last executing test programs: 2.283683775s ago: executing program 0 (id=1): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800000}, 0x1c) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040d8}, 0x810) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x2000a000000, 0xfffffffffffffffd, 0x0, 0x10, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fa, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xe, 0x80000006}, 0x0, 0x0) 1.500406952s ago: executing program 3 (id=5): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), 0x0}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}}, 0x0) 1.265258785s ago: executing program 3 (id=6): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.263550515s ago: executing program 0 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) 1.174455524s ago: executing program 2 (id=3): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 974.019934ms ago: executing program 3 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x94, r1, 0x1, 0x70bd22, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x77, 0x33, @beacon={{{}, {0xddb}, @device_a, @device_a, @initial, {0x0, 0x6}}, 0x101, @random=0x2, 0xc502, @val, @val={0x1, 0x1, [{0x24}]}, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xa, 0x97, 0x0, 0xffff}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x4, {0x5, 0x99, 0x0, "b0"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x80, 0x2c, 0x1c}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x3, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0x5, 0x21, 0xb}}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x240008c0}, 0x20040010) 836.054037ms ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002240)={0x5c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 751.045836ms ago: executing program 3 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x101, 0xf, 0x120000, 0x5, 0xfffffffffffffffc, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x800001d}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 475.315143ms ago: executing program 1 (id=10): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 275.755423ms ago: executing program 1 (id=11): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x6, 0x10007f, 0x20000006, 0x4d, 0x6, 0x400, 0x9, 0x2, 0xfffb2d34, 0xffffff01, 0x6, 0x8, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x4, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0xfff, 0x7, 0x40017, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x1], [0x10000006, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x6, 0x1, 0x9, 0x8, 0x9, 0xa671, 0x1047, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7bff, 0x0, 0x5, 0xf, 0x8, 0x6, 0x3ff, 0x1, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x6, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0xfffffffe, 0x5, 0x1e, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x9, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0xd, 0x1, 0x30b1d691, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 250.127725ms ago: executing program 3 (id=12): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=r0], 0x48}}, 0x0) 162.655954ms ago: executing program 3 (id=13): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 0s ago: executing program 1 (id=14): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'macinuit'}}, {}, {@umask={'umask', 0x3d, 0x1000}}, {@uid}, {@nodecompose}, {@force}]}, 0x3, 0x6b9, &(0x7f0000000a00)="$eJzs3U1sHGcZB/D/bJx1Nkip26ZtQEi1GqmCRiR2ViVBQmpACOUQoQguvVqJ01jZpJXtorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHh5BuHSNw45AAYzezsem1vHDuOvab9/aTJvLPv1zOP52N37GgDfGpdfD2Huyly8dSl2+X2yr12Z+Ve+2a/nGQySSOZ6K1StJLi4+RCeks+W75YD1c8bJ5X739UTLz/Ybu3NVEvVfvGVv02GdmymxwZbBxKMt0r/nvbw24ar1qqca6sjfeYikHcZcJO9hMH47a6SXetsvHI7ts/b4ED607vvrnJVHI0vbtr+T4g9dXh0VeG8dvy2tTdvzgAAABgr4z8LD/sqQd5kNs5tj/hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCdD0fvOwKJeGv3ydIr+9/83h75TvznmcHfpvWvV6ttPjTsQAAAAAAAAANiVFx/kQW7nWH97tah+5/9StXG8+vczeTtLmc9iTud25rKc5SxmNsnU0EDN23PLy4uzwz2rPxJY+nnKnqurq3fqnmdH9jy7Pq7uxkBH/aXBpkYAAAAAAAAA8Kn1g1xc+/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBEVyqLeqluP98lQaE0mOJGkW04PmzbEG+wT8cdwBAAAAwN5r1etjxX97hdWi+sz/fPW5/0jezq0sZyHL6WQ+V6tnAb1P/Y2/dtudlXvtm+WyeeCv/XNHcVQjpvfsYfTMM1WL5wY9Luab+U5OZTqXs5iFfDdzWc58pvONqjSXIlP104uplXut9GPdHO+FdVuXN8b24lC5jO9EFUkr17JQxXY6V5r90Bt1uxNDs/2+mWyY8W6ZneK12jZzdLVel3v0s3p9MExVe354kJGZOvdlNp4ezvvm3O/wONk402wag2dQx9dmKTc3zvRYOT9ar8tc/3hvc77DR2nrM9H9abnVP/qe3zrnyRf/9qfL1xu3bly/tnTq4BxGj2njMdEeysQL28pEp8xEdxeZOLKb+J+cZp2N3lV0Z1fLl6q+x7KQb+XNXM18zmUmszmfmXwlZ9PO2aG8Prd1XqtzrbGzc+3kF+pCeU/6ydC9ad9MPqyizOvTQ3kdvtJNVXXDr6xl6ZltZKloZnSW/j4ylInP1YVyjh8O3XHGb5CJxtq1uR/ds1tn4pf/WU2y1Ll1Y/H63FvbnO/lel2etu+tvzb/6ons0M7Vu1seL8+UP6z0bhvDR0dZ92y/bt2RM1vVHR/Urb/PNZupzude3aPO1HKk5++OGqlX98LIWdpV3YmhunXvcvJmOoN3IQAcYEdfOdps3W/9pfVB60et661LR74+eX7y880c/vPEHw79pvHrxleLV/JBvp9j444UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CZbeeffGXKczv3gAC2k84QHvjqzqp6L3SvNg7PtWhcP7O+mhnTSe3OqI+m2SLbo3x5HMVpID8DOd62RiH+aazIiqS4NXWkljEE+SGwfkC+6AvXBm+eZbZ5beefdLCzfn3ph/Y/7W2fPnXjvX/vLsnTPXFjrzM71/xx0lsBfW3gaMOxIAAAAAAAAAAABgu3bz3wn+cWl7jUdMW3THsK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/6eLr+dwN0VmZ07PlNsr99qdcumX11pOJGkkKb6XFB8nF9JbMjU0XPGweV69/9EvXn7/w/baWBP99o0N/X73r9XVHe5Ft14yneRQvX60yW2Nd2VovO4OA+spBntYJuxkP3Ewbv8LAAD///zfBvQ=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 79.688000][ T5776] cgroup: Unknown subsys name 'net' [ 79.825054][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.517043][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.220259][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.228559][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.237601][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.246328][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.254055][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.262513][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.270551][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.289248][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.296829][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.305067][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.312421][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.321447][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.321723][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.337870][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.339786][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.345555][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.352908][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.359264][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.366837][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.374849][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.387743][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.395582][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.403671][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.410964][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.921998][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 84.011043][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 84.033422][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 84.137624][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.144856][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.152779][ T5787] bridge_slave_0: entered allmulticast mode [ 84.160512][ T5787] bridge_slave_0: entered promiscuous mode [ 84.185693][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 84.208657][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.215845][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.223380][ T5787] bridge_slave_1: entered allmulticast mode [ 84.230249][ T5787] bridge_slave_1: entered promiscuous mode [ 84.303604][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.310909][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.318175][ T5786] bridge_slave_0: entered allmulticast mode [ 84.325070][ T5786] bridge_slave_0: entered promiscuous mode [ 84.359930][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.367433][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.374625][ T5786] bridge_slave_1: entered allmulticast mode [ 84.382038][ T5786] bridge_slave_1: entered promiscuous mode [ 84.390967][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.403651][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.510372][ T5787] team0: Port device team_slave_0 added [ 84.519449][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.526982][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.534191][ T5791] bridge_slave_0: entered allmulticast mode [ 84.541738][ T5791] bridge_slave_0: entered promiscuous mode [ 84.549663][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.557133][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.564361][ T5795] bridge_slave_0: entered allmulticast mode [ 84.571743][ T5795] bridge_slave_0: entered promiscuous mode [ 84.581437][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.595079][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.606662][ T5787] team0: Port device team_slave_1 added [ 84.623316][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.630784][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.638234][ T5791] bridge_slave_1: entered allmulticast mode [ 84.645228][ T5791] bridge_slave_1: entered promiscuous mode [ 84.652058][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.659519][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.667478][ T5795] bridge_slave_1: entered allmulticast mode [ 84.674905][ T5795] bridge_slave_1: entered promiscuous mode [ 84.760054][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.772525][ T5786] team0: Port device team_slave_0 added [ 84.780117][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.787471][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.813557][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.838014][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.854199][ T5786] team0: Port device team_slave_1 added [ 84.873237][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.880266][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.906305][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.925828][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.975283][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.982365][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.009313][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.023384][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.047413][ T5795] team0: Port device team_slave_0 added [ 85.066043][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.073136][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.099268][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.138535][ T5795] team0: Port device team_slave_1 added [ 85.163305][ T5787] hsr_slave_0: entered promiscuous mode [ 85.171253][ T5787] hsr_slave_1: entered promiscuous mode [ 85.190277][ T5791] team0: Port device team_slave_0 added [ 85.244635][ T5791] team0: Port device team_slave_1 added [ 85.264913][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.272568][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.299100][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.316666][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.323697][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.350238][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.418109][ T5786] hsr_slave_0: entered promiscuous mode [ 85.424555][ T5786] hsr_slave_1: entered promiscuous mode [ 85.432089][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.441245][ T50] Bluetooth: hci0: command tx timeout [ 85.445430][ T5786] Cannot create hsr debugfs directory [ 85.453455][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.461053][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.487357][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.504969][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.512367][ T50] Bluetooth: hci2: command tx timeout [ 85.512388][ T5790] Bluetooth: hci3: command tx timeout [ 85.512586][ T5790] Bluetooth: hci1: command tx timeout [ 85.518902][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.555419][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.646769][ T5795] hsr_slave_0: entered promiscuous mode [ 85.653231][ T5795] hsr_slave_1: entered promiscuous mode [ 85.659498][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.667408][ T5795] Cannot create hsr debugfs directory [ 85.756708][ T5791] hsr_slave_0: entered promiscuous mode [ 85.763394][ T5791] hsr_slave_1: entered promiscuous mode [ 85.769638][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.777373][ T5791] Cannot create hsr debugfs directory [ 86.065708][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.080315][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.090508][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.120220][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.194979][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.214155][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.231747][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.242373][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.343201][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.362331][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.395592][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.439998][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.481652][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.494328][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.509319][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.527903][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.573094][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.650105][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.669220][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.676718][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.706100][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.713412][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.777940][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.841718][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.861204][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.883584][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.912516][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.919743][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.941454][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.969743][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.976976][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.002187][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.009437][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.059351][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.070385][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.077581][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.135012][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.195070][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.202321][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.234499][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.241807][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.338673][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.412863][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.485735][ T5787] veth0_vlan: entered promiscuous mode [ 87.508672][ T5790] Bluetooth: hci0: command tx timeout [ 87.522808][ T5787] veth1_vlan: entered promiscuous mode [ 87.586577][ T5790] Bluetooth: hci2: command tx timeout [ 87.587828][ T50] Bluetooth: hci3: command tx timeout [ 87.592043][ T5790] Bluetooth: hci1: command tx timeout [ 87.634842][ T5787] veth0_macvtap: entered promiscuous mode [ 87.690035][ T5787] veth1_macvtap: entered promiscuous mode [ 87.758910][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.794791][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.812876][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.844390][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.866508][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.875280][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.884596][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.011511][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.030083][ T5786] veth0_vlan: entered promiscuous mode [ 88.080206][ T5786] veth1_vlan: entered promiscuous mode [ 88.092722][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.106761][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.123329][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.177302][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.188501][ T5791] veth0_vlan: entered promiscuous mode [ 88.191193][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.221954][ T5791] veth1_vlan: entered promiscuous mode [ 88.245140][ T5786] veth0_macvtap: entered promiscuous mode [ 88.264532][ T5786] veth1_macvtap: entered promiscuous mode [ 88.345795][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.357109][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.369428][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.383385][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.395125][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.412184][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.422995][ T5791] veth0_macvtap: entered promiscuous mode [ 88.442498][ T5791] veth1_macvtap: entered promiscuous mode [ 88.463737][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.480746][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.491346][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.504915][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.526422][ T5795] veth0_vlan: entered promiscuous mode [ 88.562112][ T5795] veth1_vlan: entered promiscuous mode [ 88.614399][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.627900][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.638218][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.648817][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.661946][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.678038][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.688756][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.699428][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.711088][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.723464][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.751336][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.760956][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.770387][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.779471][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.815067][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.835014][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.862304][ T5795] veth0_macvtap: entered promiscuous mode [ 88.888395][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.890209][ T5795] veth1_macvtap: entered promiscuous mode [ 88.902957][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.959719][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.972138][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.982531][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.993169][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.003180][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.014102][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.034059][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.059786][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.070998][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.081337][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.094462][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.115273][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.154880][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.172250][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.196042][ T5795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.205422][ T5795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.217282][ T5795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.226665][ T5795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.256731][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.281846][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.335978][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.344363][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.522230][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.560396][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.589197][ T5790] Bluetooth: hci0: command tx timeout [ 89.666987][ T5790] Bluetooth: hci3: command tx timeout [ 89.667434][ T50] Bluetooth: hci2: command tx timeout [ 89.672493][ T5790] Bluetooth: hci1: command tx timeout [ 89.693571][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.716374][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.931091][ T5878] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 89.974878][ T5897] Zero length message leads to an empty skb [ 90.010879][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.024151][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.061892][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.080939][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.098912][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.183913][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.196248][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.243113][ T5878] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 90.271099][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.293251][ T5878] usb 1-1: SerialNumber: syz [ 90.367460][ T5878] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 90.374999][ T5878] usb-storage 1-1:1.0: USB Mass Storage device detected [ 90.392159][ T5878] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 90.402973][ T5878] scsi host1: usb-storage 1-1:1.0 [ 90.584225][ T5878] usb 1-1: USB disconnect, device number 2 [ 90.801228][ T5915] syz.1.14[5915]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.825136][ T5915] loop1: detected capacity change from 0 to 1024 [ 90.896517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.988113][ T5915] hfsplus: invalid length 256 has been corrected to 255 [ 90.995421][ T5915] ================================================================== [ 91.003519][ T5915] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x5bd/0x1240 [ 91.011310][ T5915] Read of size 2 at addr ffff8880256e0a18 by task syz.1.14/5915 [ 91.018979][ T5915] [ 91.021330][ T5915] CPU: 0 PID: 5915 Comm: syz.1.14 Not tainted syzkaller #0 [ 91.028541][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.038615][ T5915] Call Trace: [ 91.041906][ T5915] [ 91.044858][ T5915] dump_stack_lvl+0x16c/0x230 [ 91.049561][ T5915] ? __lock_acquire+0x7c80/0x7c80 [ 91.054601][ T5915] ? show_regs_print_info+0x20/0x20 [ 91.059819][ T5915] ? load_image+0x3b0/0x3b0 [ 91.064341][ T5915] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 91.069725][ T5915] ? __virt_addr_valid+0x18c/0x540 [ 91.074850][ T5915] ? __virt_addr_valid+0x469/0x540 [ 91.079991][ T5915] print_report+0xac/0x220 [ 91.084419][ T5915] ? hfsplus_uni2asc+0x5bd/0x1240 [ 91.089460][ T5915] kasan_report+0x117/0x150 [ 91.093990][ T5915] ? hfsplus_uni2asc+0x5bd/0x1240 [ 91.099029][ T5915] hfsplus_uni2asc+0x5bd/0x1240 [ 91.103890][ T5915] ? hfsplus_bnode_read+0x1c2/0x6f0 [ 91.109108][ T5915] hfsplus_listxattr+0x58f/0xb80 [ 91.114069][ T5915] ? hfsplus_getxattr+0x160/0x160 [ 91.119106][ T5915] ? kasan_save_free_info+0x2e/0x50 [ 91.124345][ T5915] ? slab_free_freelist_hook+0x130/0x1b0 [ 91.130000][ T5915] ? user_path_at_empty+0x4c/0x60 [ 91.135041][ T5915] ? kmem_cache_free+0xf8/0x280 [ 91.139908][ T5915] ? bpf_lsm_inode_listxattr+0x9/0x10 [ 91.145300][ T5915] ? hfsplus_getxattr+0x160/0x160 [ 91.150345][ T5915] listxattr+0x107/0x280 [ 91.154607][ T5915] path_listxattr+0xdd/0x1b0 [ 91.159215][ T5915] ? path_getxattr+0x400/0x400 [ 91.164000][ T5915] ? lockdep_hardirqs_on+0x98/0x150 [ 91.169215][ T5915] do_syscall_64+0x55/0xb0 [ 91.173646][ T5915] ? clear_bhb_loop+0x40/0x90 [ 91.178348][ T5915] ? clear_bhb_loop+0x40/0x90 [ 91.183041][ T5915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.188946][ T5915] RIP: 0033:0x7f90d2b8eec9 [ 91.193397][ T5915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.213030][ T5915] RSP: 002b:00007f90d3a3a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 91.221485][ T5915] RAX: ffffffffffffffda RBX: 00007f90d2de5fa0 RCX: 00007f90d2b8eec9 [ 91.229473][ T5915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 91.237452][ T5915] RBP: 00007f90d2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 91.245429][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.253496][ T5915] R13: 00007f90d2de6038 R14: 00007f90d2de5fa0 R15: 00007ffcaa204ab8 [ 91.261493][ T5915] [ 91.264520][ T5915] [ 91.266878][ T5915] Allocated by task 5915: [ 91.271213][ T5915] kasan_set_track+0x4e/0x70 [ 91.275815][ T5915] __kasan_kmalloc+0x8f/0xa0 [ 91.280414][ T5915] __kmalloc+0xb4/0x240 [ 91.284578][ T5915] hfsplus_find_init+0x89/0x1d0 [ 91.289456][ T5915] hfsplus_listxattr+0x390/0xb80 [ 91.294408][ T5915] listxattr+0x107/0x280 [ 91.298659][ T5915] path_listxattr+0xdd/0x1b0 [ 91.303260][ T5915] do_syscall_64+0x55/0xb0 [ 91.307703][ T5915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.313602][ T5915] [ 91.315927][ T5915] The buggy address belongs to the object at ffff8880256e0800 [ 91.315927][ T5915] which belongs to the cache kmalloc-1k of size 1024 [ 91.329986][ T5915] The buggy address is located 0 bytes to the right of [ 91.329986][ T5915] allocated 536-byte region [ffff8880256e0800, ffff8880256e0a18) [ 91.344497][ T5915] [ 91.346828][ T5915] The buggy address belongs to the physical page: [ 91.353250][ T5915] page:ffffea000095b800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x256e0 [ 91.363427][ T5915] head:ffffea000095b800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 91.372370][ T5915] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 91.380374][ T5915] page_type: 0xffffffff() [ 91.384754][ T5915] raw: 00fff00000000840 ffff888017841dc0 dead000000000122 0000000000000000 [ 91.393351][ T5915] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 91.401938][ T5915] page dumped because: kasan: bad access detected [ 91.408380][ T5915] page_owner tracks the page as allocated [ 91.414095][ T5915] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1087, tgid 1087 (kworker/u4:6), ts 90952106603, free_ts 90752495474 [ 91.434775][ T5915] post_alloc_hook+0x1cd/0x210 [ 91.439560][ T5915] get_page_from_freelist+0x195c/0x19f0 [ 91.445120][ T5915] __alloc_pages+0x1e3/0x460 [ 91.449731][ T5915] alloc_slab_page+0x5d/0x170 [ 91.454418][ T5915] new_slab+0x87/0x2e0 [ 91.458522][ T5915] ___slab_alloc+0xc6d/0x1300 [ 91.463213][ T5915] __kmem_cache_alloc_node+0x1a2/0x260 [ 91.468707][ T5915] __kmalloc+0xa4/0x240 [ 91.472873][ T5915] ieee802_11_parse_elems_full+0xb9/0x2080 [ 91.478693][ T5915] ieee80211_inform_bss+0x107/0x1060 [ 91.483983][ T5915] rdev_inform_bss+0x106/0x410 [ 91.488757][ T5915] cfg80211_inform_bss_frame_data+0xb33/0x12b0 [ 91.494922][ T5915] ieee80211_bss_info_update+0x70b/0x930 [ 91.500563][ T5915] ieee80211_ibss_rx_queued_mgmt+0x17c9/0x2ac0 [ 91.506741][ T5915] ieee80211_iface_work+0x717/0xc70 [ 91.511979][ T5915] cfg80211_wiphy_work+0x225/0x260 [ 91.517111][ T5915] page last free stack trace: [ 91.521790][ T5915] free_unref_page_prepare+0x7ce/0x8e0 [ 91.527269][ T5915] free_unref_page+0x32/0x2e0 [ 91.531963][ T5915] __unfreeze_partials+0x1cf/0x210 [ 91.537107][ T5915] put_cpu_partial+0x17c/0x250 [ 91.541903][ T5915] __slab_free+0x31d/0x410 [ 91.546333][ T5915] qlist_free_all+0x75/0xe0 [ 91.550863][ T5915] kasan_quarantine_reduce+0x143/0x160 [ 91.556337][ T5915] __kasan_slab_alloc+0x22/0x80 [ 91.561195][ T5915] slab_post_alloc_hook+0x6e/0x4d0 [ 91.566415][ T5915] kmem_cache_alloc_lru+0x115/0x2e0 [ 91.571628][ T5915] shmem_alloc_inode+0x28/0x40 [ 91.576404][ T5915] new_inode_pseudo+0x63/0x1d0 [ 91.581177][ T5915] new_inode+0x22/0x1b0 [ 91.585344][ T5915] shmem_get_inode+0x34f/0xcc0 [ 91.590131][ T5915] shmem_mknod+0x60/0x1d0 [ 91.594493][ T5915] path_openat+0x1277/0x3190 [ 91.599194][ T5915] [ 91.601524][ T5915] Memory state around the buggy address: [ 91.607159][ T5915] ffff8880256e0900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.615225][ T5915] ffff8880256e0980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.623291][ T5915] >ffff8880256e0a00: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.631359][ T5915] ^ [ 91.636213][ T5915] ffff8880256e0a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.644301][ T5915] ffff8880256e0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.652364][ T5915] ================================================================== [ 91.663523][ T5915] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.670771][ T5915] CPU: 0 PID: 5915 Comm: syz.1.14 Not tainted syzkaller #0 [ 91.678004][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.688096][ T5915] Call Trace: [ 91.691426][ T5915] [ 91.694390][ T5915] dump_stack_lvl+0x16c/0x230 [ 91.699122][ T5915] ? show_regs_print_info+0x20/0x20 [ 91.704382][ T5915] ? load_image+0x3b0/0x3b0 [ 91.708934][ T5915] panic+0x2c0/0x710 [ 91.712873][ T5915] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 91.719077][ T5915] ? bpf_jit_dump+0xd0/0xd0 [ 91.723619][ T5915] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 91.729551][ T5915] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 91.735489][ T5915] ? _raw_spin_unlock+0x40/0x40 [ 91.740384][ T5915] ? hfsplus_uni2asc+0x5bd/0x1240 [ 91.745446][ T5915] check_panic_on_warn+0x84/0xa0 [ 91.750411][ T5915] ? hfsplus_uni2asc+0x5bd/0x1240 [ 91.755458][ T5915] end_report+0x6f/0x140 [ 91.759722][ T5915] kasan_report+0x128/0x150 [ 91.764242][ T5915] ? hfsplus_uni2asc+0x5bd/0x1240 [ 91.769283][ T5915] hfsplus_uni2asc+0x5bd/0x1240 [ 91.774174][ T5915] ? hfsplus_bnode_read+0x1c2/0x6f0 [ 91.779393][ T5915] hfsplus_listxattr+0x58f/0xb80 [ 91.784347][ T5915] ? hfsplus_getxattr+0x160/0x160 [ 91.789379][ T5915] ? kasan_save_free_info+0x2e/0x50 [ 91.794604][ T5915] ? slab_free_freelist_hook+0x130/0x1b0 [ 91.800247][ T5915] ? user_path_at_empty+0x4c/0x60 [ 91.805277][ T5915] ? kmem_cache_free+0xf8/0x280 [ 91.810140][ T5915] ? bpf_lsm_inode_listxattr+0x9/0x10 [ 91.815515][ T5915] ? hfsplus_getxattr+0x160/0x160 [ 91.820560][ T5915] listxattr+0x107/0x280 [ 91.824807][ T5915] path_listxattr+0xdd/0x1b0 [ 91.829403][ T5915] ? path_getxattr+0x400/0x400 [ 91.834170][ T5915] ? lockdep_hardirqs_on+0x98/0x150 [ 91.839381][ T5915] do_syscall_64+0x55/0xb0 [ 91.843801][ T5915] ? clear_bhb_loop+0x40/0x90 [ 91.848481][ T5915] ? clear_bhb_loop+0x40/0x90 [ 91.853163][ T5915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.859057][ T5915] RIP: 0033:0x7f90d2b8eec9 [ 91.863471][ T5915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.883087][ T5915] RSP: 002b:00007f90d3a3a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 91.891506][ T5915] RAX: ffffffffffffffda RBX: 00007f90d2de5fa0 RCX: 00007f90d2b8eec9 [ 91.899478][ T5915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 91.907448][ T5915] RBP: 00007f90d2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 91.915418][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.923386][ T5915] R13: 00007f90d2de6038 R14: 00007f90d2de5fa0 R15: 00007ffcaa204ab8 [ 91.931365][ T5915] [ 91.934756][ T5915] Kernel Offset: disabled [ 91.939085][ T5915] Rebooting in 86400 seconds..