last executing test programs: 12.007799674s ago: executing program 2 (id=150): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 11.730803679s ago: executing program 2 (id=152): mount(0x0, 0x0, 0x0, 0x2080000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r2, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd5", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10.9817143s ago: executing program 2 (id=154): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x75, &(0x7f0000000040)="020000000980ffff", 0x8) 10.644755954s ago: executing program 2 (id=156): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64, @ANYRESOCT], 0x1, 0x6e7, &(0x7f0000001a40)="$eJzs3c9vHGcZB/DvrNeON1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKipELgAoITEof+AQXhGweExD0oXLiUW68+VkLiEnGIymHRzM6ud+21s079I4HPJxq/78z7zjvPPvvOjHed1Qb4v3XlbJoPUuTK2dfvlevra/Pt9bX5I3VzO0lZbyTNbpHiVlI8TBbK9mJgyUC5xYfLl9/85NH6p921Zr1U/Sf6+02PFfKIY6zWS2br8WZH7jk51vjdsarw8kKSq3U5bGrcsYY6lkk7U5dw6DpbrO5m923Pd+DZ17s7FcnEf+orwGD7THK0vjNXvxPUV4fGwUe6t3Z1lQMAAIDn1Me3DzsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP4UyUS3qJZGXWY2Re/7/6d62+r6M2hh7J4P9jUOAAAAAAAAADgYX32cx7mXY731TlH9zf90tXIin3WSL+S93M1S7uRc7mUxK1nJnVxIMjMw0NS9xZWVOxf6e5ZG73lx5J4XB7Z0Op3Ofj9wAAAAAAAAAPjf8vO0Nv7+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4IimegW1XKiLjOTRjMbbVlN/pFk6rDj3YVi1MYHBx8HAAAAfC7TT7HPFx/nce7lWG+9U1Sv+b9UvV6eznu5lZUsZyXtLOVa/Rq6fNXfWF+bb6+vzd8sl3J9eNzv/mv08f4wevNUPcJEtTbqyKeqHq1cz3K15VyuVsFcS6N77DPJqV48A3EN+KCMqfhObcwENeu0lgf77XbvIuyJ4bciGjv0bG0El/QzMlfHVu55vJuBonqjJtmcie2enQwN3DdTjTrZP9KFNPrv/JzYh5wfrcvy8fxqX3O+W/1MNFJl4mJv9pXnzM6ZSL72lz++daN9650b1++efXYe0rAtb+hNbNNx85yYH8jEy891Jpq77D9XZeJkf/1KfpAf5Wxm80buZDk/zmJWspRO3b5Yz+fy58zOmVoYWnvjSZFM1c9L9zkbJ6bZfL+qLeZ0te+xLKfI7VzLUl6r/l3MhXwzl3Iplwee4ZPbxl09tuqsb2w+63vP9F9HBn/m63WlvLr9euMqt7DTI95udu6V7rW/zOvxgbx2Z/2jfq/jA+fB3ECWXuxlZ3Lk4E9zbWx+ua6Ux/jFE+4TB2umzkR5AvXuEr3oXupmolndi7bO8991yv3SvtXp3Fh8d5vxVzetv1qX5bRa+8pgy/SI3j2jn4q9Vc6XFzNdX0mGZ0fZ9lL/KjPQ1tmYy9224Ttuud/Jqq0oemfqD3O7mgBbz9Sp+ne4rSNdrNpeHtk2X7WdGmgb+n0rt9POtQPIHwBP4+9v9aszOTrV+mfr49ZHrV+2brRen/7ekW8deWUqk3+b/HZzbuLVxivFn/NRfrrx+h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh6d++//85iu710Z3SlsX3TUKWVzVu2G/nI6HGK+gt9xjjWc1GZTjK0pfqeowMPo7U5jC2Vzs+SA89P79vmRvf5TVlpbplRoyoLQ1v+tHXAD3YZYTHeebGPlUYO9qATGT0BDvGiBByI8ys33z1/9/7731i+ufj20ttLtyYvXbo8d/nSa/Pnry+3l+a6Pw87SmA/bNz0DzsSAAAAAAAAAAAAYFyjPhhw+oUnfWhkrM94+J+FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ64cjbNBylyYe7cXLm+vjbfLpdefaNnM0mjkRQ/SYqHyUK6S2YGhivy+4fpjDjOh8uX3/zk0fqnG2M1u/2TRl1ub+fWJKv1ktkkE3W5o/vjj3d1nPF2VPy79xjKhH3W6XQWPtd4sEf+GwAA///PiQHe") r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 10.379681378s ago: executing program 2 (id=157): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'adq12b\x00', [0x7, 0x2166, 0xc, 0x100000, 0x88d7, 0x8f, 0x1, 0x10, 0x1002, 0xfffffffb, 0x200, 0x8, 0x344, 0x1, 0x7, 0x1, 0x102, 0x3, 0x20009, 0xe, 0x100, 0x3, 0x7, 0x8000a, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400007, 0x6]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.892346006s ago: executing program 2 (id=163): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @loopback, 0x401}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xff00000000000000, 0x1ff0000aa}, @private1}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xffffffff, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'sit0\x00', '\x00', {}, {}, 0xc}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], 0x0, 0x0, 0xffffffffffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="3f000000010003", 0x7) 9.58814031s ago: executing program 32 (id=163): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @loopback, 0x401}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xff00000000000000, 0x1ff0000aa}, @private1}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xffffffff, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'sit0\x00', '\x00', {}, {}, 0xc}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], 0x0, 0x0, 0xffffffffffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="3f000000010003", 0x7) 5.741123427s ago: executing program 1 (id=178): r0 = socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xfffeffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 3.506035169s ago: executing program 0 (id=184): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) socket$packet(0x11, 0x2, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 3.114044354s ago: executing program 0 (id=186): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 2.809097529s ago: executing program 1 (id=187): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.500405744s ago: executing program 1 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.410003605s ago: executing program 1 (id=189): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)="2bfe01000000020000", 0x9}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x6f9}}, 0x0) 2.161201809s ago: executing program 3 (id=192): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) 2.07917557s ago: executing program 3 (id=193): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x401, 0x81, 0x400}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.921020752s ago: executing program 3 (id=194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r2, 0x0, 0x0) 1.883974213s ago: executing program 0 (id=195): r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fdffffff00000000080000f8840000002800000085000000070000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x3, 0x0, &(0x7f0000000900)="e02742", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) rseq(&(0x7f0000002d80), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x1, 0xa, 0x1, 0x8b}, {0x6, 0x9, 0xb1, 0xe}]}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 1.716540375s ago: executing program 0 (id=196): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) timerfd_create(0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) 1.702510016s ago: executing program 3 (id=197): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 1.230333022s ago: executing program 4 (id=164): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = fanotify_init(0x0, 0x80000) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r3, &(0x7f0000000180)=""/209, 0xd1) 1.123062614s ago: executing program 3 (id=198): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200200, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 1.033770665s ago: executing program 1 (id=199): r0 = socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x10000000}) epoll_pwait(r1, 0x0, 0x0, 0x800007, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x21000710) 1.016191805s ago: executing program 4 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x11, 0x3, 0xd) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @random="0b65c01cd7d3"}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 863.562628ms ago: executing program 1 (id=201): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20000000) 750.130199ms ago: executing program 0 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r0) r2 = getpid() setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 574.801132ms ago: executing program 4 (id=203): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$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") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0xc0}, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)="6b5ea0cd187ede3e538bc3543948db9297109ca599cded039b156251280c7ab65af41be8ce62414fe0e3ec3ee9e934d857d01d2100604b4cb96352c190d2a873f0456fbfe4300bb80f3eb66e6ac9489e2c0a22124aa2564aa23304616ea710e465bb0aa8ba8801dc0b08424236366badebbb569d", 0x74}], 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0xd, 0x1}, 0x48) socket$unix(0x1, 0x2, 0x0) 388.980295ms ago: executing program 0 (id=204): symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00') symlink(&(0x7f0000004500)='./file1/file0\x00', &(0x7f0000004540)='./file0\x00') r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) ioctl$EVIOCRMFF(r3, 0x40045506, 0xfffffffffffffffe) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 168.860138ms ago: executing program 3 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) rseq(0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket(0x2d, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. [ 82.260338][ T5778] cgroup: Unknown subsys name 'net' [ 82.395413][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.065603][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.200096][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.216897][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.224839][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.235370][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.272082][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.287934][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.300588][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.303726][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.317275][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.318951][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.325084][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.340083][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.348066][ T5805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.349998][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.364626][ T5806] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.373286][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.382687][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.427686][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.441447][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.449059][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.457785][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.466116][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.475583][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.483095][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.022171][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 87.040179][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 87.108886][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 87.191876][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 87.343794][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.352978][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.360950][ T5788] bridge_slave_0: entered allmulticast mode [ 87.368961][ T5788] bridge_slave_0: entered promiscuous mode [ 87.406424][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.413770][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.425815][ T5796] bridge_slave_0: entered allmulticast mode [ 87.432852][ T5796] bridge_slave_0: entered promiscuous mode [ 87.470682][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.485666][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.492959][ T5788] bridge_slave_1: entered allmulticast mode [ 87.506063][ T5788] bridge_slave_1: entered promiscuous mode [ 87.545073][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.552694][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.571289][ T5796] bridge_slave_1: entered allmulticast mode [ 87.580449][ T5796] bridge_slave_1: entered promiscuous mode [ 87.641803][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.654115][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.662713][ T5798] bridge_slave_0: entered allmulticast mode [ 87.670615][ T5798] bridge_slave_0: entered promiscuous mode [ 87.712417][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.719921][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.727432][ T5798] bridge_slave_1: entered allmulticast mode [ 87.734409][ T5798] bridge_slave_1: entered promiscuous mode [ 87.744620][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.781013][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.793729][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.818977][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.828367][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.836008][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.843325][ T5792] bridge_slave_0: entered allmulticast mode [ 87.850484][ T5792] bridge_slave_0: entered promiscuous mode [ 87.924974][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.932600][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.939925][ T5792] bridge_slave_1: entered allmulticast mode [ 87.948451][ T5792] bridge_slave_1: entered promiscuous mode [ 87.962097][ T5796] team0: Port device team_slave_0 added [ 87.971379][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.984300][ T5788] team0: Port device team_slave_0 added [ 88.006559][ T5796] team0: Port device team_slave_1 added [ 88.014659][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.026175][ T5788] team0: Port device team_slave_1 added [ 88.094714][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.120408][ T5798] team0: Port device team_slave_0 added [ 88.129418][ T5798] team0: Port device team_slave_1 added [ 88.152327][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.162724][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.170050][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.196627][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.221718][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.228883][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.255075][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.268336][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.275382][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.301926][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.326082][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.333079][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.359486][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.384553][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.391641][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.418129][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.430677][ T5804] Bluetooth: hci3: command tx timeout [ 88.461119][ T5792] team0: Port device team_slave_0 added [ 88.468524][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.475625][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.501709][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.512584][ T5804] Bluetooth: hci1: command tx timeout [ 88.512658][ T5794] Bluetooth: hci0: command tx timeout [ 88.548341][ T5792] team0: Port device team_slave_1 added [ 88.578072][ T5788] hsr_slave_0: entered promiscuous mode [ 88.584673][ T5788] hsr_slave_1: entered promiscuous mode [ 88.590670][ T5804] Bluetooth: hci2: command tx timeout [ 88.645151][ T5796] hsr_slave_0: entered promiscuous mode [ 88.653121][ T5796] hsr_slave_1: entered promiscuous mode [ 88.660164][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.668866][ T5796] Cannot create hsr debugfs directory [ 88.712409][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.719609][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.745687][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.760038][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.767105][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.793614][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.829582][ T5798] hsr_slave_0: entered promiscuous mode [ 88.836198][ T5798] hsr_slave_1: entered promiscuous mode [ 88.842417][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.851011][ T5798] Cannot create hsr debugfs directory [ 89.001135][ T5792] hsr_slave_0: entered promiscuous mode [ 89.007731][ T5792] hsr_slave_1: entered promiscuous mode [ 89.013963][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.022291][ T5792] Cannot create hsr debugfs directory [ 89.351671][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.366759][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.377126][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.389148][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.471254][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.482809][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.494815][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.507701][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.604316][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.652267][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.678749][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.690322][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.701970][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.716929][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.737916][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.748536][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.888596][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.976470][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.993566][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.021854][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.038980][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.046424][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.088357][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.095540][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.109649][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.130884][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.142960][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.176360][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.189412][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.196605][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.213108][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.220293][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.251251][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.258445][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.295230][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.302434][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.314166][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.321373][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.363482][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.371212][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.512303][ T5804] Bluetooth: hci3: command tx timeout [ 90.585714][ T5804] Bluetooth: hci1: command tx timeout [ 90.590378][ T5794] Bluetooth: hci0: command tx timeout [ 90.670268][ T5794] Bluetooth: hci2: command tx timeout [ 90.835665][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.960390][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.971726][ T5792] veth0_vlan: entered promiscuous mode [ 91.034925][ T5792] veth1_vlan: entered promiscuous mode [ 91.110708][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.134860][ T5788] veth0_vlan: entered promiscuous mode [ 91.169717][ T5792] veth0_macvtap: entered promiscuous mode [ 91.183496][ T5792] veth1_macvtap: entered promiscuous mode [ 91.197699][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.207755][ T5788] veth1_vlan: entered promiscuous mode [ 91.252121][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.281436][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.303918][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.316883][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.327393][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.336197][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.394006][ T5798] veth0_vlan: entered promiscuous mode [ 91.434140][ T5798] veth1_vlan: entered promiscuous mode [ 91.443618][ T5788] veth0_macvtap: entered promiscuous mode [ 91.458719][ T5788] veth1_macvtap: entered promiscuous mode [ 91.494693][ T5796] veth0_vlan: entered promiscuous mode [ 91.522057][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.533790][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.548578][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.581745][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.601290][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.613260][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.627120][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.636225][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.644931][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.654333][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.668812][ T5796] veth1_vlan: entered promiscuous mode [ 91.735066][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.747673][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.790028][ T5798] veth0_macvtap: entered promiscuous mode [ 91.838708][ T5798] veth1_macvtap: entered promiscuous mode [ 91.889481][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.898509][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.932914][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.952675][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.963244][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.974117][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.987954][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.017898][ T5796] veth0_macvtap: entered promiscuous mode [ 92.050767][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.065026][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.065731][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.076501][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.094035][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.109006][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.120612][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.132686][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.143355][ T5798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.152697][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.163770][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.192768][ T54] cfg80211: failed to load regulatory.db [ 92.201077][ T5796] veth1_macvtap: entered promiscuous mode [ 92.342831][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.363093][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.418511][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.445603][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.456677][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.470736][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.481095][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.492808][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.510417][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.567105][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.581902][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.592124][ T5794] Bluetooth: hci3: command tx timeout [ 92.645533][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.657102][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.667301][ T5794] Bluetooth: hci1: command tx timeout [ 92.677231][ T5794] Bluetooth: hci0: command tx timeout [ 92.681765][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.693442][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.706825][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.745804][ T5794] Bluetooth: hci2: command tx timeout [ 92.770790][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.782548][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.793057][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.802719][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.957348][ T5887] sit1: entered promiscuous mode [ 92.970315][ T5888] syz.1.2[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.031242][ T5888] loop1: detected capacity change from 0 to 1024 [ 93.126847][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.134729][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.282397][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.300667][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.346054][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.405630][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.492038][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.492602][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 93.512781][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.542525][ T5893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 93.745751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.755329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.023991][ T5901] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 94.095547][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 94.384172][ T5907] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 94.395936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 94.448906][ T28] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.500046][ T28] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.509973][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.666374][ T5794] Bluetooth: hci3: command tx timeout [ 94.703032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.746146][ T5794] Bluetooth: hci1: command tx timeout [ 94.826042][ T5794] Bluetooth: hci2: command tx timeout [ 94.846612][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.895713][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.215332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.356375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.463127][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.096764][ T5938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.164571][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.270993][ T5938] bridge_slave_0: left allmulticast mode [ 96.298502][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.539173][ T5945] netlink: 'syz.3.20': attribute type 8 has an invalid length. [ 96.593623][ T5945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20'. [ 96.802066][ T5948] loop1: detected capacity change from 0 to 512 [ 96.875597][ T5948] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.046682][ T5948] EXT4-fs (loop1): 1 orphan inode deleted [ 97.053957][ T5948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.084199][ T3508] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.103355][ T3508] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:11: Failed to release dquot type 1 [ 97.193336][ T5948] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.408501][ T5961] netlink: 1 bytes leftover after parsing attributes in process `syz.0.26'. [ 97.892133][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.919953][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.329046][ T5979] netlink: 76 bytes leftover after parsing attributes in process `syz.3.31'. [ 98.518375][ T5984] loop1: detected capacity change from 0 to 128 [ 98.555994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 98.564557][ T5984] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 98.613598][ T5984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.665509][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.739226][ T27] audit: type=1804 audit(1752130300.032:2): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.34" name="/newroot/10/file0/bus" dev="loop1" ino=115 res=1 errno=0 [ 98.926088][ C1] Unknown status report in ack skb [ 99.102282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.178502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.345709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.440703][ T6049] loop3: detected capacity change from 0 to 512 [ 101.476467][ T6049] EXT4-fs: Ignoring removed i_version option [ 101.518403][ T6049] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.825479][ T6049] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.851977][ T6049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0103] [ 101.884992][ T6049] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.57: inode #13: comm syz.3.57: iget: illegal inode # [ 101.905803][ T6049] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.57: couldn't read orphan inode 13 (err -117) [ 101.919702][ T6049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.051318][ T6049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.157522][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.190035][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.215490][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.224590][ T23] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 103.254930][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.286646][ T23] usb 3-1: config 0 descriptor?? [ 103.346851][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 103.372338][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 103.414080][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 103.465944][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 103.473422][ T23] usb 3-1: media controller created [ 103.503519][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.557364][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 103.563564][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 103.625681][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 103.676151][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 103.699194][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 103.858087][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 103.869644][ T23] dvb-usb: error while querying for an remote control event. [ 103.944713][ T6099] loop1: detected capacity change from 0 to 1024 [ 104.051753][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 104.068290][ T23] dvb-usb: error while querying for an remote control event. [ 104.230400][ T6105] loop1: detected capacity change from 0 to 1024 [ 104.237219][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 104.243045][ T5836] dvb-usb: error while querying for an remote control event. [ 104.257968][ T6105] hfsplus: unable to parse mount options [ 104.425569][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 104.433865][ T23] dvb-usb: error while querying for an remote control event. [ 104.609910][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 104.625363][ T5836] dvb-usb: error while querying for an remote control event. [ 104.786272][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 104.792585][ T23] dvb-usb: error while querying for an remote control event. [ 104.955473][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 104.961518][ T23] dvb-usb: error while querying for an remote control event. [ 105.128819][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 105.134767][ T23] dvb-usb: error while querying for an remote control event. [ 105.291438][ T5865] usb 3-1: USB disconnect, device number 2 [ 105.327738][ T5865] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 105.529629][ T6133] netlink: 'syz.2.86': attribute type 4 has an invalid length. [ 105.955451][ T5865] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.179803][ T6155] netlink: 'syz.3.93': attribute type 10 has an invalid length. [ 106.188347][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 106.207724][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.215539][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.225628][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.247277][ T5865] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.265301][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.279506][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.286836][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.294556][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.301850][ T6155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.317569][ T5865] usb 1-1: config 0 descriptor?? [ 106.330407][ T6155] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.342324][ T5865] hub 1-1:0.0: USB hub found [ 106.534560][ T5865] hub 1-1:0.0: 1 port detected [ 106.764604][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 106.905815][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.004999][ T6172] Zero length message leads to an empty skb [ 107.173122][ T6177] loop1: detected capacity change from 0 to 1024 [ 107.186396][ T6177] ======================================================= [ 107.186396][ T6177] WARNING: The mand mount option has been deprecated and [ 107.186396][ T6177] and is ignored by this kernel. Remove the mand [ 107.186396][ T6177] option from the mount to silence this warning. [ 107.186396][ T6177] ======================================================= [ 107.223321][ T6177] EXT4-fs: Ignoring removed nobh option [ 107.233116][ T6177] EXT4-fs: Ignoring removed bh option [ 107.241184][ T6177] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.272912][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.467579][ T6177] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.101: Allocating blocks 385-513 which overlap fs metadata [ 107.575084][ T6177] EXT4-fs (loop1): pa ffff8880778772b8: logic 16, phys. 129, len 24 [ 107.583796][ T6177] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 8 [ 107.680775][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.747294][ T787] usb 1-1-port1: cannot disable (err = -71) [ 107.754035][ T5780] usb 1-1: USB disconnect, device number 2 [ 107.821399][ T6193] loop1: detected capacity change from 0 to 128 [ 107.830295][ T6193] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.855142][ T6193] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.034016][ T27] audit: type=1804 audit(1752130309.332:3): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.105" name="/newroot/26/file0/bus" dev="loop1" ino=1048592 res=1 errno=0 [ 108.061079][ T27] audit: type=1800 audit(1752130309.332:4): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.105" name="bus" dev="loop1" ino=1048592 res=0 errno=0 [ 108.113795][ T6193] Invalid ELF header magic: != ELF [ 108.199743][ T1121] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.877316][ T6234] fuse: Bad value for 'fd' [ 110.891455][ T6235] loop2: detected capacity change from 0 to 1024 [ 110.904787][ T6235] EXT4-fs: Ignoring removed orlov option [ 110.929830][ T6235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.172752][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.092250][ T6251] loop2: detected capacity change from 0 to 40427 [ 112.155872][ T6251] F2FS-fs (loop2): Unrecognized mount option "whint_mode=off" or missing value [ 112.277205][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 112.978165][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 113.205863][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 113.324240][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 113.771796][ T6308] loop2: detected capacity change from 0 to 512 [ 113.892245][ T6308] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.152: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 113.955122][ T6308] EXT4-fs error (device loop2): ext4_quota_enable:7132: comm syz.2.152: Bad quota inode: 3, type: 0 [ 113.997898][ T6308] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 114.102222][ T6308] EXT4-fs (loop2): mount failed [ 114.930318][ T6320] loop2: detected capacity change from 0 to 1024 [ 115.456537][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 115.572170][ T1121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.692821][ T1121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.820374][ T1121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.934292][ T1121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.198749][ T6340] loop1: detected capacity change from 0 to 2048 [ 116.251363][ T6340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.314719][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.327638][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.339367][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.350778][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.366520][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.373977][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.903731][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 117.028210][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.035650][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.043323][ T6341] bridge_slave_0: entered allmulticast mode [ 117.051503][ T6341] bridge_slave_0: entered promiscuous mode [ 117.102775][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.110133][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.119271][ T6341] bridge_slave_1: entered allmulticast mode [ 117.126787][ T6341] bridge_slave_1: entered promiscuous mode [ 117.211539][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.225891][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.282807][ T6341] team0: Port device team_slave_0 added [ 117.295022][ T1121] hsr_slave_0: left promiscuous mode [ 117.301606][ T1121] hsr_slave_1: left promiscuous mode [ 117.309446][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.317055][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.326445][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.334411][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.343624][ T1121] bridge_slave_1: left allmulticast mode [ 117.351175][ T1121] bridge_slave_1: left promiscuous mode [ 117.359264][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.372477][ T1121] bridge_slave_0: left allmulticast mode [ 117.379540][ T1121] bridge_slave_0: left promiscuous mode [ 117.395768][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.471640][ T1121] veth1_macvtap: left promiscuous mode [ 117.491614][ T1121] veth0_macvtap: left promiscuous mode [ 117.503321][ T1121] veth1_vlan: left promiscuous mode [ 117.510319][ T1121] veth0_vlan: left promiscuous mode [ 118.251713][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 118.311522][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 118.375985][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.424671][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.426471][ T5794] Bluetooth: hci2: command tx timeout [ 120.389854][ T1121] bond0 (unregistering): Released all slaves [ 120.515422][ T5794] Bluetooth: hci2: command tx timeout [ 120.530635][ T6341] team0: Port device team_slave_1 added [ 120.637207][ T6385] netlink: 'syz.0.179': attribute type 11 has an invalid length. [ 120.678600][ T6389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.178'. [ 120.700141][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.708809][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.741169][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.811333][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.839029][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.920751][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.251822][ T6341] hsr_slave_0: entered promiscuous mode [ 121.304993][ T6341] hsr_slave_1: entered promiscuous mode [ 121.314354][ T6341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.324860][ T6341] Cannot create hsr debugfs directory [ 122.010046][ T6341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.039131][ T6341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.080807][ T6341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.120544][ T6341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.410065][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.473704][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.503115][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.510371][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.549939][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.557276][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.590114][ T5794] Bluetooth: hci2: command tx timeout [ 123.143162][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.434779][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 123.544434][ T6341] veth0_vlan: entered promiscuous mode [ 123.550290][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.587613][ T6341] veth1_vlan: entered promiscuous mode [ 123.632409][ T6341] veth0_macvtap: entered promiscuous mode [ 123.645655][ T6341] veth1_macvtap: entered promiscuous mode [ 123.683732][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.699464][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.710943][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.727628][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.741100][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.754914][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.772059][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.802788][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.819913][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.832926][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.848377][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.859726][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.889409][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.909740][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.928841][ T6341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.938406][ T6341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.950384][ T6341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.960718][ T6341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.072427][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.090109][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.133340][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.145900][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.336115][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d2c9000: rx timeout, send abort [ 124.347892][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d2c9000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.362634][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d2c8c00: rx timeout, send abort [ 124.371347][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d2c8c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.543596][ T6469] syzkaller0: entered promiscuous mode [ 124.567688][ T6469] syzkaller0 (unregistering): left promiscuous mode [ 124.669220][ T5794] Bluetooth: hci2: command tx timeout [ 125.143853][ T6480] loop4: detected capacity change from 0 to 2048 [ 125.194835][ T6480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.324840][ T6480] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.463157][ T1081] ------------[ cut here ]------------ [ 125.469675][ T1081] kernel BUG at fs/ext4/inode.c:2603! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 125.508673][ T1081] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 125.514828][ T1081] CPU: 1 PID: 1081 Comm: kworker/u4:6 Not tainted 6.6.96-syzkaller #0 [ 125.523034][ T1081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.533109][ T1081] Workqueue: writeback wb_workfn (flush-7:4) [ 125.539131][ T1081] RIP: 0010:ext4_do_writepages+0x38cd/0x38d0 [ 125.545125][ T1081] Code: c1 03 38 c1 0f 8c 7a fd ff ff 4c 89 e7 e8 5b af ac ff e9 6d fd ff ff e8 91 00 54 ff 0f 0b e8 8a 00 54 ff 0f 0b e8 83 00 54 ff <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 125.564753][ T1081] RSP: 0018:ffffc900044ceec0 EFLAGS: 00010293 [ 125.570868][ T1081] RAX: ffffffff823195dd RBX: 0000006210000000 RCX: ffff888022dc5a00 [ 125.578894][ T1081] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 125.586906][ T1081] RBP: ffffc900044cf230 R08: ffff88805d7d0057 R09: 1ffff1100bafa00a [ 125.594918][ T1081] R10: dffffc0000000000 R11: ffffed100bafa00b R12: 0000000000000001 [ 125.602932][ T1081] R13: ffff88805d7d02b0 R14: 0000004000000000 R15: dffffc0000000000 [ 125.610943][ T1081] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 125.619910][ T1081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.626968][ T1081] CR2: 000000110c43400c CR3: 0000000066952000 CR4: 00000000003506e0 [ 125.634961][ T1081] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.642943][ T1081] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.650920][ T1081] Call Trace: [ 125.654201][ T1081] [ 125.657145][ T1081] ? verify_lock_unused+0x140/0x140 [ 125.662363][ T1081] ? __lock_acquire+0x1334/0x7c80 [ 125.667391][ T1081] ? psi_task_switch+0x168/0x6d0 [ 125.672339][ T1081] ? ext4_normal_submit_inode_data_buffers+0x1b0/0x1b0 [ 125.679220][ T1081] ? rcu_read_lock_any_held+0xb4/0x120 [ 125.684688][ T1081] ? finish_task_switch+0x265/0x920 [ 125.689896][ T1081] ext4_writepages+0x1a8/0x2f0 [ 125.694681][ T1081] ? ext4_read_folio+0x2f0/0x2f0 [ 125.699808][ T1081] ? __rwlock_init+0x150/0x150 [ 125.704584][ T1081] ? do_raw_spin_unlock+0x121/0x230 [ 125.709799][ T1081] ? ext4_read_folio+0x2f0/0x2f0 [ 125.714749][ T1081] do_writepages+0x3a2/0x600 [ 125.719390][ T1081] ? preempt_schedule+0xab/0xc0 [ 125.724258][ T1081] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 125.730019][ T1081] ? preempt_schedule_common+0x82/0xc0 [ 125.735534][ T1081] ? preempt_schedule+0xab/0xc0 [ 125.740432][ T1081] ? schedule_preempt_disabled+0x20/0x20 [ 125.746202][ T1081] ? __lock_acquire+0x7c80/0x7c80 [ 125.751242][ T1081] ? do_raw_spin_lock+0x121/0x2c0 [ 125.756291][ T1081] __writeback_single_inode+0x153/0xee0 [ 125.761863][ T1081] writeback_sb_inodes+0x77c/0xef0 [ 125.766982][ T1081] ? move_expired_inodes+0x319/0x720 [ 125.772279][ T1081] ? queue_io+0x560/0x560 [ 125.776620][ T1081] ? rcu_is_watching+0x15/0xb0 [ 125.781399][ T1081] wb_writeback+0x450/0xba0 [ 125.785914][ T1081] ? queue_io+0x311/0x560 [ 125.790253][ T1081] ? percpu_ref_tryget+0x250/0x250 [ 125.795374][ T1081] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 125.801389][ T1081] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.806606][ T1081] wb_workfn+0x3ff/0xe20 [ 125.810871][ T1081] ? inode_wait_for_writeback+0x200/0x200 [ 125.816609][ T1081] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 125.822600][ T1081] ? read_lock_is_recursive+0x20/0x20 [ 125.828003][ T1081] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.833235][ T1081] ? process_scheduled_works+0x957/0x15b0 [ 125.838975][ T1081] ? process_scheduled_works+0x957/0x15b0 [ 125.844746][ T1081] process_scheduled_works+0xa45/0x15b0 [ 125.850307][ T1081] ? assign_work+0x400/0x400 [ 125.854995][ T1081] ? assign_work+0x39e/0x400 [ 125.859696][ T1081] worker_thread+0xa55/0xfc0 [ 125.864288][ T1081] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 125.870200][ T1081] ? _raw_spin_unlock+0x40/0x40 [ 125.875068][ T1081] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 125.880985][ T1081] kthread+0x2fa/0x390 [ 125.885055][ T1081] ? pr_cont_work+0x560/0x560 [ 125.889745][ T1081] ? kthread_blkcg+0xd0/0xd0 [ 125.894334][ T1081] ret_from_fork+0x48/0x80 [ 125.898753][ T1081] ? kthread_blkcg+0xd0/0xd0 [ 125.903341][ T1081] ret_from_fork_asm+0x11/0x20 [ 125.908129][ T1081] [ 125.911161][ T1081] Modules linked in: [ 125.965169][ T1081] ---[ end trace 0000000000000000 ]--- [ 125.972148][ T1081] RIP: 0010:ext4_do_writepages+0x38cd/0x38d0 [ 125.980274][ T1081] Code: c1 03 38 c1 0f 8c 7a fd ff ff 4c 89 e7 e8 5b af ac ff e9 6d fd ff ff e8 91 00 54 ff 0f 0b e8 8a 00 54 ff 0f 0b e8 83 00 54 ff <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 126.086922][ T1081] RSP: 0018:ffffc900044ceec0 EFLAGS: 00010293 [ 126.093064][ T1081] RAX: ffffffff823195dd RBX: 0000006210000000 RCX: ffff888022dc5a00 [ 126.127013][ T1081] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 126.156807][ T1081] RBP: ffffc900044cf230 R08: ffff88805d7d0057 R09: 1ffff1100bafa00a [ 126.164852][ T1081] R10: dffffc0000000000 R11: ffffed100bafa00b R12: 0000000000000001 [ 126.190578][ T1081] R13: ffff88805d7d02b0 R14: 0000004000000000 R15: dffffc0000000000 [ 126.201122][ T1081] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 126.211521][ T1081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.218516][ T1081] CR2: 000055b241127000 CR3: 000000002f9f3000 CR4: 00000000003506f0 [ 126.230417][ T1081] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.240399][ T1081] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.252930][ T1081] Kernel panic - not syncing: Fatal exception [ 126.259443][ T1081] Kernel Offset: disabled [ 126.263795][ T1081] Rebooting in 86400 seconds..