][ T5843] bridge_slave_1: entered promiscuous mode [ 109.060077][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.072685][ T5836] team0: Port device team_slave_1 added [ 109.082304][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.093993][ T5833] team0: Port device team_slave_1 added [ 109.193080][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.206622][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.237870][ T5837] team0: Port device team_slave_0 added [ 109.247408][ T5837] team0: Port device team_slave_1 added [ 109.269023][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.276313][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.303477][ T5140] Bluetooth: hci0: command tx timeout [ 109.304442][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.352760][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.359772][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.386762][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.413519][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.420927][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.447609][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.458377][ T5140] Bluetooth: hci2: command tx timeout [ 109.468144][ T5843] team0: Port device team_slave_0 added [ 109.475208][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.482426][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.509108][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.531010][ T5140] Bluetooth: hci3: command tx timeout [ 109.536820][ T5140] Bluetooth: hci1: command tx timeout [ 109.558768][ T5843] team0: Port device team_slave_1 added [ 109.598597][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.605757][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.632830][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.647455][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.654798][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.680929][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.693355][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.700410][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.726722][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.763411][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.770427][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.797909][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.853113][ T5836] hsr_slave_0: entered promiscuous mode [ 109.860239][ T5836] hsr_slave_1: entered promiscuous mode [ 109.901109][ T5833] hsr_slave_0: entered promiscuous mode [ 109.907710][ T5833] hsr_slave_1: entered promiscuous mode [ 109.914580][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.923054][ T5833] Cannot create hsr debugfs directory [ 109.971995][ T5837] hsr_slave_0: entered promiscuous mode [ 109.979466][ T5837] hsr_slave_1: entered promiscuous mode [ 109.986412][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.994504][ T5837] Cannot create hsr debugfs directory [ 110.112961][ T5843] hsr_slave_0: entered promiscuous mode [ 110.120029][ T5843] hsr_slave_1: entered promiscuous mode [ 110.126905][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.134843][ T5843] Cannot create hsr debugfs directory [ 110.633576][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.651670][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.664373][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.688268][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.742278][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.765527][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.792938][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.808424][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.907526][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.919619][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.932682][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.944102][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.088660][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.119128][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.149407][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.161073][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.174063][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.228215][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.272910][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.280238][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.312054][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.319204][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.358359][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.375384][ T5140] Bluetooth: hci0: command tx timeout [ 111.429060][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.477252][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.506456][ T3954] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.513743][ T3954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.532774][ T5140] Bluetooth: hci2: command tx timeout [ 111.557581][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.587041][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.594829][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.610954][ T5140] Bluetooth: hci1: command tx timeout [ 111.616436][ T5140] Bluetooth: hci3: command tx timeout [ 111.646915][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.654221][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.713845][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.721116][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.816027][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.913678][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.927072][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.986016][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.993283][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.006950][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.014222][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.074135][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.087069][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.234345][ T5833] veth0_vlan: entered promiscuous mode [ 112.316706][ T5833] veth1_vlan: entered promiscuous mode [ 112.419914][ T5833] veth0_macvtap: entered promiscuous mode [ 112.463876][ T5833] veth1_macvtap: entered promiscuous mode [ 112.515345][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.559314][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.597887][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.637468][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.648024][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.657783][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.668786][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.728883][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.807993][ T5836] veth0_vlan: entered promiscuous mode [ 112.826289][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.874429][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.904230][ T5836] veth1_vlan: entered promiscuous mode [ 112.911678][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.010108][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.016926][ T5837] veth0_vlan: entered promiscuous mode [ 113.024752][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.059872][ T5843] veth0_vlan: entered promiscuous mode [ 113.094531][ T5837] veth1_vlan: entered promiscuous mode [ 113.119012][ T5836] veth0_macvtap: entered promiscuous mode [ 113.140321][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.169963][ T5836] veth1_macvtap: entered promiscuous mode [ 113.198704][ T5843] veth1_vlan: entered promiscuous mode [ 113.229256][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.263763][ T5837] veth0_macvtap: entered promiscuous mode [ 113.286883][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.322906][ T5837] veth1_macvtap: entered promiscuous mode [ 113.350407][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.360103][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.383274][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.394805][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.454253][ T5140] Bluetooth: hci0: command tx timeout [ 113.477103][ T5843] veth0_macvtap: entered promiscuous mode [ 113.512736][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.524641][ T5843] veth1_macvtap: entered promiscuous mode [ 113.581794][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.610959][ T5140] Bluetooth: hci2: command tx timeout [ 113.618076][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.635209][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.645632][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.658634][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.690695][ T5842] Bluetooth: hci1: command tx timeout [ 113.696246][ T5140] Bluetooth: hci3: command tx timeout [ 113.753878][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.814518][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.842622][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.884685][ T5896] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.894231][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.958842][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.970283][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.983587][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.994769][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.039637][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.066901][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.242847][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.273444][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.385571][ T4593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.427516][ T4593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.471698][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.495893][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.512305][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.534823][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.862368][ T5901] zswap: compressor not available [ 114.955538][ T5907] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.024639][ T5909] FAULT_INJECTION: forcing a failure. [ 115.024639][ T5909] name failslab, interval 1, probability 0, space 0, times 1 [ 115.073409][ T5909] CPU: 1 UID: 0 PID: 5909 Comm: syz.1.7 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 115.073456][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.073479][ T5909] Call Trace: [ 115.073490][ T5909] [ 115.073507][ T5909] dump_stack_lvl+0x16c/0x1f0 [ 115.073567][ T5909] should_fail_ex+0x512/0x640 [ 115.073614][ T5909] ? __kmalloc_noprof+0xbf/0x510 [ 115.073655][ T5909] ? cache_create_net+0x9d/0x220 [ 115.073726][ T5909] should_failslab+0xc2/0x120 [ 115.073770][ T5909] __kmalloc_noprof+0xd2/0x510 [ 115.073831][ T5909] cache_create_net+0x9d/0x220 [ 115.073868][ T5909] unix_gid_cache_create+0x60/0x130 [ 115.073904][ T5909] ? __pfx_sunrpc_init_net+0x10/0x10 [ 115.073958][ T5909] sunrpc_init_net+0x71/0x190 [ 115.074011][ T5909] ops_init+0x1e2/0x5f0 [ 115.074061][ T5909] setup_net+0x21e/0x850 [ 115.074118][ T5909] ? __pfx_setup_net+0x10/0x10 [ 115.074159][ T5909] ? lockdep_init_map_type+0x5c/0x280 [ 115.074206][ T5909] ? __pfx_down_read_killable+0x10/0x10 [ 115.074247][ T5909] ? debug_mutex_init+0x37/0x70 [ 115.074282][ T5909] copy_net_ns+0x2a6/0x5f0 [ 115.074334][ T5909] create_new_namespaces+0x3ea/0xad0 [ 115.074381][ T5909] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 115.074428][ T5909] ksys_unshare+0x45b/0xa40 [ 115.074474][ T5909] ? __pfx_ksys_unshare+0x10/0x10 [ 115.074519][ T5909] ? xfd_validate_state+0x5d/0x180 [ 115.074553][ T5909] ? rcu_is_watching+0x12/0xc0 [ 115.074596][ T5909] __x64_sys_unshare+0x31/0x40 [ 115.074641][ T5909] do_syscall_64+0xcd/0x230 [ 115.074695][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.074729][ T5909] RIP: 0033:0x7f011778e969 [ 115.074754][ T5909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.074786][ T5909] RSP: 002b:00007f01155f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.074817][ T5909] RAX: ffffffffffffffda RBX: 00007f01179b5fa0 RCX: 00007f011778e969 [ 115.074838][ T5909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 115.074857][ T5909] RBP: 00007f0117810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 115.074877][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.074896][ T5909] R13: 0000000000000000 R14: 00007f01179b5fa0 R15: 00007fffbef42038 [ 115.074940][ T5909] [ 115.436301][ T5917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.502422][ T5911] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 115.512530][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 115.536674][ T5140] Bluetooth: hci0: command tx timeout [ 115.662331][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9'. [ 115.693497][ T5140] Bluetooth: hci2: command tx timeout [ 115.771004][ T5140] Bluetooth: hci3: command tx timeout [ 115.777054][ T5842] Bluetooth: hci1: command tx timeout [ 116.106858][ T5932] Zero length message leads to an empty skb [ 116.813294][ T5949] mmap: syz.2.13 (5949) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.622784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.783129][ T5961] FAULT_INJECTION: forcing a failure. [ 117.783129][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 117.797030][ T5961] CPU: 1 UID: 0 PID: 5961 Comm: syz.2.16 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 117.797074][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.797093][ T5961] Call Trace: [ 117.797103][ T5961] [ 117.797115][ T5961] dump_stack_lvl+0x16c/0x1f0 [ 117.797174][ T5961] should_fail_ex+0x512/0x640 [ 117.797222][ T5961] ? __kmalloc_node_noprof+0xc5/0x500 [ 117.797266][ T5961] should_failslab+0xc2/0x120 [ 117.797309][ T5961] __kmalloc_node_noprof+0xd8/0x500 [ 117.797347][ T5961] ? obj_cgroup_charge+0x365/0x640 [ 117.797386][ T5961] ? alloc_slab_obj_exts+0x41/0xa0 [ 117.797423][ T5961] alloc_slab_obj_exts+0x41/0xa0 [ 117.797454][ T5961] __memcg_slab_post_alloc_hook+0x27b/0x940 [ 117.797503][ T5961] ? kasan_save_track+0x14/0x30 [ 117.797542][ T5961] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 117.797583][ T5961] ? __d_alloc+0x31/0xaa0 [ 117.797618][ T5961] ? set_normalized_timespec64+0x69/0xc0 [ 117.797662][ T5961] __d_alloc+0x31/0xaa0 [ 117.797703][ T5961] d_alloc+0x4a/0x1e0 [ 117.797741][ T5961] d_alloc_parallel+0xe3/0x12e0 [ 117.797800][ T5961] ? find_held_lock+0x2b/0x80 [ 117.797835][ T5961] ? __pfx_d_alloc_parallel+0x10/0x10 [ 117.797895][ T5961] ? __d_lookup+0x266/0x4a0 [ 117.797952][ T5961] lookup_open.isra.0+0x665/0x1580 [ 117.798011][ T5961] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 117.798087][ T5961] ? __pfx_down_write+0x10/0x10 [ 117.798115][ T5961] ? mnt_get_write_access+0x20c/0x300 [ 117.798165][ T5961] path_openat+0x905/0x2d40 [ 117.798215][ T5961] ? __pfx_path_openat+0x10/0x10 [ 117.798260][ T5961] do_filp_open+0x20b/0x470 [ 117.798295][ T5961] ? __pfx_do_filp_open+0x10/0x10 [ 117.798362][ T5961] ? alloc_fd+0x471/0x7d0 [ 117.798405][ T5961] do_sys_openat2+0x11b/0x1d0 [ 117.798450][ T5961] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.798514][ T5961] __x64_sys_openat+0x174/0x210 [ 117.798560][ T5961] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.798609][ T5961] ? rcu_is_watching+0x12/0xc0 [ 117.798654][ T5961] do_syscall_64+0xcd/0x230 [ 117.798705][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.798738][ T5961] RIP: 0033:0x7f22da98e969 [ 117.798764][ T5961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.798802][ T5961] RSP: 002b:00007f22db75a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.798833][ T5961] RAX: ffffffffffffffda RBX: 00007f22dabb6160 RCX: 00007f22da98e969 [ 117.798854][ T5961] RDX: 0000000000183841 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 117.798883][ T5961] RBP: 00007f22daa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 117.798903][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.798923][ T5961] R13: 0000000000000000 R14: 00007f22dabb6160 R15: 00007ffdddfaad78 [ 117.798966][ T5961] [ 118.946194][ T5981] Invalid ELF header magic: != ELF [ 121.551219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 124.077813][ T6043] Invalid ELF header magic: != ELF [ 124.520075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 125.238315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 125.388077][ T6057] capability: warning: `syz.3.37' uses 32-bit capabilities (legacy support in use) [ 125.526772][ T6057] HfR: entered promiscuous mode [ 126.101673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.126618][ T30] audit: type=1804 audit(6043205429.614:2): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.40" name="/newroot/9/file0" dev="tmpfs" ino=65 res=1 errno=0 [ 126.148358][ T30] audit: type=1800 audit(6043205429.644:3): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.40" name="file0" dev="tmpfs" ino=65 res=0 errno=0 [ 127.080801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 127.334797][ T6076] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 127.612112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.797286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.822557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.050784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 134.108482][ T6115] process 'syz.2.48' launched './file0' with NULL argv: empty string added [ 135.209354][ T6141] netlink: 146 bytes leftover after parsing attributes in process `syz.3.55'. [ 135.648617][ T6151] netlink: 146 bytes leftover after parsing attributes in process `syz.3.55'. [ 135.867494][ T6156] FAULT_INJECTION: forcing a failure. [ 135.867494][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 135.890606][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: syz.2.57 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 135.890641][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.890656][ T6156] Call Trace: [ 135.890663][ T6156] [ 135.890672][ T6156] dump_stack_lvl+0x16c/0x1f0 [ 135.890720][ T6156] should_fail_ex+0x512/0x640 [ 135.890758][ T6156] ? fs_reclaim_acquire+0xae/0x150 [ 135.890799][ T6156] should_failslab+0xc2/0x120 [ 135.890831][ T6156] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 135.890861][ T6156] ? security_inode_alloc+0x3b/0x2b0 [ 135.890895][ T6156] security_inode_alloc+0x3b/0x2b0 [ 135.890925][ T6156] inode_init_always_gfp+0xce4/0x1030 [ 135.890954][ T6156] alloc_inode+0x86/0x240 [ 135.890985][ T6156] sock_alloc+0x40/0x280 [ 135.891020][ T6156] sock_create_lite+0x82/0x120 [ 135.891058][ T6156] __netlink_kernel_create+0xbd/0x750 [ 135.891094][ T6156] ? __pfx___netlink_kernel_create+0x10/0x10 [ 135.891125][ T6156] ? find_held_lock+0x2b/0x80 [ 135.891149][ T6156] ? audit_net_init+0x190/0x440 [ 135.891179][ T6156] audit_net_init+0x1ae/0x440 [ 135.891204][ T6156] ? __pfx_audit_net_init+0x10/0x10 [ 135.891237][ T6156] ? __pfx_audit_receive+0x10/0x10 [ 135.891266][ T6156] ? __pfx_audit_multicast_bind+0x10/0x10 [ 135.891296][ T6156] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 135.891327][ T6156] ? trace_kmalloc+0x2b/0xd0 [ 135.891367][ T6156] ? __pfx_audit_net_init+0x10/0x10 [ 135.891392][ T6156] ops_init+0x1e2/0x5f0 [ 135.891428][ T6156] setup_net+0x21e/0x850 [ 135.891466][ T6156] ? __pfx_setup_net+0x10/0x10 [ 135.891497][ T6156] ? lockdep_init_map_type+0x5c/0x280 [ 135.891531][ T6156] ? __pfx_down_read_killable+0x10/0x10 [ 135.891559][ T6156] ? debug_mutex_init+0x37/0x70 [ 135.891587][ T6156] copy_net_ns+0x2a6/0x5f0 [ 135.891625][ T6156] create_new_namespaces+0x3ea/0xad0 [ 135.891660][ T6156] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 135.891691][ T6156] ksys_unshare+0x45b/0xa40 [ 135.891731][ T6156] ? __pfx_ksys_unshare+0x10/0x10 [ 135.891764][ T6156] ? xfd_validate_state+0x5d/0x180 [ 135.891788][ T6156] ? rcu_is_watching+0x12/0xc0 [ 135.891819][ T6156] __x64_sys_unshare+0x31/0x40 [ 135.891853][ T6156] do_syscall_64+0xcd/0x230 [ 135.891893][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.891917][ T6156] RIP: 0033:0x7f22da98e969 [ 135.891936][ T6156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.891959][ T6156] RSP: 002b:00007f22db79c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 135.891981][ T6156] RAX: ffffffffffffffda RBX: 00007f22dabb5fa0 RCX: 00007f22da98e969 [ 135.891997][ T6156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 135.892011][ T6156] RBP: 00007f22daa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 135.892026][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.892040][ T6156] R13: 0000000000000000 R14: 00007f22dabb5fa0 R15: 00007ffdddfaad78 [ 135.892070][ T6156] [ 135.892147][ T6156] audit: cannot initialize netlink socket in namespace [ 136.470615][ T30] audit: type=1326 audit(6043205439.944:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6166 comm="syz.3.58" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feea858e969 code=0x0 [ 137.647991][ T5140] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 140.401854][ T6222] zswap: compressor not available [ 141.530085][ T6251] netlink: 186 bytes leftover after parsing attributes in process `syz.3.75'. [ 141.644822][ T6251] netlink: 186 bytes leftover after parsing attributes in process `syz.3.75'. [ 142.370819][ T6269] FAULT_INJECTION: forcing a failure. [ 142.370819][ T6269] name failslab, interval 1, probability 0, space 0, times 0 [ 142.433162][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: syz.2.77 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 142.433207][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.433233][ T6269] Call Trace: [ 142.433243][ T6269] [ 142.433256][ T6269] dump_stack_lvl+0x16c/0x1f0 [ 142.433313][ T6269] should_fail_ex+0x512/0x640 [ 142.433364][ T6269] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 142.433414][ T6269] should_failslab+0xc2/0x120 [ 142.433458][ T6269] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 142.433497][ T6269] ? mark_held_locks+0x49/0x80 [ 142.433540][ T6269] ? kstrdup_const+0x63/0x80 [ 142.433586][ T6269] kstrdup+0x53/0x100 [ 142.433630][ T6269] kstrdup_const+0x63/0x80 [ 142.433672][ T6269] kvasprintf_const+0x10f/0x1a0 [ 142.433708][ T6269] kobject_set_name_vargs+0x5a/0x140 [ 142.433743][ T6269] dev_set_name+0xc7/0x100 [ 142.433794][ T6269] ? __pfx_dev_set_name+0x10/0x10 [ 142.433850][ T6269] ? lockdep_init_map_type+0x5c/0x280 [ 142.433895][ T6269] ? __init_waitqueue_head+0xca/0x150 [ 142.433933][ T6269] netdev_register_kobject+0xc5/0x3a0 [ 142.433985][ T6269] register_netdevice+0x13dc/0x2270 [ 142.434038][ T6269] ? __pfx_register_netdevice+0x10/0x10 [ 142.434094][ T6269] __ip_tunnel_create+0x4a8/0x680 [ 142.434140][ T6269] ? __pfx___ip_tunnel_create+0x10/0x10 [ 142.434200][ T6269] ip_tunnel_init_net+0x22f/0x7d0 [ 142.434259][ T6269] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 142.434312][ T6269] ? trace_kmalloc+0x2b/0xd0 [ 142.434355][ T6269] ? lockdep_init_map_type+0x5c/0x280 [ 142.434403][ T6269] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 142.434439][ T6269] ops_init+0x1e2/0x5f0 [ 142.434486][ T6269] setup_net+0x21e/0x850 [ 142.434533][ T6269] ? __pfx_setup_net+0x10/0x10 [ 142.434574][ T6269] ? lockdep_init_map_type+0x5c/0x280 [ 142.434618][ T6269] ? __pfx_down_read_killable+0x10/0x10 [ 142.434657][ T6269] ? debug_mutex_init+0x37/0x70 [ 142.434694][ T6269] copy_net_ns+0x2a6/0x5f0 [ 142.434748][ T6269] create_new_namespaces+0x3ea/0xad0 [ 142.434797][ T6269] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 142.434840][ T6269] ksys_unshare+0x45b/0xa40 [ 142.434887][ T6269] ? __pfx_ksys_unshare+0x10/0x10 [ 142.434932][ T6269] ? xfd_validate_state+0x5d/0x180 [ 142.434966][ T6269] ? rcu_is_watching+0x12/0xc0 [ 142.435009][ T6269] __x64_sys_unshare+0x31/0x40 [ 142.435055][ T6269] do_syscall_64+0xcd/0x230 [ 142.435110][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.435144][ T6269] RIP: 0033:0x7f22da98e969 [ 142.435171][ T6269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.435201][ T6269] RSP: 002b:00007f22db79c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 142.435240][ T6269] RAX: ffffffffffffffda RBX: 00007f22dabb5fa0 RCX: 00007f22da98e969 [ 142.435261][ T6269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 142.435281][ T6269] RBP: 00007f22daa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 142.435300][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.435320][ T6269] R13: 0000000000000000 R14: 00007f22dabb5fa0 R15: 00007ffdddfaad78 [ 142.435365][ T6269] [ 143.235985][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.245160][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.193535][ T6292] netlink: 504 bytes leftover after parsing attributes in process `syz.1.83'. [ 144.942029][ T30] audit: type=1800 audit(6043205448.434:5): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.80" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 145.424601][ T6313] syz.2.85 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.687944][ T6324] zswap: compressor not available [ 146.800261][ T6336] netlink: 330 bytes leftover after parsing attributes in process `syz.1.89'. [ 146.809349][ T6336] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 148.307026][ T6352] Invalid ELF header magic: != ELF [ 152.732374][ T6424] netlink: 330 bytes leftover after parsing attributes in process `syz.1.103'. [ 153.356559][ T6380] syz.0.97 uses obsolete (PF_INET,SOCK_PACKET) [ 153.432843][ T6428] FAULT_INJECTION: forcing a failure. [ 153.432843][ T6428] name fail_futex, interval 1, probability 0, space 0, times 1 [ 153.501216][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: syz.3.104 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 153.501259][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.501276][ T6428] Call Trace: [ 153.501286][ T6428] [ 153.501297][ T6428] dump_stack_lvl+0x16c/0x1f0 [ 153.501361][ T6428] should_fail_ex+0x512/0x640 [ 153.501414][ T6428] get_futex_key+0x49e/0x1000 [ 153.501453][ T6428] ? __pfx_get_futex_key+0x10/0x10 [ 153.501499][ T6428] futex_wake+0xe7/0x4e0 [ 153.501536][ T6428] ? rcu_is_watching+0x12/0xc0 [ 153.501568][ T6428] ? __pfx_futex_wake+0x10/0x10 [ 153.501629][ T6428] do_futex+0x1e3/0x350 [ 153.501664][ T6428] ? __pfx_do_futex+0x10/0x10 [ 153.501695][ T6428] ? __might_fault+0xe3/0x190 [ 153.501742][ T6428] mm_release+0x24e/0x300 [ 153.501778][ T6428] do_exit+0x898/0x2c30 [ 153.501819][ T6428] ? __pfx_try_to_wake_up+0x10/0x10 [ 153.501858][ T6428] ? __pfx_do_exit+0x10/0x10 [ 153.501900][ T6428] ? do_raw_spin_lock+0x12c/0x2b0 [ 153.501946][ T6428] ? find_held_lock+0x2b/0x80 [ 153.501982][ T6428] do_group_exit+0xd3/0x2a0 [ 153.502028][ T6428] get_signal+0x2673/0x26d0 [ 153.502064][ T6428] ? __might_fault+0x154/0x190 [ 153.502109][ T6428] ? __pfx_get_signal+0x10/0x10 [ 153.502161][ T6428] ? do_futex+0x122/0x350 [ 153.502195][ T6428] ? __pfx_do_futex+0x10/0x10 [ 153.502234][ T6428] arch_do_signal_or_restart+0x8f/0x7a0 [ 153.502280][ T6428] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 153.502344][ T6428] ? rcu_is_watching+0x12/0xc0 [ 153.502380][ T6428] syscall_exit_to_user_mode+0x150/0x2a0 [ 153.502430][ T6428] do_syscall_64+0xda/0x230 [ 153.502478][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.502509][ T6428] RIP: 0033:0x7feea858e969 [ 153.502534][ T6428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.502562][ T6428] RSP: 002b:00007feea939b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 153.502591][ T6428] RAX: 0000000000000001 RBX: 00007feea87b5fa8 RCX: 00007feea858e969 [ 153.502611][ T6428] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feea87b5fac [ 153.502629][ T6428] RBP: 00007feea87b5fa0 R08: 00007feea939c000 R09: 0000000000000000 [ 153.502648][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feea87b5fac [ 153.502666][ T6428] R13: 0000000000000000 R14: 00007ffe5846c920 R15: 00007ffe5846ca08 [ 153.502706][ T6428] [ 154.647956][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 155.107446][ T6467] openvswitch: netlink: IP tunnel dst address not specified [ 156.725869][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 157.019818][ T6491] input: jJǸ- as /devices/virtual/input/input6 [ 157.745348][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 158.618356][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.126'. [ 158.837199][ T6521] Invalid ELF header magic: != ELF [ 159.983781][ T6534] zswap: compressor not available [ 160.375061][ T6551] netlink: 330 bytes leftover after parsing attributes in process `syz.3.132'. [ 160.406855][ T6552] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 160.423486][ T6551] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 161.751147][ T6562] Invalid ELF header magic: != ELF [ 164.754153][ T6610] Process accounting resumed [ 165.233615][ T6627] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 165.590470][ T6635] ima: policy update failed [ 165.627920][ T30] audit: type=1802 audit(4294967310.725:6): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.153" res=0 errno=0                                                                                                                                                                                                                                                                                                                                                                             [ 186.882006][ T7034] zram: Removed device: zram0 [ 187.038488][ T7038] kafs: addr_prefs: Invalid Command [ 187.436710][ T7047] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 187.570775][ T7041] zswap: compressor not available [ 187.970467][ T7062] netlink: 330 bytes leftover after parsing attributes in process `syz.0.239'. [ 188.453467][ T7057] vivid-007: ================= START STATUS ================= [ 188.467065][ T7057] vivid-007: Generate PTS: true [ 188.477808][ T7057] vivid-007: Generate SCR: true [ 188.491308][ T7057] tpg source WxH: 640x360 (Y'CbCr) [ 188.497612][ T7057] tpg field: 1 [ 188.506022][ T7057] tpg crop: (0,0)/640x360 [ 188.529306][ T7057] tpg compose: (0,0)/640x360 [ 188.546745][ T7057] tpg colorspace: 8 [ 188.557703][ T7057] tpg transfer function: 0/0 [ 188.563327][ T7057] tpg Y'CbCr encoding: 0/0 [ 188.570304][ T7057] tpg quantization: 0/0 [ 188.571433][ T7057] tpg RGB range: 0/2 [ 188.571454][ T7057] vivid-007: ================== END STATUS ================== [ 195.344992][ T7159] Process accounting paused [ 197.890483][ T7216] ======================================================= [ 197.890483][ T7216] WARNING: The mand mount option has been deprecated and [ 197.890483][ T7216] and is ignored by this kernel. Remove the mand [ 197.890483][ T7216] option from the mount to silence this warning. [ 197.890483][ T7216] ======================================================= [ 197.944773][ T7215] random: crng reseeded on system resumption [ 199.856106][ T7260] netlink: 342 bytes leftover after parsing attributes in process `syz.3.289'. [ 201.640164][ T7301] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 202.134212][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 202.669147][ T7318] tipc: Started in network mode [ 202.691572][ T7318] tipc: Node identity ee00, cluster identity 4711 [ 202.782515][ T7318] tipc: Node number set to 60928 [ 204.635095][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.641638][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.009911][ T7375] binder: 7374:7375 ioctl c0306201 2000000000c0 returned -14 [ 207.401526][ T7410] i2c i2c-0: new_device: Invalid device name [ 208.208811][ T7410] syz.0.317 (7410) used greatest stack depth: 17912 bytes left [ 208.277036][ T7416] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.376520][ T7416] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 208.556902][ T7416] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 208.773666][ T7416] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.790058][ T7416] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 208.803005][ T7429] vivid-007: kernel_thread() failed [ 208.862104][ T7416] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 209.016364][ T7416] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.058466][ T7416] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 209.180008][ T7416] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 209.265956][ T7416] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.278060][ T7416] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 209.317947][ T7416] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 209.380352][ T7416] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 209.758540][ T7435] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06000 pfn:0x7fe00 [ 209.790662][ T7435] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 209.819569][ T7435] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 209.841900][ T7435] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 209.870398][ T7435] raw: ffff88807fe06000 0000000000000000 00000008ffffffff 0000000000000000 [ 209.893052][ T7435] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 209.916086][ T7435] head: ffff88807fe06000 0000000000000000 00000008ffffffff 0000000000000000 [ 209.936798][ T7435] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 209.961186][ T7435] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 209.982987][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.983144][ T7435] page dumped because: unmovable page [ 210.011132][ T7435] page_owner tracks the page as allocated [ 210.036571][ T7435] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5814, tgid 5814 (sftp-server), ts 89517829769, free_ts 89517055987 [ 210.063218][ T7435] post_alloc_hook+0x181/0x1b0 [ 210.068135][ T7435] get_page_from_freelist+0x135c/0x3920 [ 210.075480][ T7435] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 210.081486][ T7435] alloc_pages_mpol+0x1fb/0x550 [ 210.118979][ T7435] alloc_pages_noprof+0x131/0x390 [ 210.156299][ T7435] skb_page_frag_refill+0x186/0x5a0 [ 210.161700][ T7435] try_fill_recv+0x79c/0x2690 [ 210.166964][ T7435] virtnet_poll+0x1e23/0x3c00 [ 210.171821][ T7435] __napi_poll.constprop.0+0xba/0x550 [ 210.181218][ T7449] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 210.196256][ T7435] net_rx_action+0xa97/0x1010 [ 210.201446][ T7435] handle_softirqs+0x216/0x8e0 [ 210.206812][ T7435] __irq_exit_rcu+0x109/0x170 [ 210.211833][ T7435] irq_exit_rcu+0x9/0x30 [ 210.242978][ T7435] common_interrupt+0xbf/0xe0 [ 210.247842][ T7435] asm_common_interrupt+0x26/0x40 [ 210.253405][ T7435] page last free pid 5814 tgid 5814 stack trace: [ 210.259870][ T7435] __free_frozen_pages+0x69d/0xff0 [ 210.265807][ T7435] __folio_put+0x329/0x450 [ 210.270377][ T7435] skb_release_data+0x618/0x960 [ 210.277172][ T7435] napi_consume_skb+0x15a/0x220 [ 210.282200][ T7435] net_rx_action+0x480/0x1010 [ 210.287613][ T7435] handle_softirqs+0x216/0x8e0 [ 210.293025][ T7435] __irq_exit_rcu+0x109/0x170 [ 210.298978][ T7435] irq_exit_rcu+0x9/0x30 [ 210.310938][ T7435] common_interrupt+0xbf/0xe0 [ 210.321048][ T7435] asm_common_interrupt+0x26/0x40 [ 210.782735][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.023514][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.139045][ T7459] netlink: 330 bytes leftover after parsing attributes in process `syz.2.325'. [ 211.344483][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.524604][ T7471] sd 0:0:1:0: PR command failed: 1026 [ 211.565614][ T7471] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 211.612591][ T7471] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 212.072793][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.861605][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.101497][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.348435][ T7505] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input9 [ 213.421432][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 214.002260][ T7518] binder: 7516:7518 ioctl c0306201 2000000000c0 returned -14 [ 214.141132][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 214.940555][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.180413][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.500262][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.353416][ T7566] binder: 7565:7566 ioctl c0306201 2000000000c0 returned -14 [ 217.587818][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.194805][ T7601] binder: 7600:7601 ioctl c018620c 200000001a40 returned -22 [ 219.622357][ T7604] mkiss: ax0: crc mode is auto. [ 221.405829][ T7628] random: crng reseeded on system resumption [ 221.618357][ T7630] mkiss: ax0: crc mode is auto. [ 224.129812][ T7665] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06000 pfn:0x7fe00 [ 224.140777][ T7665] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 224.149456][ T7665] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 224.160203][ T7665] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 224.194264][ T7665] raw: ffff88807fe06000 0000000000000000 00000008ffffffff 0000000000000000 [ 224.216105][ T7665] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 224.235689][ T7665] head: ffff88807fe06000 0000000000000000 00000008ffffffff 0000000000000000 [ 224.247697][ T7665] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 224.275972][ T7665] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 224.306113][ T7665] page dumped because: unmovable page [ 224.311745][ T7665] page_owner tracks the page as allocated [ 224.334735][ T7665] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5814, tgid 5814 (sftp-server), ts 89517829769, free_ts 89517055987 [ 224.416641][ T7665] post_alloc_hook+0x181/0x1b0 [ 224.460989][ T7665] get_page_from_freelist+0x135c/0x3920 [ 224.467693][ T7687] netlink: 130 bytes leftover after parsing attributes in process `syz.1.374'. [ 224.482090][ T7688] netlink: 130 bytes leftover after parsing attributes in process `syz.1.374'. [ 224.516125][ T7665] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 224.522240][ T7665] alloc_pages_mpol+0x1fb/0x550 [ 224.552205][ T7665] alloc_pages_noprof+0x131/0x390 [ 224.580047][ T7665] skb_page_frag_refill+0x186/0x5a0 [ 224.585372][ T7665] try_fill_recv+0x79c/0x2690 [ 224.635650][ T7665] virtnet_poll+0x1e23/0x3c00 [ 224.640479][ T7665] __napi_poll.constprop.0+0xba/0x550 [ 224.655570][ T7665] net_rx_action+0xa97/0x1010 [ 224.661255][ T7665] handle_softirqs+0x216/0x8e0 [ 224.679062][ T7665] __irq_exit_rcu+0x109/0x170 [ 224.683860][ T7665] irq_exit_rcu+0x9/0x30 [ 224.699802][ T7665] common_interrupt+0xbf/0xe0 [ 224.704860][ T7665] asm_common_interrupt+0x26/0x40 [ 224.735554][ T7665] page last free pid 5814 tgid 5814 stack trace: [ 224.745563][ T7665] __free_frozen_pages+0x69d/0xff0 [ 224.750782][ T7665] __folio_put+0x329/0x450 [ 224.755287][ T7665] skb_release_data+0x618/0x960 [ 224.785544][ T7665] napi_consume_skb+0x15a/0x220 [ 224.795531][ T7665] net_rx_action+0x480/0x1010 [ 224.800314][ T7665] handle_softirqs+0x216/0x8e0 [ 224.805152][ T7665] __irq_exit_rcu+0x109/0x170 [ 224.820116][ T7665] irq_exit_rcu+0x9/0x30 [ 224.824457][ T7665] common_interrupt+0xbf/0xe0 [ 224.839523][ T7665] asm_common_interrupt+0x26/0x40 [ 225.117203][ T7697] FAULT_INJECTION: forcing a failure. [ 225.117203][ T7697] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 225.136327][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.0.375 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 225.136374][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.136393][ T7697] Call Trace: [ 225.136403][ T7697] [ 225.136421][ T7697] dump_stack_lvl+0x16c/0x1f0 [ 225.136476][ T7697] should_fail_ex+0x512/0x640 [ 225.136532][ T7697] should_fail_alloc_page+0xe7/0x130 [ 225.136584][ T7697] prepare_alloc_pages+0x3c2/0x610 [ 225.136643][ T7697] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 225.136699][ T7697] ? __up_read+0x1f8/0x750 [ 225.136751][ T7697] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 225.136830][ T7697] __folio_alloc_noprof+0x11/0x220 [ 225.136867][ T7697] alloc_migration_target+0x2bf/0x6f0 [ 225.136920][ T7697] migrate_pages_batch+0x3bf/0x31a0 [ 225.136975][ T7697] ? __pfx_alloc_migration_target+0x10/0x10 [ 225.137035][ T7697] ? __pfx_migrate_pages_batch+0x10/0x10 [ 225.137089][ T7697] ? __pfx_walk_pgd_range+0x10/0x10 [ 225.137134][ T7697] migrate_pages_sync+0x12d/0x8a0 [ 225.137184][ T7697] ? __pfx_alloc_migration_target+0x10/0x10 [ 225.137235][ T7697] ? queue_pages_test_walk+0x279/0x410 [ 225.137276][ T7697] ? __pfx_find_vma+0x10/0x10 [ 225.137322][ T7697] ? __pfx_migrate_pages_sync+0x10/0x10 [ 225.137368][ T7697] ? walk_page_test+0x9b/0x180 [ 225.137431][ T7697] ? walk_page_range_mm+0x269/0x8a0 [ 225.137483][ T7697] migrate_pages+0x1b28/0x2350 [ 225.137531][ T7697] ? __pfx_alloc_migration_target+0x10/0x10 [ 225.137596][ T7697] ? __pfx_migrate_pages+0x10/0x10 [ 225.137643][ T7697] ? queue_pages_range+0x11e/0x180 [ 225.137688][ T7697] ? __pfx___up_read+0x10/0x10 [ 225.137734][ T7697] ? do_migrate_pages+0x458/0x750 [ 225.137783][ T7697] do_migrate_pages+0x48e/0x750 [ 225.137836][ T7697] ? __pfx_do_migrate_pages+0x10/0x10 [ 225.137880][ T7697] ? rcu_is_watching+0x12/0xc0 [ 225.137918][ T7697] ? cap_capable+0xb3/0x250 [ 225.137948][ T7697] ? get_task_mm+0xc2/0xf0 [ 225.137983][ T7697] ? security_capable+0x250/0x260 [ 225.138023][ T7697] kernel_migrate_pages+0x5b0/0x750 [ 225.138067][ T7697] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 225.138114][ T7697] ? rcu_is_watching+0x12/0xc0 [ 225.138151][ T7697] __x64_sys_migrate_pages+0x96/0x100 [ 225.138193][ T7697] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.138240][ T7697] do_syscall_64+0xcd/0x230 [ 225.138294][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.138325][ T7697] RIP: 0033:0x7f3ff658e969 [ 225.138349][ T7697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.138379][ T7697] RSP: 002b:00007f3ff74bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 225.138408][ T7697] RAX: ffffffffffffffda RBX: 00007f3ff67b6080 RCX: 00007f3ff658e969 [ 225.138428][ T7697] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 225.138447][ T7697] RBP: 00007f3ff6610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 225.138466][ T7697] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 225.138485][ T7697] R13: 0000000000000000 R14: 00007f3ff67b6080 R15: 00007ffd0298ec68 [ 225.138523][ T7697] [ 225.710642][ T7681] Process accounting resumed [ 227.860872][ T7734] random: crng reseeded on system resumption [ 229.163709][ T7754] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 229.188495][ T7754] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 232.017612][ T7803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'. [ 233.731549][ T7833] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.737875][ T7833] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.749121][ T7833] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.759751][ T7833] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.904838][ T7825] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06000 pfn:0x7fe00 [ 233.919130][ T7825] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 233.930533][ T7825] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 233.969338][ T7825] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 234.052435][ T7825] raw: ffff88807fe06000 0000000000000000 00000008ffffffff 0000000000000000 [ 234.061376][ T7825] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 234.070219][ T7825] head: ffff88807fe06000 0000000000000000 00000008ffffffff 0000000000000000 [ 234.081084][ T7825] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 234.089973][ T7825] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 234.099076][ T7825] page dumped because: unmovable page [ 234.104885][ T7825] page_owner tracks the page as allocated [ 234.110705][ T7825] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5814, tgid 5814 (sftp-server), ts 89517829769, free_ts 89517055987 [ 234.130635][ T7825] post_alloc_hook+0x181/0x1b0 [ 234.135690][ T7825] get_page_from_freelist+0x135c/0x3920 [ 234.141707][ T7825] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 234.147684][ T7825] alloc_pages_mpol+0x1fb/0x550 [ 234.153180][ T7825] alloc_pages_noprof+0x131/0x390 [ 234.158368][ T7825] skb_page_frag_refill+0x186/0x5a0 [ 234.163904][ T7825] try_fill_recv+0x79c/0x2690 [ 234.168929][ T7825] virtnet_poll+0x1e23/0x3c00 [ 234.174303][ T7825] __napi_poll.constprop.0+0xba/0x550 [ 234.179765][ T7825] net_rx_action+0xa97/0x1010 [ 234.184877][ T7825] handle_softirqs+0x216/0x8e0 [ 234.190422][ T7825] __irq_exit_rcu+0x109/0x170 [ 234.201880][ T7825] irq_exit_rcu+0x9/0x30 [ 234.209284][ T7825] common_interrupt+0xbf/0xe0 [ 234.226764][ T7825] asm_common_interrupt+0x26/0x40 [ 234.232152][ T7825] page last free pid 5814 tgid 5814 stack trace: [ 234.238545][ T7825] __free_frozen_pages+0x69d/0xff0 [ 234.247286][ T7825] __folio_put+0x329/0x450 [ 234.252320][ T7825] skb_release_data+0x618/0x960 [ 234.257708][ T7825] napi_consume_skb+0x15a/0x220 [ 234.266243][ T7825] net_rx_action+0x480/0x1010 [ 234.279992][ T7825] handle_softirqs+0x216/0x8e0 [ 234.295675][ T7825] __irq_exit_rcu+0x109/0x170 [ 234.300437][ T7825] irq_exit_rcu+0x9/0x30 [ 234.305088][ T7825] common_interrupt+0xbf/0xe0 [ 234.329371][ T7825] asm_common_interrupt+0x26/0x40 [ 235.812300][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.812316][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.812370][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.818396][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.124824][ T7903] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff88807fe06000 pfn:0x7fe00 [ 237.139540][ T7903] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 237.164688][ T7903] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 237.185545][ T7903] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 237.195725][ T7903] raw: ffff88807fe06000 0000000000000000 00000008ffffffff 0000000000000000 [ 237.229432][ T7903] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 237.250187][ T7903] head: ffff88807fe06000 0000000000000000 00000008ffffffff 0000000000000000 [ 237.266256][ T7903] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 237.279584][ T7903] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 237.301250][ T7903] page dumped because: unmovable page [ 237.307086][ T7903] page_owner tracks the page as allocated [ 237.316123][ T7903] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5814, tgid 5814 (sftp-server), ts 89517829769, free_ts 89517055987 [ 237.344874][ T7903] post_alloc_hook+0x181/0x1b0 [ 237.355062][ T7903] get_page_from_freelist+0x135c/0x3920 [ 237.362849][ T7903] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 237.368931][ T7903] alloc_pages_mpol+0x1fb/0x550 [ 237.376956][ T7907] mkiss: ax0: crc mode is auto. [ 237.396992][ T7912] netlink: 318 bytes leftover after parsing attributes in process `syz.3.416'. [ 237.401576][ T7903] alloc_pages_noprof+0x131/0x390 [ 237.434605][ T7903] skb_page_frag_refill+0x186/0x5a0 [ 237.452680][ T7903] try_fill_recv+0x79c/0x2690 [ 237.468621][ T7903] virtnet_poll+0x1e23/0x3c00 [ 237.487867][ T7903] __napi_poll.constprop.0+0xba/0x550 [ 237.515949][ T7903] net_rx_action+0xa97/0x1010 [ 237.523346][ T7903] handle_softirqs+0x216/0x8e0 [ 237.528754][ T7903] __irq_exit_rcu+0x109/0x170 [ 237.535629][ T7903] irq_exit_rcu+0x9/0x30 [ 237.542064][ T7903] common_interrupt+0xbf/0xe0 [ 237.546947][ T7903] asm_common_interrupt+0x26/0x40 [ 237.554221][ T7903] page last free pid 5814 tgid 5814 stack trace: [ 237.562769][ T7903] __free_frozen_pages+0x69d/0xff0 [ 237.577748][ T7903] __folio_put+0x329/0x450 [ 237.584396][ T7903] skb_release_data+0x618/0x960 [ 237.591671][ T7903] napi_consume_skb+0x15a/0x220 [ 237.596726][ T7903] net_rx_action+0x480/0x1010 [ 237.604847][ T7903] handle_softirqs+0x216/0x8e0 [ 237.615217][ T7903] __irq_exit_rcu+0x109/0x170 [ 237.621957][ T7903] irq_exit_rcu+0x9/0x30 [ 237.626425][ T7903] common_interrupt+0xbf/0xe0 [ 237.634317][ T7903] asm_common_interrupt+0x26/0x40 [ 237.648595][ T7912] veth0_macvtap: left promiscuous mode [ 238.600754][ T7933] netlink: 330 bytes leftover after parsing attributes in process `syz.3.419'. [ 239.812330][ T7945] FAULT_INJECTION: forcing a failure. [ 239.812330][ T7945] name failslab, interval 1, probability 0, space 0, times 0 [ 239.868470][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.2.421 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 239.868513][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.868530][ T7945] Call Trace: [ 239.868539][ T7945] [ 239.868550][ T7945] dump_stack_lvl+0x16c/0x1f0 [ 239.868602][ T7945] should_fail_ex+0x512/0x640 [ 239.868648][ T7945] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 239.868689][ T7945] should_failslab+0xc2/0x120 [ 239.868726][ T7945] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 239.868760][ T7945] ? __proc_create+0xc3/0x8c0 [ 239.868794][ T7945] ? __proc_create+0x2ce/0x8c0 [ 239.868834][ T7945] __proc_create+0x2ce/0x8c0 [ 239.868879][ T7945] ? __pfx___proc_create+0x10/0x10 [ 239.868922][ T7945] ? _raw_write_unlock+0x28/0x50 [ 239.868964][ T7945] ? proc_register+0x314/0x5f0 [ 239.869006][ T7945] proc_create_reg+0x7d/0x180 [ 239.869049][ T7945] proc_create_net_data+0x8e/0x1b0 [ 239.869089][ T7945] ? __pfx_proc_create_net_data+0x10/0x10 [ 239.869140][ T7945] nfs_fs_proc_net_init+0xf3/0x1e0 [ 239.869190][ T7945] nfs_net_init+0x130/0x300 [ 239.869235][ T7945] ? __pfx_nfs_net_init+0x10/0x10 [ 239.869279][ T7945] ops_init+0x1e2/0x5f0 [ 239.869324][ T7945] setup_net+0x21e/0x850 [ 239.869372][ T7945] ? __pfx_setup_net+0x10/0x10 [ 239.869414][ T7945] ? lockdep_init_map_type+0x5c/0x280 [ 239.869459][ T7945] ? __pfx_down_read_killable+0x10/0x10 [ 239.869496][ T7945] ? debug_mutex_init+0x37/0x70 [ 239.869530][ T7945] copy_net_ns+0x2a6/0x5f0 [ 239.869581][ T7945] create_new_namespaces+0x3ea/0xad0 [ 239.869626][ T7945] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 239.869667][ T7945] ksys_unshare+0x45b/0xa40 [ 239.869711][ T7945] ? __pfx_ksys_unshare+0x10/0x10 [ 239.869751][ T7945] ? xfd_validate_state+0x5d/0x180 [ 239.869783][ T7945] ? rcu_is_watching+0x12/0xc0 [ 239.869824][ T7945] __x64_sys_unshare+0x31/0x40 [ 239.869874][ T7945] do_syscall_64+0xcd/0x230 [ 239.869926][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.869957][ T7945] RIP: 0033:0x7f22da98e969 [ 239.869982][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.870010][ T7945] RSP: 002b:00007f22db75a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 239.870038][ T7945] RAX: ffffffffffffffda RBX: 00007f22dabb6160 RCX: 00007f22da98e969 [ 239.870058][ T7945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 239.870075][ T7945] RBP: 00007f22daa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 239.870094][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.870112][ T7945] R13: 0000000000000000 R14: 00007f22dabb6160 R15: 00007ffdddfaad78 [ 239.870154][ T7945] [ 240.336842][ T7945] ------------[ cut here ]------------ [ 240.342503][ T7945] remove_proc_entry: removing non-empty directory 'net/rpc', leaking at least 'nfs' [ 240.352576][ T7945] WARNING: CPU: 0 PID: 7945 at fs/proc/generic.c:727 remove_proc_entry+0x45e/0x530 [ 240.362045][ T7945] Modules linked in: [ 240.366244][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.2.421 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 240.378317][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.389140][ T7945] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 240.395347][ T7945] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 80 72 a2 8b 48 c7 c7 a0 71 a2 8b e8 f3 eb 1f ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 f4 08 60 ff 90 48 b8 00 00 00 00 00 [ 240.415200][ T7945] RSP: 0018:ffffc90003327b70 EFLAGS: 00010282 [ 240.421374][ T7945] RAX: 0000000000000000 RBX: ffff88807a1c08c0 RCX: ffffffff817a9458 [ 240.429730][ T7945] RDX: ffff88807dc9bc00 RSI: ffffffff817a9465 RDI: 0000000000000001 [ 240.438305][ T7945] RBP: ffff888012b0fe80 R08: 0000000000000001 R09: 0000000000000000 [ 240.446347][ T7945] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888012b0fdc0 [ 240.459371][ T7945] R13: ffff888012b0fea4 R14: ffff888034b3fc24 R15: dffffc0000000000 [ 240.468813][ T7945] FS: 00007f22db75a6c0(0000) GS:ffff8881249e7000(0000) knlGS:0000000000000000 [ 240.477996][ T7945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.484639][ T7945] CR2: 0000555580f2c808 CR3: 0000000031784000 CR4: 00000000003526f0 [ 240.492737][ T7945] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.501250][ T7945] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.509369][ T7945] Call Trace: [ 240.512709][ T7945] [ 240.515720][ T7945] ? __pfx_remove_proc_entry+0x10/0x10 [ 240.521340][ T7945] ? kfree+0x2b6/0x4d0 [ 240.525554][ T7945] ? cache_destroy_net+0x31/0x50 [ 240.530626][ T7945] ? sunrpc_exit_net+0x37/0x90 [ 240.535484][ T7945] sunrpc_exit_net+0x46/0x90 [ 240.540251][ T7945] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 240.545618][ T7945] ops_exit_list+0xb3/0x180 [ 240.550343][ T7945] setup_net+0x4e8/0x850 [ 240.554666][ T7945] ? __pfx_setup_net+0x10/0x10 [ 240.559629][ T7945] ? lockdep_init_map_type+0x5c/0x280 [ 240.565076][ T7945] ? __pfx_down_read_killable+0x10/0x10 [ 240.570767][ T7945] ? debug_mutex_init+0x37/0x70 [ 240.575687][ T7945] copy_net_ns+0x2a6/0x5f0 [ 240.580273][ T7945] create_new_namespaces+0x3ea/0xad0 [ 240.585644][ T7945] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 240.591394][ T7945] ksys_unshare+0x45b/0xa40 [ 240.595978][ T7945] ? __pfx_ksys_unshare+0x10/0x10 [ 240.601456][ T7945] ? xfd_validate_state+0x5d/0x180 [ 240.606682][ T7945] ? rcu_is_watching+0x12/0xc0 [ 240.611742][ T7945] __x64_sys_unshare+0x31/0x40 [ 240.616589][ T7945] do_syscall_64+0xcd/0x230 [ 240.621265][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.627236][ T7945] RIP: 0033:0x7f22da98e969 [ 240.631794][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.651555][ T7945] RSP: 002b:00007f22db75a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 240.660303][ T7945] RAX: ffffffffffffffda RBX: 00007f22dabb6160 RCX: 00007f22da98e969 [ 240.668387][ T7945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 240.676418][ T7945] RBP: 00007f22daa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 240.684623][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.692759][ T7945] R13: 0000000000000000 R14: 00007f22dabb6160 R15: 00007ffdddfaad78 [ 240.701361][ T7945] [ 240.704447][ T7945] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.711781][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.2.421 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 240.723732][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.733842][ T7945] Call Trace: [ 240.737142][ T7945] [ 240.740092][ T7945] dump_stack_lvl+0x3d/0x1f0 [ 240.744728][ T7945] panic+0x71c/0x800 [ 240.748666][ T7945] ? __pfx_panic+0x10/0x10 [ 240.753124][ T7945] ? show_trace_log_lvl+0x29b/0x3e0 [ 240.758384][ T7945] ? check_panic_on_warn+0x1f/0xb0 [ 240.763984][ T7945] ? remove_proc_entry+0x45e/0x530 [ 240.769140][ T7945] check_panic_on_warn+0xab/0xb0 [ 240.774123][ T7945] __warn+0xf6/0x3c0 [ 240.778054][ T7945] ? preempt_schedule_notrace+0x62/0xe0 [ 240.783637][ T7945] ? remove_proc_entry+0x45e/0x530 [ 240.788786][ T7945] report_bug+0x3c3/0x580 [ 240.793153][ T7945] ? remove_proc_entry+0x45e/0x530 [ 240.798300][ T7945] handle_bug+0x184/0x210 [ 240.802655][ T7945] exc_invalid_op+0x17/0x50 [ 240.807200][ T7945] asm_exc_invalid_op+0x1a/0x20 [ 240.812079][ T7945] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 240.817839][ T7945] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 80 72 a2 8b 48 c7 c7 a0 71 a2 8b e8 f3 eb 1f ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 f4 08 60 ff 90 48 b8 00 00 00 00 00 [ 240.837476][ T7945] RSP: 0018:ffffc90003327b70 EFLAGS: 00010282 [ 240.843573][ T7945] RAX: 0000000000000000 RBX: ffff88807a1c08c0 RCX: ffffffff817a9458 [ 240.851569][ T7945] RDX: ffff88807dc9bc00 RSI: ffffffff817a9465 RDI: 0000000000000001 [ 240.859602][ T7945] RBP: ffff888012b0fe80 R08: 0000000000000001 R09: 0000000000000000 [ 240.867615][ T7945] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888012b0fdc0 [ 240.875606][ T7945] R13: ffff888012b0fea4 R14: ffff888034b3fc24 R15: dffffc0000000000 [ 240.883624][ T7945] ? __warn_printk+0x198/0x350 [ 240.888433][ T7945] ? __warn_printk+0x1a5/0x350 [ 240.893246][ T7945] ? __pfx_remove_proc_entry+0x10/0x10 [ 240.898750][ T7945] ? kfree+0x2b6/0x4d0 [ 240.902843][ T7945] ? cache_destroy_net+0x31/0x50 [ 240.907828][ T7945] ? sunrpc_exit_net+0x37/0x90 [ 240.912648][ T7945] sunrpc_exit_net+0x46/0x90 [ 240.917284][ T7945] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 240.922614][ T7945] ops_exit_list+0xb3/0x180 [ 240.927170][ T7945] setup_net+0x4e8/0x850 [ 240.931455][ T7945] ? __pfx_setup_net+0x10/0x10 [ 240.936252][ T7945] ? lockdep_init_map_type+0x5c/0x280 [ 240.941666][ T7945] ? __pfx_down_read_killable+0x10/0x10 [ 240.947246][ T7945] ? debug_mutex_init+0x37/0x70 [ 240.952128][ T7945] copy_net_ns+0x2a6/0x5f0 [ 240.956598][ T7945] create_new_namespaces+0x3ea/0xad0 [ 240.961925][ T7945] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 240.967598][ T7945] ksys_unshare+0x45b/0xa40 [ 240.972140][ T7945] ? __pfx_ksys_unshare+0x10/0x10 [ 240.977208][ T7945] ? xfd_validate_state+0x5d/0x180 [ 240.982350][ T7945] ? rcu_is_watching+0x12/0xc0 [ 240.987156][ T7945] __x64_sys_unshare+0x31/0x40 [ 240.991960][ T7945] do_syscall_64+0xcd/0x230 [ 240.996522][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.002533][ T7945] RIP: 0033:0x7f22da98e969 [ 241.006999][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.026636][ T7945] RSP: 002b:00007f22db75a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 241.035081][ T7945] RAX: ffffffffffffffda RBX: 00007f22dabb6160 RCX: 00007f22da98e969 [ 241.043078][ T7945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 241.051069][ T7945] RBP: 00007f22daa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 241.059060][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.067050][ T7945] R13: 0000000000000000 R14: 00007f22dabb6160 R15: 00007ffdddfaad78 [ 241.075064][ T7945] [ 241.078427][ T7945] Kernel Offset: disabled [ 241.082775][ T7945] Rebooting in 86400 seconds..