last executing test programs: 8.609271228s ago: executing program 2 (id=3): socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 8.143267285s ago: executing program 1 (id=2): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0xd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x61}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0xa472, 0x3000000002, 0xfffffffffffffded]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.112784568s ago: executing program 1 (id=6): r0 = creat(0x0, 0xd931d3864d39ddd8) close(r0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) syz_open_procfs(0x0, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x8080000, 0x0, &(0x7f0000000100)}, {0x5000, 0xf, &(0x7f00000001c0)=""/15}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) syz_io_uring_setup(0x2016, &(0x7f0000000340)={0x0, 0x63f9, 0x20000, 0x0, 0x1ac}, &(0x7f0000000280), &(0x7f0000000400)) r5 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x69) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 6.71992456s ago: executing program 2 (id=8): socket$kcm(0x29, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0) getpid() ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ptrace(0x10, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 6.383314357s ago: executing program 3 (id=9): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 6.050092714s ago: executing program 3 (id=10): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="c6547e22"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba20"], 0x6e}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0xfff, 0x0, 0x40180, 0x5, 0x14, 0xf2, 0x3, 0x7fffffffffffe, 0x5, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0xbdb], 0x1, 0x1c4213}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.949361662s ago: executing program 0 (id=11): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) unshare(0x2c020400) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 5.542820765s ago: executing program 1 (id=12): mlock(&(0x7f000040b000/0x1000)=nil, 0x1000) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) socket$netlink(0x10, 0x3, 0x6) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.459159501s ago: executing program 3 (id=13): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.829228732s ago: executing program 0 (id=14): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) 4.515814807s ago: executing program 2 (id=15): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x8000000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r6, 0x0, 0xffffffff}, 0x18) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0xffffffff, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x50) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r8, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x81044d03, &(0x7f0000000000)) 4.432454804s ago: executing program 0 (id=16): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x1, 0xef9e, 0x9}, &(0x7f0000000200)=0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(r3, 0x541b, 0x41) r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname$packet(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$kcm(0x2, 0x200000000000001, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs2\x00', &(0x7f00000001c0), 0x800000, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x545a43, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f00000000c0)) 3.398377737s ago: executing program 0 (id=17): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xecb0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r12, 0x107, 0x12, 0x0, &(0x7f0000001cc0)) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r8, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r9, 0x3516, 0x701f, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.807174015s ago: executing program 3 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x20000000001}) 2.24223267s ago: executing program 0 (id=19): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1f, 0x9, @local, 0x5}, 0x1c) 1.973140422s ago: executing program 1 (id=20): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000005f304433b3c4d403b4c4ddca0e3cf4c122da00a646d2f5d832c05d66d0c0e7f6a1e88d3116c882674e74c604eab452ac64e43e8effe88a272982ecf2ef60b197aa20a77eb246d253986c65bb78cb8bd43cee3440b80f4fc8720bf57f597c50f8b2373f9a67f3e6511c9bcadd35d5cb65433d9e4a97b8a71c5fb1f84d973937eb4ce52122c6d0441ffca0a1bb962430859b3ebbb7782a4e014285611f3adb985f54b120b42a6b64a654918151ae42fa286de83507118c213a27209c9905c676164775c1aa94f5d41ad4a1660f0f3b24109bd9f70bb1ec61eb2516a8fbbf1dda"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.947215644s ago: executing program 3 (id=21): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba20"], 0x6e}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0xfff, 0x0, 0x40180, 0x5, 0x14, 0xf2, 0x3, 0x7fffffffffffe, 0x5, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0xbdb], 0x1, 0x1c4213}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.599564022s ago: executing program 2 (id=22): socket$inet(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fff7ffc}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 430.122586ms ago: executing program 2 (id=23): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 416.038077ms ago: executing program 3 (id=24): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x8000000000000001) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xdb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000500)=0xd) 410.238457ms ago: executing program 0 (id=25): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xc1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}, 0xbf20}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x2040400) poll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x200}], 0x1, 0x1ad) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 323.154224ms ago: executing program 2 (id=26): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 0s ago: executing program 1 (id=27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xae6, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 82.410068][ T5774] cgroup: Unknown subsys name 'net' [ 82.522631][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.242749][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.836119][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.845112][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.862564][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.871305][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.883345][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.891482][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.917966][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.931206][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.939723][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.948455][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.958641][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.966202][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.009814][ T5102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.059404][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.066847][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.075019][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.084707][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.092728][ T5102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.100185][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.109184][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.118015][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.132009][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.140106][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.147805][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.563444][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 86.575062][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 86.730583][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 86.753892][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.761181][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.769316][ T5784] bridge_slave_0: entered allmulticast mode [ 86.777326][ T5784] bridge_slave_0: entered promiscuous mode [ 86.789846][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.797452][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.804790][ T5784] bridge_slave_1: entered allmulticast mode [ 86.811853][ T5784] bridge_slave_1: entered promiscuous mode [ 86.838066][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.845969][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.854146][ T5787] bridge_slave_0: entered allmulticast mode [ 86.861185][ T5787] bridge_slave_0: entered promiscuous mode [ 86.917206][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.924530][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.931709][ T5787] bridge_slave_1: entered allmulticast mode [ 86.940079][ T5787] bridge_slave_1: entered promiscuous mode [ 87.030709][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.044140][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.064028][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.076612][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.180846][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.204185][ T5784] team0: Port device team_slave_0 added [ 87.234858][ T5787] team0: Port device team_slave_0 added [ 87.274196][ T5784] team0: Port device team_slave_1 added [ 87.280428][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.288693][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.296343][ T5791] bridge_slave_0: entered allmulticast mode [ 87.305201][ T5791] bridge_slave_0: entered promiscuous mode [ 87.315764][ T5787] team0: Port device team_slave_1 added [ 87.351321][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.358980][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.367236][ T5791] bridge_slave_1: entered allmulticast mode [ 87.376202][ T5791] bridge_slave_1: entered promiscuous mode [ 87.471284][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.484033][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.515861][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.541418][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.550387][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.581489][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.629716][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.639808][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.647220][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.673658][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.691070][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.718294][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.725872][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.751920][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.811809][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.819633][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.826959][ T5790] bridge_slave_0: entered allmulticast mode [ 87.834840][ T5790] bridge_slave_0: entered promiscuous mode [ 87.860623][ T5791] team0: Port device team_slave_0 added [ 87.869901][ T5791] team0: Port device team_slave_1 added [ 87.877101][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.884459][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.891702][ T5790] bridge_slave_1: entered allmulticast mode [ 87.899271][ T5790] bridge_slave_1: entered promiscuous mode [ 87.943771][ T5102] Bluetooth: hci0: command tx timeout [ 87.988760][ T5784] hsr_slave_0: entered promiscuous mode [ 87.995454][ T5784] hsr_slave_1: entered promiscuous mode [ 88.017772][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.027032][ T5102] Bluetooth: hci1: command tx timeout [ 88.036107][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.064212][ T5787] hsr_slave_0: entered promiscuous mode [ 88.070796][ T5787] hsr_slave_1: entered promiscuous mode [ 88.077381][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.085796][ T5787] Cannot create hsr debugfs directory [ 88.093481][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.100461][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.126851][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.140043][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.147330][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.173610][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.183063][ T5102] Bluetooth: hci2: command tx timeout [ 88.184552][ T5786] Bluetooth: hci3: command tx timeout [ 88.254880][ T5790] team0: Port device team_slave_0 added [ 88.303986][ T5791] hsr_slave_0: entered promiscuous mode [ 88.310507][ T5791] hsr_slave_1: entered promiscuous mode [ 88.317543][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.325380][ T5791] Cannot create hsr debugfs directory [ 88.333510][ T5790] team0: Port device team_slave_1 added [ 88.438488][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.445607][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.472056][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.489288][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.496461][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.522711][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.671647][ T5790] hsr_slave_0: entered promiscuous mode [ 88.678635][ T5790] hsr_slave_1: entered promiscuous mode [ 88.685553][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.693334][ T5790] Cannot create hsr debugfs directory [ 88.893778][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.915003][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.943746][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.955361][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.031207][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.056727][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.068763][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.079632][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.156679][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.175468][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.189242][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.215530][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.318414][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.335998][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.365919][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.384880][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.492240][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.515208][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.562171][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.584759][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.604911][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.612400][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.645240][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.652469][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.676128][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.698556][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.705805][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.717433][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.724619][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.749732][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.800780][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.824311][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.831490][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.859557][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.877759][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.884977][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.897002][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.904191][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.959573][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.975902][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.983210][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.007377][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.032801][ T5786] Bluetooth: hci0: command tx timeout [ 90.113392][ T5786] Bluetooth: hci1: command tx timeout [ 90.264446][ T5786] Bluetooth: hci2: command tx timeout [ 90.264456][ T5102] Bluetooth: hci3: command tx timeout [ 90.461639][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.508095][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.671010][ T5784] veth0_vlan: entered promiscuous mode [ 90.694906][ T5787] veth0_vlan: entered promiscuous mode [ 90.721777][ T5784] veth1_vlan: entered promiscuous mode [ 90.732217][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.745702][ T5787] veth1_vlan: entered promiscuous mode [ 90.817701][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.841855][ T5784] veth0_macvtap: entered promiscuous mode [ 90.874869][ T5787] veth0_macvtap: entered promiscuous mode [ 90.892020][ T5784] veth1_macvtap: entered promiscuous mode [ 90.931612][ T5787] veth1_macvtap: entered promiscuous mode [ 90.938803][ T5791] veth0_vlan: entered promiscuous mode [ 90.978812][ T5791] veth1_vlan: entered promiscuous mode [ 90.989386][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.003667][ T5790] veth0_vlan: entered promiscuous mode [ 91.015652][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.026999][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.039125][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.051964][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.070653][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.081393][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.095691][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.110399][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.120932][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.130173][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.140074][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.175561][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.184751][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.194885][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.205511][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.240971][ T5790] veth1_vlan: entered promiscuous mode [ 91.279660][ T5791] veth0_macvtap: entered promiscuous mode [ 91.329205][ T5791] veth1_macvtap: entered promiscuous mode [ 91.401526][ T5790] veth0_macvtap: entered promiscuous mode [ 91.403092][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.414710][ T5790] veth1_macvtap: entered promiscuous mode [ 91.428496][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.455864][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.467506][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.477741][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.489025][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.500388][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.512734][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.523384][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.533688][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.546721][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.559795][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.610318][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.620228][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.633097][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.641877][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.654694][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.664508][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.669828][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.685256][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.695683][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.706450][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.716819][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.727555][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.739768][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.781240][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.794506][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.805913][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.816766][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.826845][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.837646][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.849508][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.859020][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.868483][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.893800][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.903936][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.914647][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.923911][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.975468][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.006119][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.070437][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.083822][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.103229][ T5786] Bluetooth: hci0: command tx timeout [ 92.183270][ T5786] Bluetooth: hci1: command tx timeout [ 92.282998][ T1188] cfg80211: failed to load regulatory.db [ 92.343998][ T5786] Bluetooth: hci3: command tx timeout [ 92.345566][ T5102] Bluetooth: hci2: command tx timeout [ 92.370699][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.400938][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.414310][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.429533][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.534791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.612545][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.634637][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.715814][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.849571][ T5882] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.833065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.192568][ T5102] Bluetooth: hci0: command tx timeout [ 94.262511][ T5102] Bluetooth: hci1: command tx timeout [ 94.423472][ T5102] Bluetooth: hci2: command tx timeout [ 94.423487][ T5786] Bluetooth: hci3: command tx timeout [ 95.722758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 95.731695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.013512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.021888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.132947][ T5921] tipc: Started in network mode [ 96.175127][ T5921] tipc: Node identity 4, cluster identity 4711 [ 96.192480][ T5921] tipc: Node number set to 4 [ 96.673154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.681408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.744459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.754311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.527856][ T5931] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.041210][ T5949] binder: 5947:5949 ioctl c0306201 0 returned -14 [ 99.273760][ T5952] kvm: pic: non byte write [ 99.300487][ T5953] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 99.310798][ T5949] kvm: pic: non byte write [ 101.786631][ T5971] syz.0.25 (5971) used greatest stack depth: 16584 bytes left [ 102.302303][ C0] sched: RT throttling activated [ 102.318182][ T5972] general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN [ 102.329949][ T5972] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 102.338415][ T5972] CPU: 0 PID: 5972 Comm: syz.3.24 Not tainted 6.6.102-syzkaller #0 [ 102.346323][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.356414][ T5972] RIP: 0010:bcsp_recv+0x13e/0x1730 [ 102.361571][ T5972] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 43 6c 59 fa 49 8b 1f 31 ff 48 89 [ 102.381212][ T5972] RSP: 0018:ffffc9000b40fc20 EFLAGS: 00010206 [ 102.387316][ T5972] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 102.395315][ T5972] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 102.403308][ T5972] RBP: ffffc9000b40fd80 R08: ffff8880187d881f R09: 1ffff110030fb103 [ 102.411357][ T5972] R10: dffffc0000000000 R11: ffffed10030fb104 R12: 0000000000000001 [ 102.419419][ T5972] R13: ffffc9000b40fe20 R14: dffffc0000000000 R15: 0000000000000108 [ 102.427421][ T5972] FS: 00007fa6f7cbf6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 102.436356][ T5972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.442998][ T5972] CR2: 00007fa6f7cbef98 CR3: 00000000774e3000 CR4: 00000000003506f0 [ 102.451094][ T5972] Call Trace: [ 102.454386][ T5972] [ 102.457328][ T5972] ? bcsp_flush+0x40/0x40 [ 102.461682][ T5972] ? rcu_read_lock_any_held+0xb4/0x120 [ 102.467160][ T5972] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 102.472468][ T5972] ? mutex_lock_nested+0x20/0x20 [ 102.477426][ T5972] hci_uart_tty_receive+0x188/0x210 [ 102.482641][ T5972] ? hci_uart_tty_ioctl+0x9f0/0x9f0 [ 102.487853][ T5972] tiocsti+0x23e/0x2c0 [ 102.492017][ T5972] ? signal_pending+0xa0/0xa0 [ 102.496709][ T5972] tty_ioctl+0x62e/0xdd0 [ 102.500965][ T5972] ? tty_get_icount+0xb0/0xb0 [ 102.505656][ T5972] __se_sys_ioctl+0xfd/0x170 [ 102.510265][ T5972] do_syscall_64+0x55/0xb0 [ 102.514689][ T5972] ? clear_bhb_loop+0x40/0x90 [ 102.519366][ T5972] ? clear_bhb_loop+0x40/0x90 [ 102.524047][ T5972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.529954][ T5972] RIP: 0033:0x7fa6f6d8ebe9 [ 102.534391][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.554093][ T5972] RSP: 002b:00007fa6f7cbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.562514][ T5972] RAX: ffffffffffffffda RBX: 00007fa6f6fb6090 RCX: 00007fa6f6d8ebe9 [ 102.570503][ T5972] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000004 [ 102.578489][ T5972] RBP: 00007fa6f6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.586474][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.594463][ T5972] R13: 00007fa6f6fb6128 R14: 00007fa6f6fb6090 R15: 00007fff5803ebf8 [ 102.602459][ T5972] [ 102.605481][ T5972] Modules linked in: [ 102.872545][ T5972] ---[ end trace 0000000000000000 ]--- [ 102.939460][ T5972] RIP: 0010:bcsp_recv+0x13e/0x1730 [ 102.953079][ T5972] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 43 6c 59 fa 49 8b 1f 31 ff 48 89 [ 102.996578][ T5972] RSP: 0018:ffffc9000b40fc20 EFLAGS: 00010206 [ 103.002771][ T5972] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 103.012922][ T5972] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 103.030954][ T5972] RBP: ffffc9000b40fd80 R08: ffff8880187d881f R09: 1ffff110030fb103 [ 103.060259][ T5972] R10: dffffc0000000000 R11: ffffed10030fb104 R12: 0000000000000001 [ 103.093995][ T5972] R13: ffffc9000b40fe20 R14: dffffc0000000000 R15: 0000000000000108 [ 103.138307][ T5972] FS: 00007fa6f7cbf6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 103.167052][ T5972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.174421][ T5972] CR2: 000000110c2e99d3 CR3: 00000000774e3000 CR4: 00000000003506f0 [ 103.183321][ T5972] Kernel panic - not syncing: Fatal exception [ 103.189667][ T5972] Kernel Offset: disabled [ 103.194005][ T5972] Rebooting in 86400 seconds..