last executing test programs: 22.17907713s ago: executing program 1 (id=11): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r5 = dup2(r4, r4) write$tun(r5, 0x0, 0x46) 22.140013081s ago: executing program 2 (id=12): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x40000000015, 0x5, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2afc0, 0x1c1, 0x6}, 0x18) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="4700000001003f", 0x7) 20.36245986s ago: executing program 2 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f0000006180)={0x2020}, 0x2020) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 18.53776752s ago: executing program 3 (id=15): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8410, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) msgget$private(0x0, 0x0) r3 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a50c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}}, 0x20000000) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x57f, "0effb1", 0x57}) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r7, 0x20, 0x7fffffff, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 15.549013827s ago: executing program 2 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0xfd, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) 13.646252849s ago: executing program 1 (id=19): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00012bbd"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) 11.500818266s ago: executing program 3 (id=21): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000}) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000004000000020000000bf"], 0x48) 10.932063499s ago: executing program 1 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xffffffffffffff64, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) 10.302029443s ago: executing program 2 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 10.238776874s ago: executing program 3 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = timerfd_create(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0x0, 0x52}, 0x28) setgroups(0x0, 0x0) setregid(0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) 8.709642437s ago: executing program 1 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x10001011, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x8) mknodat(0xffffffffffffffff, 0x0, 0x100, 0xfffffffc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0x96}, 0x20) 7.139919132s ago: executing program 3 (id=28): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080), 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 6.492940187s ago: executing program 0 (id=29): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 5.86288218s ago: executing program 0 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x2a) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000140), 0x0}, 0x20) 3.827598685s ago: executing program 1 (id=31): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x6, 0x801, &(0x7f0000001540)="$eJzs3U1oHOcZAOB3FMmW5WBMWtxgbGfspOCAo6xWiVKRQ7JZjeRJpF2xuyo2paQmloOwnAS7obUviSkkbWkpPfXQQ5prbr21FFrooc2p0Bx66S2QU0mhf6QNBZXZH1mytZL8n9TPI6SZnXm/+d5vtJp3RtLOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSXWqVBpLYjavLZxI+6tONepzm6zvbe836ybrPLuu34ik+Izh4fjkH51lX7yyel/x5Ugc6Dw6EMPFZDgu7d639+kvDA702m+S0I06vM24JOLNIqmzp5aXF89fdzcxfN1Nbp/v/+q6m/x7pfg6k9XyZuRzlZkszZv1dHJiovT48elmOp3PZs2TzVY2l1YbWaVVb6RHq4+mY5OT42k2erK+UJuZqsxmvYVPPVYulSbS50fns0qjWa89/nw0q8fz2dm8NtOOKZe+FUXMU8UT8YW8lbayylyanllaXhzfKtUiaGyjFfd1nj8HHtn70esf/n1psXhC9ttI0n1ilsfGyuWxiScnn3yqVBosl8rrF5SuEqsRMRBRRNyWJy2fI7f2AA43YaBb/2M28qjFQpyIdIOPoajGVDSiHnPF4z8NXRPR1av/X378r3/YrN+19b9X5R+8snp/tOv/oc6jQ/3q/4a53smPC3ExLsXZOBXLsRyLcf6uZ7TFx8DNbiFZ++g/90dELfJoRj3ymItKzEQWaXdJGpMxERNRihfjeExHM9KYjjxmI4tmnIxmtCJrP6Oq0YgsKtGKejQijaNRjUcjjbGYjMkYjzSyGI2TUY+FqMVMTEWlvZUzsdTe7+NXZblvV/zy5T9+9E4xvxo0tsngk+Jkrgj62yZjH4jyddT/lZXifOHqCPX/HrBjs5W34SgON2alV/8BAACA/1tJ+7fvxfX/UBxsz03ns9nX7nZaAAAAwC3U/sv/gWIyVMwdjKS4/i9tEPnBHc8NAAAAuDWS9mvskogYiYc6c2diKd6MxdjolwARsfdOpwgAAADcpPbf/w8Vk5GIN9oLerdL6XP9DwAAAHzefLffPfY/7N1jtzm/M/n1UEQMJZfnTzySnKsUcZVz93XadSdfXd1ia3p/sqe7kfZkYvDS7iQiBqvZgaR398v/7uxMP25/3T+42rzfvf6TRqNIYFfR90YJxOYJtB/FD+JwJ+bw6fZkd7fJYNLpZWQ6n81Gq/XZp9u3RCw+W6+/svTtiKL379Xm9iRxZml5cfSlV5dPt3fG5aL55XPdGygmEYPbzWWluwfiYAzv6M6uHfFQ+4UY3X5HOv2W1n4DBjptBjYff7K2z7fiSCfmyEhnOtJb0+lzuOhzbPTpsahU9gy0shOt11fWjL7Iosh6deRDa0f+093bHPlb8XAn5uGjD3cmG2RRXpfFK1dlsbS8WF67/7e3L7adxTuH3zjxr9/Vk2x8qyzGryOLlfsirs4C4G45077rT6cKFZNd7br76UpHUf87dXdnr+7u6rXcxrH2n1d6WT3L6LVfU90Ho1fde9VtYPXAuL3qvhKdI/rRTszRzvnE4P5uXKfSdupKaYMj+mtLr/2+e0R/4r2f/Ozrh97/ebvftdVtG1l0jujvxaOdmO4kHvhtnxpbjPmHq5VkrD36d4sW7/bttzlbTtqnGN8891rsu3Dx0mNL5069vPjy4ivl8vhE6YlS6cly72RiqH3GsEmmANy7tn6Pnb4RvTqTPFFcVQ+v2ejp9ddzD6z+S8FovBSvxnKcjmPtVxtExEMb9zuy5t8Qjm1x1XoldiyObXFteSW2fG1sEn1ix9cM7ks/bk8+uQ3fDAC4Q45sUYeTOPJ+N7TfGUJyrN919zV1tKjlV10dR/9avpGv3M6dAQD3iKzxcTLSejtpNPL5F8cmJ8cqreP3p4169YW0kU/NZGlea2WN6vFKbSZL5xv1Vr3a+8XxVNZMmwvz8/VGK52uN9IYaOYn2u/8nnbf+r2ZzVVqrbzanJ/NKs0srdZrrUq1lU7lzWo6v/DcbN48njXajZvzWTWfzquVVl6vpc36QqOajaZpM8vWBOZTWa2VT+fFbC2db+RzlcbliJhdmMvSqaxZbeTzrXpng72+8tp0vTHX3uzotcP/y53e3wDwWXDh4qWzp5aXF8/f2MyftxN8t8cIAKynSgMAAAAAAAAAAAAAwGffhYuXzg7H8uL5vb0XAhRLb+IVgdc3szNuexf37EzxjfwMpHFjMwfvvzXb+cYzz5ztF/PcGw8e3952uj8pg7HlS13f3hOx4xc/6ix5tn/wd7o/f7dmj30QETfQfCXZYNWnK52ZdYeJHXf+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pfAAAA//+iNle9") ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x4041818, &(0x7f0000000480)=ANY=[], 0x2, 0x1509, &(0x7f0000001d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 3.779128306s ago: executing program 0 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x20001, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c0501101b", @ANYRES32], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001]}) listen(r0, 0xfffffff8) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x80000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r6, 0x406, r6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) read$alg(r8, &(0x7f0000000100)=""/122, 0x7a) 3.59787591s ago: executing program 2 (id=33): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 2.492521065s ago: executing program 0 (id=34): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) 2.084006704s ago: executing program 2 (id=35): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x2, 0x24, 0x67, 0x0, 0x4, 0x21, 0x0, @multicast2, @remote}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x1, 0x1, "bd92b6", 0x8, "1a9866"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="06"], 0x0) 1.491362147s ago: executing program 0 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x8, 0x1, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x10080) 1.100793836s ago: executing program 0 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f00000003c0)={[{@i_version}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f6, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlGKE33yLg26sCHrPM5kdIgVAQBgT2l+7T/avP6fipHYuXibik9/HGrlAAAAgIFoNIpHAAAA4OhK/PYHAACAI66YB7C9tbFUhCFOR+A/trkYEdOt9r+bh1bOaPue3rFd9/cOUikiXj1xZSELcUj3YQMAAAAcZz8sthb+6x7/S+ORjv1ORsRksbbfAJV2pbvHf9I7Ay6SDpuLES9GxN2u8b+02GV6JE/9rzlUOJZcW65Vz0XEmYiYibGJLD2/RxnvPnHj2355neN/X/76+nxWfva4s0d6Z3Ti38+plOvlBzlmdmx+EPHYaK/2T9pjvp3rZB7EG8vbL/XLy9o/a+8idLc/h6nxVcTTPft/0t4n2Xt91rnm+WAuPytMdJfxy+mvP+xXfmf/z0JWfvG3AA5f1v8n927/5jq57fV61/dfxnd/Xfm5X96927/3+X88udqs4Hi+7Z1yvb42HzGeXO7e7tPUVrwfxfuVtf/Mk72//4vrvyT/7j/TsT70frzy3tmr/fL0/+HK2r+yr/6//8ibk4/O9Cv//vr/hWZlihdx/Xdv99tAw64nAAAAAAAAAIORNuf2JelsO56ms7Oteb7/j8m0trpef+ba6ts3K605gNMxlhbzP6c65oPOt24jb6cXdqXPR8TZiPhi6mQzPbu0WqsM++ABAADgmDjV5/d/5veD3OwBAAAAPJymh10BAAAA4ND5/Q8AAABH2oOs61+rrhX/IuiATxcROVhkJP/gPSz1OXqRIZ6UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIh/AgAA//9t6Lw+") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x0, 0x1525a619, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x3, 0x6, 0x0, 0xbdb], 0xd002, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1001000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0xeef, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x0, 0x5, 0x5, 0xfb, 0x89}, {0x6000, 0x1, 0x0, 0x5, 0x3, 0x7, 0x1, 0x7, 0x9b, 0xa4, 0x2, 0x5}, {0x1, 0xffff1000, 0xd, 0x9, 0x4, 0x42, 0xb, 0x4, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x4, 0x7f, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x4, 0x9d, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x5, 0x6}, {0x5000, 0x1, 0x3, 0x5, 0x7, 0x15, 0x7, 0x3, 0x7, 0x81, 0x40, 0x70}, {0xd000, 0x70000, 0x0, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x4c, 0xb0, 0x9}, {0x8000000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x402105, 0x1000000000000, 0x1500, 0x3000, [0x9, 0x7, 0x5, 0x81]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 447.41129ms ago: executing program 3 (id=38): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 277.167463ms ago: executing program 1 (id=39): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 0s ago: executing program 3 (id=40): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000001080)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 74.532318][ T5760] cgroup: Unknown subsys name 'net' [ 74.696867][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.436885][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.111574][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.120293][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.126048][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.128561][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.136226][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.143067][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.156562][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.156725][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.164017][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.178131][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.178421][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.189033][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.201601][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.202558][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.209744][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.216701][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.223066][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.230204][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.238175][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.252125][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.252211][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.278464][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.281481][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.293439][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.769252][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 78.808285][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 78.952026][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.982079][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 78.994236][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.002152][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.009581][ T5774] bridge_slave_0: entered allmulticast mode [ 79.016452][ T5774] bridge_slave_0: entered promiscuous mode [ 79.049764][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.056960][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.064546][ T5774] bridge_slave_1: entered allmulticast mode [ 79.072147][ T5774] bridge_slave_1: entered promiscuous mode [ 79.117549][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.124775][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.131985][ T5771] bridge_slave_0: entered allmulticast mode [ 79.142168][ T5771] bridge_slave_0: entered promiscuous mode [ 79.158382][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.165925][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.173165][ T5771] bridge_slave_1: entered allmulticast mode [ 79.180103][ T5771] bridge_slave_1: entered promiscuous mode [ 79.190132][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.202798][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.285740][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.298091][ T5774] team0: Port device team_slave_0 added [ 79.308479][ T5774] team0: Port device team_slave_1 added [ 79.331995][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.398686][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.405826][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.432984][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.445960][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.453278][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.479302][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.491065][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.498236][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.505717][ T5773] bridge_slave_0: entered allmulticast mode [ 79.513224][ T5773] bridge_slave_0: entered promiscuous mode [ 79.534080][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.541281][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.548440][ T5772] bridge_slave_0: entered allmulticast mode [ 79.556974][ T5772] bridge_slave_0: entered promiscuous mode [ 79.565190][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.572429][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.579693][ T5772] bridge_slave_1: entered allmulticast mode [ 79.586829][ T5772] bridge_slave_1: entered promiscuous mode [ 79.603988][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.611519][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.618655][ T5773] bridge_slave_1: entered allmulticast mode [ 79.626550][ T5773] bridge_slave_1: entered promiscuous mode [ 79.636438][ T5771] team0: Port device team_slave_0 added [ 79.645797][ T5771] team0: Port device team_slave_1 added [ 79.707063][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.734622][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.741917][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.767965][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.781043][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.788036][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.814022][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.838198][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.850803][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.863775][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.952927][ T5774] hsr_slave_0: entered promiscuous mode [ 79.959674][ T5774] hsr_slave_1: entered promiscuous mode [ 79.983440][ T5772] team0: Port device team_slave_0 added [ 79.992373][ T5773] team0: Port device team_slave_0 added [ 80.001125][ T5772] team0: Port device team_slave_1 added [ 80.011502][ T5771] hsr_slave_0: entered promiscuous mode [ 80.018055][ T5771] hsr_slave_1: entered promiscuous mode [ 80.024380][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.032414][ T5771] Cannot create hsr debugfs directory [ 80.051298][ T5773] team0: Port device team_slave_1 added [ 80.117498][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.124599][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.150953][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.185186][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.192404][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.218614][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.230768][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.237746][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.264508][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.302928][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.310031][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.336839][ T5775] Bluetooth: hci1: command tx timeout [ 80.336895][ T51] Bluetooth: hci0: command tx timeout [ 80.347218][ T5775] Bluetooth: hci2: command tx timeout [ 80.348120][ T5780] Bluetooth: hci3: command tx timeout [ 80.358835][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.436939][ T5772] hsr_slave_0: entered promiscuous mode [ 80.443284][ T5772] hsr_slave_1: entered promiscuous mode [ 80.451299][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.458942][ T5772] Cannot create hsr debugfs directory [ 80.533654][ T5773] hsr_slave_0: entered promiscuous mode [ 80.540651][ T5773] hsr_slave_1: entered promiscuous mode [ 80.547124][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.555265][ T5773] Cannot create hsr debugfs directory [ 80.769219][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.786830][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.812134][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.822297][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.954217][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.965884][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.985713][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.995489][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.113846][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.125486][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.137512][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.179017][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.252399][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.270099][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.281248][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.294973][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.325312][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.349443][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.376438][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.383916][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.407027][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.452907][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.460128][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.511902][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.587143][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.594354][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.658200][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.672067][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.679301][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.713137][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.754258][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.793530][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.800785][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.834541][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.841736][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.943490][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.957330][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.981331][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.035281][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.042462][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.063698][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.070939][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.217348][ T5774] veth0_vlan: entered promiscuous mode [ 82.260202][ T5774] veth1_vlan: entered promiscuous mode [ 82.339337][ T5774] veth0_macvtap: entered promiscuous mode [ 82.370056][ T5774] veth1_macvtap: entered promiscuous mode [ 82.382485][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.415636][ T5780] Bluetooth: hci2: command tx timeout [ 82.417207][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.421522][ T5780] Bluetooth: hci3: command tx timeout [ 82.429228][ T51] Bluetooth: hci1: command tx timeout [ 82.434373][ T5780] Bluetooth: hci0: command tx timeout [ 82.504175][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.516117][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.539366][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.548140][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.557243][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.681296][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.701320][ T5771] veth0_vlan: entered promiscuous mode [ 82.710984][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.774396][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.796567][ T5771] veth1_vlan: entered promiscuous mode [ 82.804631][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.857882][ T5772] veth0_vlan: entered promiscuous mode [ 82.887952][ T5772] veth1_vlan: entered promiscuous mode [ 82.897360][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.912840][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.986875][ T5771] veth0_macvtap: entered promiscuous mode [ 82.999127][ T5773] veth0_vlan: entered promiscuous mode [ 83.032682][ T5771] veth1_macvtap: entered promiscuous mode [ 83.046596][ T5773] veth1_vlan: entered promiscuous mode [ 83.090063][ T5772] veth0_macvtap: entered promiscuous mode [ 83.142216][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.161116][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.177442][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.192290][ T5772] veth1_macvtap: entered promiscuous mode [ 83.220398][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.231203][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.242842][ T5836] syz.1.2[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.253635][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.275932][ T5836] loop1: detected capacity change from 0 to 1024 [ 83.292596][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.303062][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.314364][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.324805][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.356850][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.386927][ T5836] hfsplus: xattr searching failed [ 83.388976][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.397692][ T28] audit: type=1800 audit(1783485576.479:2): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 83.418817][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.430853][ T5836] hfsplus: xattr searching failed [ 83.442659][ T5836] hfsplus: xattr searching failed [ 83.447995][ T28] audit: type=1800 audit(1783485576.529:3): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 83.448247][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.472162][ T28] audit: type=1800 audit(1783485576.529:4): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 83.506147][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.508165][ T5837] hfsplus: xattr searching failed [ 83.524684][ T5773] veth0_macvtap: entered promiscuous mode [ 83.562261][ T5773] veth1_macvtap: entered promiscuous mode [ 83.571527][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.583697][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.594467][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.605374][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.617813][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.647126][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.656997][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.666152][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.678781][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.730451][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.743917][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.754735][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.767944][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.778374][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.789959][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.801904][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.828357][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.840938][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.852942][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.863528][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.874075][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.884730][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.896019][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.925849][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.938175][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.947817][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.957929][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.999714][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.007593][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.144652][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.181750][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.299017][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.321698][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.361544][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.384535][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.490239][ T5775] Bluetooth: hci1: command tx timeout [ 84.495714][ T5775] Bluetooth: hci3: command tx timeout [ 84.501343][ T51] Bluetooth: hci2: command tx timeout [ 84.507048][ T5780] Bluetooth: hci0: command tx timeout [ 86.157125][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.166731][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.918824][ T5780] Bluetooth: hci0: command tx timeout [ 87.924313][ T5780] Bluetooth: hci3: command tx timeout [ 87.929173][ T5775] Bluetooth: hci2: command tx timeout [ 87.935239][ T5775] Bluetooth: hci1: command tx timeout [ 87.991476][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.001386][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.676096][ T5859] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 92.270827][ T56] cfg80211: failed to load regulatory.db [ 92.384426][ T5872] loop0: detected capacity change from 0 to 512 [ 92.418858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.992066][ T5875] Bluetooth: MGMT ver 1.22 [ 94.031871][ T5872] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.079732][ T5872] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.166925][ T5872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 94.214444][ T5872] System zones: 1-12 [ 94.231529][ T5872] EXT4-fs (loop0): 1 truncate cleaned up [ 94.255337][ T5872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.981538][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.383119][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 99.107130][ T28] audit: type=1326 audit(1783485844.192:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968a33f1d9 code=0x7ffc0000 [ 100.738897][ T28] audit: type=1326 audit(1783485844.192:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968a39de59 code=0x7ffc0000 [ 100.768144][ T28] audit: type=1326 audit(1783485844.232:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968a33f1d9 code=0x7ffc0000 [ 100.793905][ T28] audit: type=1326 audit(1783485844.232:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968a33f1d9 code=0x7ffc0000 [ 100.848982][ T28] audit: type=1326 audit(1783485844.232:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968a33f1d9 code=0x7ffc0000 [ 100.918860][ T28] audit: type=1326 audit(1783485844.232:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968a33f1d9 code=0x7ffc0000 [ 100.983822][ T28] audit: type=1326 audit(1783485844.232:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968a33f1d9 code=0x7ffc0000 [ 101.049294][ T28] audit: type=1326 audit(1783485844.232:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968a33f1d9 code=0x7ffc0000 [ 101.053234][ T5901] loop3: detected capacity change from 0 to 128 [ 101.100063][ T28] audit: type=1326 audit(1783485844.232:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968a33f1d9 code=0x7ffc0000 [ 101.194599][ T28] audit: type=1326 audit(1783485844.232:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.0.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f968a33f1d9 code=0x7ffc0000 [ 101.270355][ T5901] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.316832][ T5901] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.959721][ T5907] bridge1: entered promiscuous mode [ 102.873900][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.528418][ T5923] capability: warning: `syz.3.21' uses deprecated v2 capabilities in a way that may be insecure [ 103.739824][ T5775] Bluetooth: hci1: failed to read key size for handle 200 [ 106.959073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.550163][ T5936] binder_alloc: 5935: binder_alloc_buf size -944 failed, no address space [ 107.638961][ T5936] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 109.929155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 110.338784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.949372][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.136468][ T5964] loop1: detected capacity change from 0 to 764 [ 113.198841][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 113.246443][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.351348][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.878696][ T5817] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.887901][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.896063][ T5817] usb 3-1: Product: syz [ 113.900441][ T5817] usb 3-1: Manufacturer: syz [ 113.928803][ T5817] usb 3-1: SerialNumber: syz [ 114.122417][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.187559][ T5973] loop1: detected capacity change from 0 to 128 [ 114.197247][ T5817] usb 3-1: 0:2 : does not exist [ 114.208919][ T5817] usb 3-1: unit 9 not found! [ 114.252155][ T5817] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 114.270595][ T5973] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.314250][ T5817] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 114.336369][ T5977] loop0: detected capacity change from 0 to 512 [ 114.365669][ T5817] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4) [ 114.443885][ T5973] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.479842][ T5977] EXT4-fs: Ignoring removed i_version option [ 114.507700][ T5977] EXT4-fs: Ignoring removed oldalloc option [ 114.514511][ T5817] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 114.542974][ T5817] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 114.583810][ T5817] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 114.688918][ T5977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.711570][ T5981] BUG: unable to handle page fault for address: ffffffffffffffec [ 114.718066][ T5817] usb 3-1: USB disconnect, device number 2 [ 114.719336][ T5981] #PF: supervisor read access in kernel mode [ 114.719349][ T5981] #PF: error_code(0x0000) - not-present page [ 114.719361][ T5981] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 114.719394][ T5981] Oops: 0000 [#1] PREEMPT SMP KASAN [ 114.719411][ T5981] CPU: 0 PID: 5981 Comm: syz.1.39 Not tainted syzkaller #0 [ 114.719430][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.719441][ T5981] RIP: 0010:ext4_free_ext_path+0x42/0x100 [ 114.719478][ T5981] Code: 85 db 0f 84 a4 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 9d 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 04 24 31 ed 48 8d 43 28 4c [ 114.719495][ T5981] RSP: 0018:ffffc90004e27640 EFLAGS: 00010246 [ 114.719512][ T5981] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 114.719527][ T5981] RDX: ffffc9000dd9e000 RSI: 0000000000006a6b RDI: ffffffffffffffec [ 114.719542][ T5981] RBP: ffffc90004e27760 R08: ffff88804f8d2a1f R09: 1ffff11009f1a543 [ 114.719557][ T5981] R10: dffffc0000000000 R11: ffffed1009f1a544 R12: ffff88804f8d2ab0 [ 114.719571][ T5981] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 114.719587][ T5981] FS: 00007ffb344cd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 114.719605][ T5981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.719620][ T5981] CR2: ffffffffffffffec CR3: 000000005f41f000 CR4: 00000000003526f0 [ 114.719640][ T5981] Call Trace: [ 114.719648][ T5981] [ 114.719658][ T5981] finish_range+0x230/0x340 [ 114.871839][ T5981] ? update_tind_extent_range+0x3e0/0x3e0 [ 114.877584][ T5981] ? __ext4_sb_bread_gfp+0x14c/0x210 [ 114.882968][ T5981] update_ind_extent_range+0x2cd/0x510 [ 114.888447][ T5981] ext4_ext_migrate+0xad0/0x1060 [ 114.893403][ T5981] ? mb_regenerate_buddy+0x510/0x510 [ 114.898699][ T5981] ? down_read_killable+0x340/0x340 [ 114.903914][ T5981] ? sb_start_write+0x110/0x1c0 [ 114.908780][ T5981] ? mnt_want_write_file+0x16a/0x200 [ 114.914094][ T5981] ext4_ioctl+0x1ede/0x3b70 [ 114.918696][ T5981] ? ext4_fileattr_set+0x16e0/0x16e0 [ 114.923997][ T5981] ? mark_lock+0x94/0x320 [ 114.928342][ T5981] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 114.934332][ T5981] ? do_vfs_ioctl+0x156c/0x1cc0 [ 114.939198][ T5981] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 114.944847][ T5981] ? tomoyo_path_number_perm+0x217/0x5e0 [ 114.950502][ T5981] ? __lock_acquire+0x7d80/0x7d80 [ 114.955552][ T5981] ? slab_free_freelist_hook+0x130/0x1a0 [ 114.961205][ T5981] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 114.966855][ T5981] ? __kmem_cache_free+0xba/0x1f0 [ 114.971994][ T5981] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 114.977727][ T5981] ? tomoyo_path_number_perm+0x217/0x5e0 [ 114.983371][ T5981] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 114.988862][ T5981] ? __fget_files+0x28/0x460 [ 114.993472][ T5981] ? bpf_lsm_file_ioctl+0x9/0x10 [ 114.998460][ T5981] ? security_file_ioctl+0x80/0xa0 [ 115.003592][ T5981] ? ext4_fileattr_set+0x16e0/0x16e0 [ 115.008888][ T5981] __se_sys_ioctl+0xfd/0x170 [ 115.013493][ T5981] do_syscall_64+0x55/0xb0 [ 115.017931][ T5981] ? clear_bhb_loop+0x40/0x90 [ 115.022621][ T5981] ? clear_bhb_loop+0x40/0x90 [ 115.027320][ T5981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.033229][ T5981] RIP: 0033:0x7ffb3359de59 [ 115.037670][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.057288][ T5981] RSP: 002b:00007ffb344cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.065713][ T5981] RAX: ffffffffffffffda RBX: 00007ffb33826090 RCX: 00007ffb3359de59 [ 115.074669][ T5981] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 115.082661][ T5981] RBP: 00007ffb33633e6f R08: 0000000000000000 R09: 0000000000000000 [ 115.090648][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.098638][ T5981] R13: 00007ffb33826128 R14: 00007ffb33826090 R15: 00007ffd023e29a8 [ 115.106898][ T5981] [ 115.109925][ T5981] Modules linked in: [ 115.113831][ T5981] CR2: ffffffffffffffec [ 115.117988][ T5981] ---[ end trace 0000000000000000 ]--- [ 115.123446][ T5981] RIP: 0010:ext4_free_ext_path+0x42/0x100 [ 115.129189][ T5981] Code: 85 db 0f 84 a4 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 9d 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 04 24 31 ed 48 8d 43 28 4c [ 115.148821][ T5981] RSP: 0018:ffffc90004e27640 EFLAGS: 00010246 [ 115.154900][ T5981] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 115.162881][ T5981] RDX: ffffc9000dd9e000 RSI: 0000000000006a6b RDI: ffffffffffffffec [ 115.170865][ T5981] RBP: ffffc90004e27760 R08: ffff88804f8d2a1f R09: 1ffff11009f1a543 [ 115.178875][ T5981] R10: dffffc0000000000 R11: ffffed1009f1a544 R12: ffff88804f8d2ab0 [ 115.186855][ T5981] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 115.194923][ T5981] FS: 00007ffb344cd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 115.203862][ T5981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.210454][ T5981] CR2: ffffffffffffffec CR3: 000000005f41f000 CR4: 00000000003526f0 [ 115.218440][ T5981] Kernel panic - not syncing: Fatal exception [ 115.224643][ T5981] Kernel Offset: disabled [ 115.228964][ T5981] Rebooting in 86400 seconds..