last executing test programs: 10.912470907s ago: executing program 2 (id=247): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000240)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5) 10.551407466s ago: executing program 2 (id=249): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x10}) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36d, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000000)={0x2, 0xd}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) open_tree(0xffffffffffffff9c, 0x0, 0x81000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x0) creat(0x0, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 9.456459803s ago: executing program 2 (id=254): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) munlock(&(0x7f00006ea000/0x2000)=nil, 0x2000) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.359667356s ago: executing program 4 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}}, 0x0) 7.552307504s ago: executing program 4 (id=260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) 6.204400628s ago: executing program 4 (id=264): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x1, 0x0, 0x6e141b39}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e8, 0x2f8, 0x2f8, 0x408, 0x0, 0x408, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@recent1={{0x108}, {0x1000000, 0x5f, 0x0, 0x1, 'syz1\x00', 0xe1, [0x0, 0xff000000, 0x0, 0xffffffff]}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x2, 0x2}}}, {{@ip={@multicast2, @rand_addr=0x64010182, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'wlan0\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, 'xL', 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) socket$netlink(0x10, 0x3, 0x6) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) close(r1) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.04169697s ago: executing program 1 (id=266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) 5.972464641s ago: executing program 3 (id=267): socket(0x23, 0x80805, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x5a, &(0x7f0000000480)=ANY=[], 0x0) 5.90687968s ago: executing program 0 (id=268): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900"], 0xd4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006804090300000001000000000000000000040004000800010001000000000000"], 0x24}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x200, 0x592, 0x9, 0x7ff, 0x4, 0xa0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setfsuid(0x0) setreuid(0x0, 0xee00) r2 = socket(0x1000000000000010, 0x80802, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) 5.776329685s ago: executing program 2 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [], [0x2b8, 0x8, 0xea, 0x1], [0x0, 0x9, 0x0, 0xfffffffe]}) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x3, 0x80, @loopback}}}, 0x108) syz_io_uring_setup(0x143c, &(0x7f0000000440)={0x0, 0x4205, 0x4, 0x2, 0x30, 0x0, r5}, &(0x7f0000000000), 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5.77591054s ago: executing program 4 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}}, 0x0) 5.720759113s ago: executing program 1 (id=271): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) 5.631157877s ago: executing program 3 (id=272): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000080), &(0x7f0000000040)=0x4) 4.630155481s ago: executing program 2 (id=273): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0xfffc, 0x4, 0x9fc6}) 4.520398138s ago: executing program 0 (id=274): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb7c0a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x3, 0x7fe4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2, 0xb, 0x6, 0x6, 0x5, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_key={0x3, 0x9, 0x50, 0x0, "92c15d2adaaae4ce4640"}]}, 0x28}}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000480)="3d56438cad70526ef623030a86eaab468199e39d3caddbc463d6ed5c6385f7fe7e7c80dc1794eb5dfdc12c431905693f1588944ff4c74b52827888cbf39b9a9ee6cf3d06a62f02f7f558bd00181450c4c8d460d500411590b06df92c9535b1bb41c27c528574bd8f781c1bc6014d0d9affd859a03302d26bce6cb175f8e29314de01da23a036636ef579de2b6e4071cd2757a974fa59aa") add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) 4.52011784s ago: executing program 1 (id=275): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 4.519821295s ago: executing program 4 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x4, 0x101801) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"0d78979038728ac34e605fdaf0834b15989a2e035c2cbd8818d93504457c83594d580ff3d7d59e704ac99ab5a66d65c8ed87d229e38300625b9824ea189b775e6798340a56dd4235cfcb59ccb775b8fb3d09c110674fb47bf8f5d74ae8e8bc790f93f6a975b5b88c382ac10aad39c1f4ef05f03f4ef11e71ea072eb065aa3051e72d51b2a32d8be382bc3e2d016d92938dffb7db8bd4960983b678178d65432e471741c18befef4d195c305b968f8482d77446c877f31345c56a363f68ab0f97189b8d226f8dc16c146f422c54e64a8ab9a1df29a78dcf121265389cce4d4c028863ded6424ed85f2459e731e083d21ee2373537066727f43494e9805109e79fcdbd2e9d77a2f7ddef0e0051e6abf26917b02ae54f1ca28d0c9d04cff1494f2af18fab499e90782983aa25163e709463038b4cc1ed3542f78211845de7f6c4d9c5b0ae984e13daf98cc0ef4786c8ffddb2b5d41a55167a04bf9ec4ac36258703c6172a2d615e771b29cb4c20a3ed978e47e1124038ab6a867c02858748389464bd642c47acbafb46d72a63257615c643db696e597dcb3d93ca45ea8b65f2b541cf1df8adee87d153e6cefc19db36329e4c9546b60de927516dc790a465869f5398d6b2d058194b922147ed46b49c47feab9c18ac3c9806fac19134d159e7872d31c10f0a9fb4af905494b80e45736d5c8641260bd81d9041b8c28acec9c0465dc8adab47b2089395e74e0d8208d880ee502877155da9102ffe6449302fe7d502ac83521918642ecce911a2d09c1469988dae8c55a4f9a30768fa29be948f228c1ae97e758023c7640fa2bb39e3b3d431c19e3ecea4d02bd69c5ac9a22e7e800d5549450d8ce0dac8641f78b42f813a1f9df41b865a1ee690f55ed0919c2746e4e757d4e916d71bb54f17b72cf5ae0182eb908d0fcaac1d57defb157cc1ee742ddb1073c437bf010c5e2412a1001eedf34a902e5ffca303ca49bd18e50298af4131433ebb6bc575607c2fd23dde277a8e59891600c1778b35994ff852f0e4ee2e2cfd4fbbdac77c89b6ffbe363eec7a142ce89d9adf35bd3346ccac467488a1b474c803b2fbc76aaa9de81d205e4d431ed10e76233ac64e59001e8e762d176f998add4ae7a31f15259f41919e167a718ea38cadf9a7e776413121ae701de817f2fb6b85cfa47c59c7604f2b0a4166ae05c34f2184dca817fbf9f9220c42ca52a1eff03bb6709cae1ae59cacb04e21e897bd802f952a2f6de66568ee69fe7eac2cae483eba16d2486a3b1a750e02318a4a703319c21f58ce9ec6d3759f22ba87c7339928dc22a5a6a918ce439b44c0cb27e3b02ac9dbb1c3c1aa22d048c78821b30a74be8fbe74bf2c9595debbd29926f72243837766d64cf26202b71a76738b37f285d0c2bbbdbd6260fd756e68b728c9979a57cc87175b46cea08b2428f42d4a"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.435741691s ago: executing program 3 (id=277): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2081, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200c436eaf900f8ffffffb703000008000000000000000000000285000000030000009500000084be0728929b48ad802574cd07010249be655efeb1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x4) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) 4.237886634s ago: executing program 2 (id=278): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f04"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) 3.232304266s ago: executing program 1 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) syz_emit_vhci(0x0, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) 3.200843927s ago: executing program 4 (id=280): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x3, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x7040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.91012774s ago: executing program 0 (id=281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) 2.087083794s ago: executing program 3 (id=282): socket(0x23, 0x80805, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x5a, &(0x7f0000000480)=ANY=[], 0x0) 1.964495563s ago: executing program 0 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r2 = dup(r0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) close_range(r1, 0xffffffffffffffff, 0x0) 1.810248049s ago: executing program 1 (id=284): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900"], 0xd4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006804090300000001000000000000000000040004000800010001000000000000"], 0x24}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x200, 0x592, 0x9, 0x7ff, 0x4, 0xa0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setfsuid(0x0) setreuid(0x0, 0xee00) r2 = socket(0x1000000000000010, 0x80802, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) 1.770105673s ago: executing program 0 (id=285): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername(r1, 0x0, 0x0) 1.716166995s ago: executing program 3 (id=286): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r0, 0x6, 0xffffffff, 0x0, 0x0) 1.432407362s ago: executing program 3 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0xb) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x80, 0x7f) mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0) openat(r4, &(0x7f0000000280)='./control\x00', 0x470082, 0x0) unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200) syz_open_dev$sndpcmc(0x0, 0xbb7, 0x200000) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) 1.431846388s ago: executing program 0 (id=288): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffd, @private0, 0x3}, 0x1c) iopl(0x3) bpf$BPF_PROG_TEST_RUN(0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) pselect6(0x40, &(0x7f0000000100)={0x5, 0x6, 0x2000000000, 0x6, 0x2, 0x400, 0xe}, &(0x7f00000002c0)={0x8, 0x3, 0x2, 0x40, 0x0, 0xd, 0x7, 0x4}, 0x0, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x234]}, 0x8}) tkill(r2, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) ptrace(0x10, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) 0s ago: executing program 1 (id=289): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0189436, &(0x7f0000000140)) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x7], [0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000000)) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000), 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x7fffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x11}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 90.345603][ T5821] cgroup: Unknown subsys name 'net' [ 90.493326][ T5821] cgroup: Unknown subsys name 'cpuset' [ 90.502865][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.455132][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.112420][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.123059][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.131760][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.141539][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.150895][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.178640][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.197437][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.217490][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.244504][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.249330][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.253787][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.267141][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.268470][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.276003][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.281916][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.288666][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.308077][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.316398][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.325502][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.333289][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.347456][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.348681][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.363000][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.370620][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.479166][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.487716][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.495978][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.506037][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.514586][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.526949][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.983684][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 97.159321][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.166530][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.174987][ T5836] bridge_slave_0: entered allmulticast mode [ 97.183832][ T5836] bridge_slave_0: entered promiscuous mode [ 97.194432][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.202637][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.210059][ T5836] bridge_slave_1: entered allmulticast mode [ 97.217898][ T5836] bridge_slave_1: entered promiscuous mode [ 97.302372][ T46] cfg80211: failed to load regulatory.db [ 97.416247][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.532314][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.641234][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 97.670218][ T5836] team0: Port device team_slave_0 added [ 97.684695][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 97.714652][ T5836] team0: Port device team_slave_1 added [ 97.752095][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 97.792544][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 97.864774][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.872118][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.898222][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.947127][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.954142][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.980206][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.169574][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.177106][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.184318][ T5838] bridge_slave_0: entered allmulticast mode [ 98.192257][ T5838] bridge_slave_0: entered promiscuous mode [ 98.243036][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.250598][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.258530][ T5838] bridge_slave_1: entered allmulticast mode [ 98.265856][ T5838] bridge_slave_1: entered promiscuous mode [ 98.287805][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.295098][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.303024][ T5851] bridge_slave_0: entered allmulticast mode [ 98.311533][ T5851] bridge_slave_0: entered promiscuous mode [ 98.341266][ T5843] Bluetooth: hci0: command tx timeout [ 98.404197][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.412196][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.419512][ T5145] Bluetooth: hci1: command tx timeout [ 98.419892][ T5145] Bluetooth: hci2: command tx timeout [ 98.420224][ T5843] Bluetooth: hci3: command tx timeout [ 98.425747][ T5851] bridge_slave_1: entered allmulticast mode [ 98.443619][ T5851] bridge_slave_1: entered promiscuous mode [ 98.484513][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.491987][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.499929][ T5832] bridge_slave_0: entered allmulticast mode [ 98.508480][ T5832] bridge_slave_0: entered promiscuous mode [ 98.516140][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.524172][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.532216][ T5837] bridge_slave_0: entered allmulticast mode [ 98.540145][ T5837] bridge_slave_0: entered promiscuous mode [ 98.550095][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.557348][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.564565][ T5837] bridge_slave_1: entered allmulticast mode [ 98.572587][ T5837] bridge_slave_1: entered promiscuous mode [ 98.583880][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.588330][ T5843] Bluetooth: hci4: command tx timeout [ 98.599308][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.615252][ T5836] hsr_slave_0: entered promiscuous mode [ 98.622249][ T5836] hsr_slave_1: entered promiscuous mode [ 98.646450][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.654198][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.661678][ T5832] bridge_slave_1: entered allmulticast mode [ 98.669861][ T5832] bridge_slave_1: entered promiscuous mode [ 98.748831][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.820066][ T5838] team0: Port device team_slave_0 added [ 98.840478][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.869610][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.886161][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.899596][ T5838] team0: Port device team_slave_1 added [ 98.909097][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.955122][ T5851] team0: Port device team_slave_0 added [ 98.966077][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.032026][ T5851] team0: Port device team_slave_1 added [ 99.159156][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.166149][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.192505][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.208520][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.215526][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.242366][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.259590][ T5837] team0: Port device team_slave_0 added [ 99.274743][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.282201][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.308381][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.324837][ T5832] team0: Port device team_slave_0 added [ 99.344885][ T5837] team0: Port device team_slave_1 added [ 99.368288][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.375291][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.402007][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.416228][ T5832] team0: Port device team_slave_1 added [ 99.554716][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.562510][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.588964][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.601348][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.609307][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.635740][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.649054][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.656048][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.682825][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.731101][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.738579][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.764797][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.826365][ T5838] hsr_slave_0: entered promiscuous mode [ 99.833151][ T5838] hsr_slave_1: entered promiscuous mode [ 99.839786][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.847669][ T5838] Cannot create hsr debugfs directory [ 99.867176][ T5851] hsr_slave_0: entered promiscuous mode [ 99.873936][ T5851] hsr_slave_1: entered promiscuous mode [ 99.881198][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.888900][ T5851] Cannot create hsr debugfs directory [ 99.979673][ T5837] hsr_slave_0: entered promiscuous mode [ 99.986292][ T5837] hsr_slave_1: entered promiscuous mode [ 99.993106][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.000945][ T5837] Cannot create hsr debugfs directory [ 100.163722][ T5832] hsr_slave_0: entered promiscuous mode [ 100.173596][ T5832] hsr_slave_1: entered promiscuous mode [ 100.186283][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.194341][ T5832] Cannot create hsr debugfs directory [ 100.350476][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.412236][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.419123][ T5843] Bluetooth: hci0: command tx timeout [ 100.473052][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.497852][ T5834] Bluetooth: hci2: command tx timeout [ 100.497865][ T5145] Bluetooth: hci1: command tx timeout [ 100.515011][ T5843] Bluetooth: hci3: command tx timeout [ 100.550837][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.658057][ T5843] Bluetooth: hci4: command tx timeout [ 100.870241][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.890094][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.903379][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.923428][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.029170][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.078875][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.091713][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.105719][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.249633][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.269689][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.283538][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.328049][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.421788][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.506164][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.532361][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.551347][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.565843][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.623583][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.642235][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.685985][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.693624][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.764275][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.771532][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.845560][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.876989][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.892526][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.899832][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.963593][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.970889][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.031066][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.080897][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.088176][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.119526][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.163079][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.171024][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.292437][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.356218][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.363500][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.410212][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.432718][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.440073][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.498050][ T5843] Bluetooth: hci0: command tx timeout [ 102.577623][ T5843] Bluetooth: hci1: command tx timeout [ 102.594327][ T5843] Bluetooth: hci3: command tx timeout [ 102.596272][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.601186][ T5843] Bluetooth: hci2: command tx timeout [ 102.652479][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.659803][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.737039][ T5843] Bluetooth: hci4: command tx timeout [ 102.768490][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.775775][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.945099][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.124193][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.283248][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.494842][ T5838] veth0_vlan: entered promiscuous mode [ 103.609891][ T5838] veth1_vlan: entered promiscuous mode [ 103.636051][ T5851] veth0_vlan: entered promiscuous mode [ 103.659347][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.718044][ T5851] veth1_vlan: entered promiscuous mode [ 103.833714][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.862829][ T5838] veth0_macvtap: entered promiscuous mode [ 103.888731][ T5851] veth0_macvtap: entered promiscuous mode [ 103.901596][ T5832] veth0_vlan: entered promiscuous mode [ 103.923298][ T5838] veth1_macvtap: entered promiscuous mode [ 103.941615][ T5851] veth1_macvtap: entered promiscuous mode [ 103.969794][ T5836] veth0_vlan: entered promiscuous mode [ 104.019797][ T5836] veth1_vlan: entered promiscuous mode [ 104.036458][ T5832] veth1_vlan: entered promiscuous mode [ 104.066324][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.096613][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.110614][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.123320][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.153043][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.171206][ T5837] veth0_vlan: entered promiscuous mode [ 104.186593][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.201963][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.211305][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.220882][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.232598][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.244170][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.259370][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.293462][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.303038][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.313426][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.322857][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.380406][ T5837] veth1_vlan: entered promiscuous mode [ 104.418994][ T5832] veth0_macvtap: entered promiscuous mode [ 104.465073][ T5836] veth0_macvtap: entered promiscuous mode [ 104.480542][ T5832] veth1_macvtap: entered promiscuous mode [ 104.539488][ T5836] veth1_macvtap: entered promiscuous mode [ 104.577818][ T5843] Bluetooth: hci0: command tx timeout [ 104.605085][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.613878][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.657464][ T5834] Bluetooth: hci3: command tx timeout [ 104.662947][ T5834] Bluetooth: hci1: command tx timeout [ 104.668917][ T5843] Bluetooth: hci2: command tx timeout [ 104.676242][ T5837] veth0_macvtap: entered promiscuous mode [ 104.697391][ T5837] veth1_macvtap: entered promiscuous mode [ 104.710525][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.727511][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.737711][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.748231][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.760272][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.791338][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.803949][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.816006][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.827384][ T5834] Bluetooth: hci4: command tx timeout [ 104.827754][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.842688][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.853769][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.865589][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.875566][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.887228][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.897390][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.908092][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.920073][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.961558][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.972880][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.983670][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.992832][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.007180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.015062][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.021416][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.038909][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.049483][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.060912][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.071151][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.081870][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.092195][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.102946][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.115021][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.123430][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.134673][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.150406][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.161101][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.170997][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.181518][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.193437][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.225725][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.241809][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.251758][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.262531][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.275286][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.288319][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.298633][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.309590][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.321815][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.333216][ T3556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.352466][ T3556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.373726][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.385767][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.396505][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.405914][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.441030][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.449718][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.456764][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.467677][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.476526][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.485319][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.759944][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.781794][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.797446][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.856567][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.880918][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.993009][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.037393][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.099537][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.111134][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.779904][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.875869][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.001394][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.047232][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.220213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.777024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.497625][ T5936] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5'. [ 109.578487][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.817434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 109.827777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 110.201891][ T5951] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 110.252288][ T5951] Â: renamed from pim6reg1 [ 110.948349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.059800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.060401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 111.136796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 111.148691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 111.417185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.628497][ T8] kernel write not supported for file /radio3 (pid: 8 comm: kworker/0:0) [ 112.693105][ T5966] mkiss: ax0: crc mode is auto. [ 119.472007][ T6020] mkiss: ax0: crc mode is auto. [ 121.102655][ T6041] syz.3.41 uses obsolete (PF_INET,SOCK_PACKET) [ 122.916036][ T6047] warning: `syz.0.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.124241][ T6054] loop4: detected capacity change from 0 to 128 [ 125.116743][ T29] audit: type=1804 audit(1739629857.515:2): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.44" name="/newroot/9/file1/bus" dev="loop4" ino=3 res=1 errno=0 [ 126.035118][ T6073] tmpfs: Bad value for 'mpol' [ 127.160193][ T6078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.52'. [ 127.274292][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'. [ 127.918895][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.937255][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 128.953460][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.976450][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.032110][ T46] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 129.066674][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.139709][ T46] usb 5-1: config 0 descriptor?? [ 129.898061][ T6114] mkiss: ax0: crc mode is auto. [ 130.183386][ T46] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 130.386867][ T46] koneplus 0003:1E7D:2D51.0001: couldn't init struct koneplus_device [ 130.395093][ T46] koneplus 0003:1E7D:2D51.0001: couldn't install mouse [ 130.465372][ T46] koneplus 0003:1E7D:2D51.0001: probe with driver koneplus failed with error -71 [ 131.736049][ T46] usb 5-1: USB disconnect, device number 2 [ 132.714106][ T6130] Zero length message leads to an empty skb [ 133.629402][ T6144] hub 5-0:1.0: USB hub found [ 133.637010][ T6144] hub 5-0:1.0: 1 port detected [ 134.204227][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 134.456021][ T6151] loop4: detected capacity change from 0 to 128 [ 134.646447][ T29] audit: type=1804 audit(1739629867.045:3): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.74" name="/newroot/12/file1/bus" dev="loop4" ino=4 res=1 errno=0 [ 134.698435][ T5918] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.867082][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 134.936174][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.985840][ T5918] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.123010][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.257518][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.281412][ T5918] usb 3-1: config 0 descriptor?? [ 136.132462][ T975] usb 3-1: USB disconnect, device number 2 [ 138.250864][ T6180] loop2: detected capacity change from 0 to 128 [ 138.297659][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.306996][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.364063][ T6182] loop4: detected capacity change from 0 to 128 [ 138.457415][ T29] audit: type=1804 audit(1739629870.855:4): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.85" name="/newroot/21/file1/bus" dev="loop2" ino=5 res=1 errno=0 [ 139.865774][ T29] audit: type=1804 audit(1739629872.265:5): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.87" name="/newroot/15/file1/bus" dev="loop4" ino=6 res=1 errno=0 [ 143.754078][ T6226] 9pnet_fd: Insufficient options for proto=fd [ 143.768379][ T6228] loop4: detected capacity change from 0 to 256 [ 143.779520][ T6229] loop3: detected capacity change from 0 to 128 [ 144.726719][ T29] audit: type=1804 audit(1739629877.065:6): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.101" name="/newroot/17/file1/bus" dev="loop3" ino=7 res=1 errno=0 [ 144.747355][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.377911][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 150.195039][ T6271] loop3: detected capacity change from 0 to 128 [ 150.343143][ T29] audit: type=1804 audit(1739629882.735:7): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.114" name="/newroot/20/file1/bus" dev="loop3" ino=8 res=1 errno=0 [ 158.784105][ T6326] loop1: detected capacity change from 0 to 256 [ 159.821618][ T6336] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 159.921064][ T6336] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 164.977072][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 168.408939][ T6399] vivid-007: ================= START STATUS ================= [ 168.417560][ T6399] vivid-007: Enable Output Cropping: true [ 168.423804][ T6399] vivid-007: Enable Output Composing: true [ 168.431397][ T6399] vivid-007: Enable Output Scaler: true [ 168.437862][ T6399] vivid-007: Tx RGB Quantization Range: Automatic [ 168.444723][ T6399] vivid-007: Transmit Mode: HDMI [ 168.454512][ T6399] vivid-007: Hotplug Present: 0x00000000 [ 168.460681][ T6399] vivid-007: RxSense Present: 0x00000000 [ 168.466698][ T6399] vivid-007: EDID Present: 0x00000000 [ 168.472274][ T6399] vivid-007: ================== END STATUS ================== [ 170.050512][ T6417] loop2: detected capacity change from 0 to 256 [ 171.078072][ T6425] loop3: detected capacity change from 0 to 32768 [ 171.091169][ T6425] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.161 (6425) [ 171.153843][ T6425] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.165118][ T6425] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 171.327046][ T6425] BTRFS info (device loop3): rebuilding free space tree [ 171.389858][ T6425] BTRFS info (device loop3): disabling free space tree [ 171.396979][ T6425] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.406963][ T6425] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.818875][ T29] audit: type=1800 audit(1739629904.215:8): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 171.911225][ T29] audit: type=1800 audit(1739629904.275:9): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 172.506728][ T5851] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.389579][ T6480] 9pnet_fd: Insufficient options for proto=fd [ 180.715740][ T29] audit: type=1326 audit(1739629913.115:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.0.183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99fab8cde9 code=0x0 [ 181.258733][ T6508] mmap: syz.1.186 (6508) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 181.273414][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 181.288422][ T6512] macsec0: entered promiscuous mode [ 182.081004][ T6518] 9pnet_fd: Insufficient options for proto=fd [ 182.166206][ T6524] loop2: detected capacity change from 0 to 128 [ 186.805739][ T6563] 9pnet_fd: Insufficient options for proto=fd [ 187.388650][ T6571] loop3: detected capacity change from 0 to 32768 [ 187.408071][ T6571] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.205 (6571) [ 187.533610][ T6571] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.548083][ T6571] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 187.572101][ T6572] hfs: can't find a HFS filesystem on dev nullb0 [ 187.688954][ T6571] BTRFS info (device loop3): rebuilding free space tree [ 187.727594][ T6571] BTRFS info (device loop3): disabling free space tree [ 187.734776][ T6571] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.746895][ T6571] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.155636][ T6593] can0: slcan on ttyS3. [ 188.334920][ T6593] block device autoloading is deprecated and will be removed. [ 189.019262][ T6585] can0 (unregistered): slcan off ttyS3. [ 189.148339][ T6596] loop4: detected capacity change from 0 to 128 [ 190.694606][ T5851] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.020688][ T6626] 9pnet_fd: Insufficient options for proto=fd [ 193.897179][ T6636] loop2: detected capacity change from 0 to 128 [ 197.967805][ T6679] tipc: Started in network mode [ 197.973049][ T6679] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 197.982052][ T6679] tipc: Enabled bearer , priority 0 [ 197.998330][ T6679] overlayfs: missing 'lowerdir' [ 198.649284][ T6678] 9pnet_fd: Insufficient options for proto=fd [ 199.130006][ T6490] tipc: Node number set to 11578026 [ 199.142563][ T6687] loop2: detected capacity change from 0 to 128 [ 199.708396][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.741746][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.259259][ T6695] loop2: detected capacity change from 0 to 32768 [ 201.282938][ T6695] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.239 (6695) [ 201.327401][ T6695] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.337716][ T6695] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 201.510992][ T6695] BTRFS info (device loop2): rebuilding free space tree [ 201.538238][ T6695] BTRFS info (device loop2): disabling free space tree [ 201.545402][ T6695] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 201.548418][ T29] audit: type=1326 audit(1739629933.945:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5a18cde9 code=0x7ffc0000 [ 201.555231][ T6695] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.638660][ T29] audit: type=1326 audit(1739629934.005:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c5a18cde9 code=0x7ffc0000 [ 201.662190][ T29] audit: type=1326 audit(1739629934.005:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5a18cde9 code=0x7ffc0000 [ 201.695084][ T29] audit: type=1326 audit(1739629934.015:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4c5a18cde9 code=0x7ffc0000 [ 201.751813][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 202.276862][ T29] audit: type=1326 audit(1739629934.015:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5a18cde9 code=0x7ffc0000 [ 202.277732][ T6719] syz.1.241: attempt to access beyond end of device [ 202.277732][ T6719] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 202.329871][ T29] audit: type=1326 audit(1739629934.025:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c5a18cde9 code=0x7ffc0000 [ 202.353195][ T6719] syz.1.241: attempt to access beyond end of device [ 202.353195][ T6719] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 202.418027][ T6719] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 202.443709][ T29] audit: type=1326 audit(1739629934.025:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5a18cde9 code=0x7ffc0000 [ 202.476089][ T6719] syz.1.241: attempt to access beyond end of device [ 202.476089][ T6719] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 202.616307][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.627895][ T5887] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 202.637203][ T29] audit: type=1326 audit(1739629934.025:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5a18cde9 code=0x7ffc0000 [ 202.680564][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.704808][ T6713] block nbd1: shutting down sockets [ 202.765609][ T29] audit: type=1326 audit(1739629934.025:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c5a18b750 code=0x7ffc0000 [ 202.776759][ T6719] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 202.800686][ T5887] usb 4-1: config 0 descriptor?? [ 202.842600][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 202.847923][ T29] audit: type=1326 audit(1739629934.025:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6705 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5a18cde9 code=0x7ffc0000 [ 202.872781][ T5838] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.904157][ T6719] syz.1.241: attempt to access beyond end of device [ 202.904157][ T6719] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 202.965872][ T6719] syz.1.241: attempt to access beyond end of device [ 202.965872][ T6719] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 203.011653][ T6719] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 203.022952][ T6719] syz.1.241: attempt to access beyond end of device [ 203.022952][ T6719] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 203.077824][ T6719] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 203.171181][ T6719] syz.1.241: attempt to access beyond end of device [ 203.171181][ T6719] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 203.222541][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 203.252317][ T5887] pwc: recv_control_msg error -32 req 02 val 2700 [ 203.281470][ T6719] syz.1.241: attempt to access beyond end of device [ 203.281470][ T6719] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 203.337043][ T6719] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 203.376471][ T6719] syz.1.241: attempt to access beyond end of device [ 203.376471][ T6719] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 203.489261][ T5887] pwc: recv_control_msg error -32 req 04 val 1000 [ 203.506783][ T6719] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 203.543416][ T5887] pwc: recv_control_msg error -32 req 04 val 1300 [ 203.547352][ T6719] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 203.580631][ T5887] pwc: recv_control_msg error -71 req 04 val 1400 [ 203.631973][ T5887] pwc: recv_control_msg error -71 req 02 val 2000 [ 203.659310][ T5887] pwc: recv_control_msg error -71 req 02 val 2100 [ 203.689464][ T5887] pwc: recv_control_msg error -71 req 04 val 1500 [ 203.795667][ T5887] pwc: recv_control_msg error -71 req 02 val 2500 [ 203.832248][ T5887] pwc: recv_control_msg error -71 req 02 val 2400 [ 203.865094][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 203.939019][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 203.964011][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 203.981825][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 203.995860][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.053843][ T5887] pwc: Registered as video103. [ 204.086455][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 204.120779][ T6739] loop2: detected capacity change from 0 to 128 [ 204.174584][ T5887] usb 4-1: USB disconnect, device number 2 [ 207.385547][ T6771] hub 5-0:1.0: USB hub found [ 207.396776][ T6771] hub 5-0:1.0: 1 port detected [ 208.389054][ T5887] IPVS: starting estimator thread 0... [ 208.487459][ T6780] IPVS: using max 18 ests per chain, 43200 per kthread [ 208.498783][ T6781] 9pnet_fd: Insufficient options for proto=fd [ 211.649440][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 211.649460][ T29] audit: type=1326 audit(1739629944.045:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 211.726690][ T29] audit: type=1326 audit(1739629944.115:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 212.371525][ T29] audit: type=1326 audit(1739629944.115:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 212.500135][ T29] audit: type=1326 audit(1739629944.115:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 212.550343][ T29] audit: type=1326 audit(1739629944.125:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 212.586786][ T29] audit: type=1326 audit(1739629944.125:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 212.706721][ T29] audit: type=1326 audit(1739629944.125:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 212.783624][ T29] audit: type=1326 audit(1739629944.125:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 212.860396][ T29] audit: type=1326 audit(1739629944.125:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 212.882549][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.956161][ T29] audit: type=1326 audit(1739629944.125:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f85f7f8cde9 code=0x7ffc0000 [ 214.443494][ T6841] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 214.456126][ T6841] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 214.464568][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: syz.3.287 Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 214.474664][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 214.484743][ T6841] RIP: 0010:skb_queue_purge_reason+0xaa/0x500 [ 214.490904][ T6841] Code: 89 44 24 78 42 c6 44 30 13 f3 e8 91 3d f8 f7 48 8d bc 24 b0 00 00 00 ba 48 00 00 00 31 f6 e8 9d c0 5f f8 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 b7 bd 5f f8 49 8b 45 00 4c 39 e8 [ 214.510521][ T6841] RSP: 0018:ffffc90003b17a20 EFLAGS: 00010202 [ 214.516613][ T6841] RAX: ffffc90003b17ad0 RBX: 0000000000000000 RCX: 0000000000000000 [ 214.526517][ T6841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003b17b18 [ 214.534508][ T6841] RBP: ffffc90003b17b90 R08: ffffc90003b17b17 R09: 0000000000000000 [ 214.542507][ T6841] R10: ffffc90003b17ad0 R11: fffff52000762f63 R12: dffffc0000000000 [ 214.550507][ T6841] R13: 0000000000000008 R14: dffffc0000000000 R15: 0000000000000001 [ 214.558502][ T6841] FS: 0000555556b84500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 214.567443][ T6841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.574032][ T6841] CR2: 0000001b30516ff8 CR3: 000000007c0da000 CR4: 00000000003526f0 [ 214.582018][ T6841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.589995][ T6841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.597968][ T6841] Call Trace: [ 214.601251][ T6841] [ 214.604188][ T6841] ? __die_body+0x5f/0xb0 [ 214.608532][ T6841] ? die_addr+0xb0/0xe0 [ 214.612699][ T6841] ? exc_general_protection+0x3dd/0x5d0 [ 214.618267][ T6841] ? asm_exc_general_protection+0x26/0x30 [ 214.624002][ T6841] ? skb_queue_purge_reason+0xaa/0x500 [ 214.629483][ T6841] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.635829][ T6841] ? enable_work+0x22a/0x360 [ 214.640433][ T6841] ? lockdep_hardirqs_on+0x99/0x150 [ 214.645635][ T6841] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 214.651570][ T6841] ? enable_work+0x2e3/0x360 [ 214.656181][ T6841] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.662615][ T6841] mrvl_close+0x8e/0x120 [ 214.666869][ T6841] hci_uart_tty_close+0x205/0x290 [ 214.671905][ T6841] tty_ldisc_kill+0xa3/0x1a0 [ 214.676519][ T6841] tty_ldisc_release+0x1a1/0x200 [ 214.681464][ T6841] tty_release_struct+0x2b/0xe0 [ 214.686321][ T6841] tty_release+0xd06/0x12c0 [ 214.690837][ T6841] ? __pfx_tty_release+0x10/0x10 [ 214.695788][ T6841] __fput+0x3e9/0x9f0 [ 214.699780][ T6841] task_work_run+0x24f/0x310 [ 214.704404][ T6841] ? _raw_spin_unlock+0x28/0x50 [ 214.709269][ T6841] ? __pfx_task_work_run+0x10/0x10 [ 214.714389][ T6841] ? syscall_exit_to_user_mode+0xa3/0x340 [ 214.720115][ T6841] syscall_exit_to_user_mode+0x13f/0x340 [ 214.725778][ T6841] do_syscall_64+0x100/0x230 [ 214.730396][ T6841] ? clear_bhb_loop+0x35/0x90 [ 214.735098][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.741012][ T6841] RIP: 0033:0x7f774418cde9 [ 214.745449][ T6841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.765065][ T6841] RSP: 002b:00007ffcccce0808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 214.773487][ T6841] RAX: 0000000000000000 RBX: 00007f77443a7ba0 RCX: 00007f774418cde9 [ 214.781474][ T6841] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 214.789549][ T6841] RBP: 00007f77443a7ba0 R08: 00000000000001fc R09: 00000019ccce0aff [ 214.797527][ T6841] R10: 00007f77443a7ac0 R11: 0000000000000246 R12: 0000000000034434 [ 214.805497][ T6841] R13: 00007f77443a6160 R14: ffffffffffffffff R15: 00007ffcccce0920 [ 214.813481][ T6841] [ 214.816501][ T6841] Modules linked in: [ 214.822264][ T6841] ---[ end trace 0000000000000000 ]--- [ 214.827825][ T6841] RIP: 0010:skb_queue_purge_reason+0xaa/0x500 [ 214.833940][ T6841] Code: 89 44 24 78 42 c6 44 30 13 f3 e8 91 3d f8 f7 48 8d bc 24 b0 00 00 00 ba 48 00 00 00 31 f6 e8 9d c0 5f f8 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 b7 bd 5f f8 49 8b 45 00 4c 39 e8 [ 214.855682][ T6841] RSP: 0018:ffffc90003b17a20 EFLAGS: 00010202 [ 214.861774][ T6841] RAX: ffffc90003b17ad0 RBX: 0000000000000000 RCX: 0000000000000000 [ 214.869757][ T6841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003b17b18 [ 214.877796][ T6841] RBP: ffffc90003b17b90 R08: ffffc90003b17b17 R09: 0000000000000000 [ 214.887104][ T6841] R10: ffffc90003b17ad0 R11: fffff52000762f63 R12: dffffc0000000000 [ 214.895109][ T6841] R13: 0000000000000008 R14: dffffc0000000000 R15: 0000000000000001 [ 214.903102][ T6841] FS: 0000555556b84500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 214.912061][ T6841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.918709][ T6841] CR2: 0000001b30516ff8 CR3: 000000007c0da000 CR4: 00000000003526f0 [ 214.926740][ T6841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.934744][ T6841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.942787][ T6841] Kernel panic - not syncing: Fatal exception [ 214.949176][ T6841] Kernel Offset: disabled [ 214.953507][ T6841] Rebooting in 86400 seconds..