last executing test programs: 9.806812867s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.078488154s ago: executing program 3 (id=5): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04803920", @ANYRES64], 0x7) 8.914891629s ago: executing program 3 (id=6): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) 8.743184579s ago: executing program 2 (id=7): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 8.172811479s ago: executing program 1 (id=2): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 5.556974061s ago: executing program 0 (id=8): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xf5) 5.367049276s ago: executing program 2 (id=9): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 5.130586662s ago: executing program 1 (id=10): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="401791000000cb2176601e225d4625361eab47cc8a804c343c553378fef7109119640180000000000000e17dccc4301beb4c024bdd546557c54fee8cb413086f6f0945b4cfb0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.918398799s ago: executing program 2 (id=11): syz_usb_connect(0x5, 0x24, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.874559299s ago: executing program 0 (id=12): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000280)=0xfffffffc) 4.775856243s ago: executing program 0 (id=13): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x81, 0x7b, 0x0, 0x5, 0x17, "f61c369dd12c2ed7"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) 4.138051317s ago: executing program 3 (id=14): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xffffffffeffffff6, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x7, 0xffffffff, 0x400000004, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2, 0x0, 0xb7, 0x7, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.601927404s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 2.163665933s ago: executing program 0 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x32, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 1.768402218s ago: executing program 1 (id=17): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.377788368s ago: executing program 3 (id=18): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a", 0x6e, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c5393120", 0xab}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xb7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.016474319s ago: executing program 0 (id=19): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 784.842919ms ago: executing program 2 (id=20): syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34097772"], 0xa) 426.975647ms ago: executing program 2 (id=21): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}]}]}, 0x13c}}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400010000100309040000010300020009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000a09457"], 0x0}, 0x0) 169.593078ms ago: executing program 3 (id=22): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000280)=0xfffffffc) 0s ago: executing program 3 (id=23): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000fcff00020000200900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011000100"], 0x64}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 76.120212][ T5600] cgroup: Unknown subsys name 'net' [ 76.380759][ T5600] cgroup: Unknown subsys name 'cpuset' [ 76.447215][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.074200][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.459707][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.479074][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.509695][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.527245][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.528450][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.529830][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.545232][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.550663][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.552828][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.559036][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.562245][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.563224][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.563366][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.569671][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.593469][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.594177][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.637808][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.661857][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.665262][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.683594][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.638734][ T5629] Bluetooth: hci2: command tx timeout [ 82.638847][ T5629] Bluetooth: hci1: command tx timeout [ 82.716865][ T5617] Bluetooth: hci0: command tx timeout [ 82.759484][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.760271][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.760471][ T5615] bridge_slave_0: entered allmulticast mode [ 82.762420][ T5615] bridge_slave_0: entered promiscuous mode [ 82.806761][ T5617] Bluetooth: hci3: command tx timeout [ 82.815159][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.815398][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.815650][ T5615] bridge_slave_1: entered allmulticast mode [ 82.818438][ T5615] bridge_slave_1: entered promiscuous mode [ 82.845036][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.845306][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.845830][ T5612] bridge_slave_0: entered allmulticast mode [ 82.850258][ T5612] bridge_slave_0: entered promiscuous mode [ 82.890164][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.890342][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.893946][ T5613] bridge_slave_0: entered allmulticast mode [ 82.907172][ T5613] bridge_slave_0: entered promiscuous mode [ 82.909731][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.910027][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.910247][ T5612] bridge_slave_1: entered allmulticast mode [ 82.915817][ T5612] bridge_slave_1: entered promiscuous mode [ 82.961188][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.961470][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.961714][ T5613] bridge_slave_1: entered allmulticast mode [ 82.963610][ T5613] bridge_slave_1: entered promiscuous mode [ 82.994962][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.995162][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.995332][ T5614] bridge_slave_0: entered allmulticast mode [ 82.998071][ T5614] bridge_slave_0: entered promiscuous mode [ 83.023657][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.059589][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.059866][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.060034][ T5614] bridge_slave_1: entered allmulticast mode [ 83.061776][ T5614] bridge_slave_1: entered promiscuous mode [ 83.065850][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.096443][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.139504][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.143652][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.190774][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.211896][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.215595][ T5615] team0: Port device team_slave_0 added [ 83.259320][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.261666][ T5615] team0: Port device team_slave_1 added [ 83.294041][ T5612] team0: Port device team_slave_0 added [ 83.569726][ T5613] team0: Port device team_slave_0 added [ 83.572351][ T5612] team0: Port device team_slave_1 added [ 83.617404][ T5613] team0: Port device team_slave_1 added [ 83.647354][ T5614] team0: Port device team_slave_0 added [ 83.649172][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.649182][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.649196][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.700203][ T5614] team0: Port device team_slave_1 added [ 83.703046][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.703059][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.703083][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.731166][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.731182][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.731204][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.779102][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.779118][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.779141][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.782942][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.782955][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.782978][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.814693][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.814710][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.814734][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.832564][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.832579][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.832602][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.858207][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.858229][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.858253][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.972303][ T5615] hsr_slave_0: entered promiscuous mode [ 83.974376][ T5615] hsr_slave_1: entered promiscuous mode [ 84.054426][ T5612] hsr_slave_0: entered promiscuous mode [ 84.055555][ T5612] hsr_slave_1: entered promiscuous mode [ 84.058497][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 84.058612][ T5612] Cannot create hsr debugfs directory [ 84.091184][ T5613] hsr_slave_0: entered promiscuous mode [ 84.092351][ T5613] hsr_slave_1: entered promiscuous mode [ 84.093206][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 84.093228][ T5613] Cannot create hsr debugfs directory [ 84.140908][ T5614] hsr_slave_0: entered promiscuous mode [ 84.142045][ T5614] hsr_slave_1: entered promiscuous mode [ 84.142967][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 84.142988][ T5614] Cannot create hsr debugfs directory [ 84.719105][ T5629] Bluetooth: hci2: command tx timeout [ 84.719263][ T5617] Bluetooth: hci1: command tx timeout [ 84.796883][ T5617] Bluetooth: hci0: command tx timeout [ 84.876815][ T5617] Bluetooth: hci3: command tx timeout [ 84.998958][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.041401][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.048574][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.072244][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.088564][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.121320][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.143163][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.173871][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.307582][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.344538][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.349787][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.383279][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.390124][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.425128][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.452248][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.490414][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.632926][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.673416][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.685785][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.720183][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.739381][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.781247][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.806266][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.847358][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.980188][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.022122][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.040233][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.074410][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.084569][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.111441][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.115411][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.150506][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.165171][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.260511][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.311804][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.311956][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.378276][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.378392][ T3269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.411901][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.529602][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.572658][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.572826][ T3269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.599483][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.621037][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.621193][ T3269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.760986][ T32] cfg80211: failed to load regulatory.db [ 86.766185][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.796737][ T5629] Bluetooth: hci2: command tx timeout [ 86.796819][ T5617] Bluetooth: hci1: command tx timeout [ 86.814606][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.872006][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.872209][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.880160][ T5617] Bluetooth: hci0: command tx timeout [ 86.923526][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.923772][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.958141][ T5617] Bluetooth: hci3: command tx timeout [ 87.001985][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.062898][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.063003][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.122749][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.122902][ T3269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.031790][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.165702][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.464419][ T5615] veth0_vlan: entered promiscuous mode [ 88.566370][ T5615] veth1_vlan: entered promiscuous mode [ 88.590736][ T5612] veth0_vlan: entered promiscuous mode [ 88.611768][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.663411][ T5612] veth1_vlan: entered promiscuous mode [ 88.682407][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.779858][ T5615] veth0_macvtap: entered promiscuous mode [ 88.819942][ T5615] veth1_macvtap: entered promiscuous mode [ 88.841213][ T5612] veth0_macvtap: entered promiscuous mode [ 88.871913][ T5614] veth0_vlan: entered promiscuous mode [ 88.876496][ T5612] veth1_macvtap: entered promiscuous mode [ 88.876855][ T5629] Bluetooth: hci2: command tx timeout [ 88.876897][ T5617] Bluetooth: hci1: command tx timeout [ 88.939228][ T5613] veth0_vlan: entered promiscuous mode [ 88.945319][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.954299][ T5614] veth1_vlan: entered promiscuous mode [ 88.963960][ T5617] Bluetooth: hci0: command tx timeout [ 88.991142][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.008256][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.021821][ T5613] veth1_vlan: entered promiscuous mode [ 89.038261][ T5617] Bluetooth: hci3: command tx timeout [ 89.045348][ T2696] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.066435][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.090815][ T2696] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.108943][ T2696] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.111815][ T2696] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.144176][ T2696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.213059][ T2696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.216416][ T2696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.232375][ T2696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.380840][ T5614] veth0_macvtap: entered promiscuous mode [ 89.570552][ T5614] veth1_macvtap: entered promiscuous mode [ 89.796406][ T5613] veth0_macvtap: entered promiscuous mode [ 89.847475][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.847497][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.848176][ T5613] veth1_macvtap: entered promiscuous mode [ 89.917943][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.952408][ T3318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.952427][ T3318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.980152][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.060631][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.064479][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.077462][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.079263][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.079278][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.102640][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.129592][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.129668][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.261471][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.261489][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.270269][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.305749][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.393094][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.512941][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.033709][ T5767] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.119185][ T3269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.119204][ T3269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.544446][ T3318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.544465][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.656480][ T3318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.656498][ T3318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.796407][ T805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.796426][ T805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.867558][ T5724] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.047601][ T5724] usb 3-1: device descriptor read/64, error -71 [ 93.726472][ T5724] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.091998][ T5724] usb 3-1: device descriptor read/64, error -71 [ 94.358425][ T5724] usb usb3-port1: attempt power cycle [ 95.082104][ T5724] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.182286][ T5724] usb 3-1: device descriptor read/8, error -71 [ 95.508281][ T5793] use of bytesused == 0 is deprecated and will be removed in the future, [ 95.508297][ T5793] use the actual size instead. [ 95.906857][ T5345] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.100613][ T5345] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 96.100643][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.293017][ T5345] usb 2-1: config 0 descriptor?? [ 96.469100][ T5345] cp210x 2-1:0.0: cp210x converter detected [ 96.608042][ T5345] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 96.608084][ T5345] cp210x 2-1:0.0: querying part number failed [ 98.178778][ T5345] usb 2-1: cp210x converter now attached to ttyUSB0 [ 98.681373][ T5818] syzkaller1: entered promiscuous mode [ 98.681390][ T5818] syzkaller1: entered allmulticast mode [ 98.724241][ T5711] usb 2-1: USB disconnect, device number 2 [ 98.981907][ T5711] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 98.984661][ T5711] cp210x 2-1:0.0: device disconnected [ 100.128689][ T5725] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.276701][ T5725] usb 1-1: device descriptor read/64, error -71 [ 100.456952][ T5626] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 100.562265][ T5725] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.650516][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 100.650532][ C0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 100.650552][ C0] CPU: 0 UID: 0 PID: 5821 Comm: syz.1.17 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 100.650566][ C0] Tainted: [L]=SOFTLOCKUP [ 100.650570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.650576][ C0] RIP: 0010:__schedule+0x4030/0x5550 [ 100.650592][ C0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 100.650600][ C0] RSP: 0018:ffffc90005b36620 EFLAGS: 00010003 [ 100.650609][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 100.650615][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 100.650621][ C0] RBP: ffffc90005b36818 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 100.650628][ C0] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b863c658 [ 100.650635][ C0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 100.650642][ C0] FS: 00007f3d5ba3d6c0(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 100.650650][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.650656][ C0] CR2: 00007fc0c0d556b8 CR3: 0000000040c3a000 CR4: 00000000003526f0 [ 100.650667][ C0] Call Trace: [ 100.650675][ C0] [ 100.650683][ C0] ? irqentry_exit+0x218/0x8c0 [ 100.650697][ C0] ? __pfx___schedule+0x10/0x10 [ 100.650709][ C0] preempt_schedule_irq+0x4d/0xa0 [ 100.650720][ C0] irqentry_exit+0x14f/0x8c0 [ 100.650731][ C0] ? trace_irq_disable+0x3b/0x140 [ 100.650744][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 100.650755][ C0] RIP: 0010:trim_netdev_trace+0x61c/0x840 [ 100.650775][ C0] Code: 24 08 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ad 29 1c f9 48 8b 44 24 08 4a 8b 1c f0 <48> 89 df 4c 89 fe e8 59 54 b0 f8 4c 39 fb 74 20 4c 89 e0 44 39 f0 [ 100.650783][ C0] RSP: 0018:ffffc90005b36940 EFLAGS: 00000246 [ 100.650790][ C0] RAX: ffffc90005b36a80 RBX: ffffffff89a373f6 RCX: dffffc0000000000 [ 100.650797][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 100.650803][ C0] RBP: ffffc90005b36a10 R08: 0000000000000000 R09: 0000000000000100 [ 100.650808][ C0] R10: ffffc90005b36980 R11: fffff52000b66d34 R12: 0000000000000013 [ 100.650815][ C0] R13: ffffc90005b36ab8 R14: 0000000000000007 R15: ffffffff818849de [ 100.650821][ C0] ? handle_softirqs+0x1de/0x6d0 [ 100.650835][ C0] ? NF_HOOK+0x336/0x3c0 [ 100.650850][ C0] ? __pfx_trim_netdev_trace+0x10/0x10 [ 100.650863][ C0] ? stack_trace_save+0xa9/0x100 [ 100.650876][ C0] save_dst_trace_buffer+0x114/0x5b0 [ 100.650889][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 100.650901][ C0] ? __pfx_save_dst_trace_buffer+0x10/0x10 [ 100.650914][ C0] ? dst_release+0x28/0x1b0 [ 100.650925][ C0] ? skb_release_head_state+0x71/0x360 [ 100.650936][ C0] ? __kfree_skb+0x24/0x210 [ 100.650946][ C0] ? l2tp_ip_recv+0x88d/0xcb0 [ 100.650958][ C0] ? ip_protocol_deliver_rcu+0x2e0/0x440 [ 100.650969][ C0] ? ip_local_deliver_finish+0x3bb/0x6f0 [ 100.650981][ C0] ? NF_HOOK+0x336/0x3c0 [ 100.650991][ C0] ? NF_HOOK+0x336/0x3c0 [ 100.651001][ C0] ? process_backlog+0x569/0xc60 [ 100.651009][ C0] ? __napi_poll+0xab/0x550 [ 100.651022][ C0] ? net_rx_action+0x696/0xe00 [ 100.651030][ C0] ? handle_softirqs+0x1de/0x6d0 [ 100.651043][ C0] ? __local_bh_enable_ip+0x170/0x2b0 [ 100.651058][ C0] ? __dev_queue_xmit+0x1eaf/0x3900 [ 100.651070][ C0] ? ip_finish_output2+0xcab/0x10b0 [ 100.651079][ C0] ? ip_output+0x29f/0x450 [ 100.651092][ C0] ? __ip_queue_xmit+0x116a/0x1bb0 [ 100.651105][ C0] ? l2tp_ip_sendmsg+0x668/0x1620 [ 100.651118][ C0] ? sock_sendmsg_nosec+0x10e/0x180 [ 100.651132][ C0] ? ____sys_sendmsg+0x55c/0x870 [ 100.651144][ C0] ? net_generic+0x1e/0x240 [ 100.651157][ C0] dst_release+0x28/0x1b0 [ 100.651169][ C0] skb_release_head_state+0x71/0x360 [ 100.651181][ C0] __kfree_skb+0x24/0x210 [ 100.651191][ C0] l2tp_ip_recv+0x88d/0xcb0 [ 100.651204][ C0] ? __pfx_l2tp_ip_recv+0x10/0x10 [ 100.651216][ C0] ip_protocol_deliver_rcu+0x2e0/0x440 [ 100.651228][ C0] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 100.651240][ C0] ip_local_deliver_finish+0x3bb/0x6f0 [ 100.651253][ C0] NF_HOOK+0x336/0x3c0 [ 100.651266][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 100.651279][ C0] ? NF_HOOK+0x9e/0x3c0 [ 100.651289][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 100.651299][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 100.651311][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 100.651324][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 100.651335][ C0] NF_HOOK+0x336/0x3c0 [ 100.651346][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.651357][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 100.651368][ C0] ? NF_HOOK+0x9e/0x3c0 [ 100.651378][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 100.651389][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 100.651401][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 100.651412][ C0] ? process_backlog+0x271/0xc60 [ 100.651420][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 100.651434][ C0] process_backlog+0x569/0xc60 [ 100.651449][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.651476][ C0] __napi_poll+0xab/0x550 [ 100.651491][ C0] net_rx_action+0x696/0xe00 [ 100.651502][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 100.651510][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 100.651523][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 100.651536][ C0] ? rcu_is_watching+0x15/0xb0 [ 100.651552][ C0] handle_softirqs+0x1de/0x6d0 [ 100.651567][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 100.651580][ C0] ? __dev_queue_xmit+0x2b3/0x3900 [ 100.651593][ C0] __dev_queue_xmit+0x1eaf/0x3900 [ 100.651606][ C0] ? __dev_queue_xmit+0x2b3/0x3900 [ 100.651619][ C0] ? stack_depot_save_flags+0x33/0x810 [ 100.651632][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 100.651644][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 100.651657][ C0] ? nf_hook+0xa1/0x3a0 [ 100.651671][ C0] ? ip_output+0x29f/0x450 [ 100.651684][ C0] ? ip_output+0x29f/0x450 [ 100.651698][ C0] ? ip_finish_output2+0xacc/0x10b0 [ 100.651708][ C0] ? ip_finish_output2+0x3c2/0x10b0 [ 100.651717][ C0] ip_finish_output2+0xcab/0x10b0 [ 100.651726][ C0] ? ip_finish_output2+0x3c2/0x10b0 [ 100.651737][ C0] ip_output+0x29f/0x450 [ 100.651750][ C0] ? ip_output+0x5b/0x450 [ 100.651767][ C0] ? __ip_queue_xmit+0x5c/0x1bb0 [ 100.651781][ C0] __ip_queue_xmit+0x116a/0x1bb0 [ 100.651795][ C0] ? ipv4_dst_check+0x28b/0x330 [ 100.651809][ C0] ? __ip_queue_xmit+0x5c/0x1bb0 [ 100.651823][ C0] l2tp_ip_sendmsg+0x668/0x1620 [ 100.651836][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 100.651851][ C0] ? l2tp_ip_sendmsg+0x43c/0x1620 [ 100.651865][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 100.651874][ C0] sock_sendmsg_nosec+0x10e/0x180 [ 100.651888][ C0] ____sys_sendmsg+0x55c/0x870 [ 100.651900][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.651912][ C0] ? import_iovec+0x73/0xa0 [ 100.651923][ C0] ___sys_sendmsg+0x2a5/0x360 [ 100.651935][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.651946][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 100.651965][ C0] __sys_sendmmsg+0x279/0x4d0 [ 100.651977][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 100.651990][ C0] ? reacquire_held_locks+0x104/0x190 [ 100.652005][ C0] ? kfree+0x4d/0x6c0 [ 100.652021][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 100.652032][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 100.652044][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.652053][ C0] do_syscall_64+0x174/0x580 [ 100.652065][ C0] ? clear_bhb_loop+0x40/0x90 [ 100.652075][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.652084][ C0] RIP: 0033:0x7f3d5d80ce59 [ 100.652097][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.652104][ C0] RSP: 002b:00007f3d5ba3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.652114][ C0] RAX: ffffffffffffffda RBX: 00007f3d5da86090 RCX: 00007f3d5d80ce59 [ 100.652120][ C0] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 100.652126][ C0] RBP: 00007f3d5d8a2e6f R08: 0000000000000000 R09: 0000000000000000 [ 100.652132][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.652138][ C0] R13: 00007f3d5da86128 R14: 00007f3d5da86090 R15: 00007ffc9d295e48 [ 100.652147][ C0] [ 100.652151][ C0] Modules linked in: [ 100.652161][ C0] ---[ end trace 0000000000000000 ]--- [ 100.652171][ C0] RIP: 0010:__schedule+0x4030/0x5550 [ 100.652181][ C0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 100.652188][ C0] RSP: 0018:ffffc90005b36620 EFLAGS: 00010003 [ 100.652195][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 100.652201][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 100.652207][ C0] RBP: ffffc90005b36818 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 100.652213][ C0] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b863c658 [ 100.652220][ C0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 100.652226][ C0] FS: 00007f3d5ba3d6c0(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 100.652234][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.652240][ C0] CR2: 00007fc0c0d556b8 CR3: 0000000040c3a000 CR4: 00000000003526f0 [ 100.652250][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 100.652391][ C0] Kernel Offset: disabled