last executing test programs: 2.823941071s ago: executing program 0 (id=220): r0 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x0) 2.648777693s ago: executing program 1 (id=224): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 2.247841815s ago: executing program 2 (id=226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf09000000000000550901000000000095000000000000006509ffff0800000018010000756c6c2500000000002020207b1af8ff00000000bf8504"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x28}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e"], 0x0, 0x35}, 0x28) 2.147728671s ago: executing program 1 (id=227): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000380)={[{@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x104) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.131010274s ago: executing program 4 (id=229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf09000000000000550901000000000095000000000000006509ffff0800000018010000756c6c2500000000002020207b1af8ff00000000bf8504"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x28}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000005f"], 0x0, 0x35}, 0x28) 1.968102795s ago: executing program 2 (id=230): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x9}, 0x7, 0x80000000, 0x200000, 0x1c00000000000000}) 1.9646707s ago: executing program 4 (id=231): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)=' ', 0x1}], 0x1) 1.766893066s ago: executing program 4 (id=233): socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0x8ffff) copy_file_range(r0, 0x0, r0, 0x0, 0x9, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000880)=ANY=[], 0x78) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0x1, 0x69b, 0x1fb, 0xffffffff, 0xfffffff7}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x8}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x43}]}}}]}, 0x64}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.758033125s ago: executing program 2 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 1.540482539s ago: executing program 1 (id=235): r0 = syz_io_uring_setup(0x6de3, &(0x7f0000000180)={0x0, 0x1137, 0x80, 0x1, 0x28}, &(0x7f00000000c0), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], &(0x7f0000002480)=[0x2]}, 0x20) 1.488749133s ago: executing program 2 (id=236): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0xfdef) 1.344264915s ago: executing program 2 (id=238): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x1}, 0xc) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) 1.220029154s ago: executing program 0 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x789d26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8c28, 0x10800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0x300}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd0fffc02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) 1.219868043s ago: executing program 3 (id=240): r0 = memfd_create(&(0x7f0000001c00)='\xb1\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\b\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00\t\x00\x00\x00\x00\x00\x00\x00\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x84z\xd0V\x11\xfaZ\xcdR\xe2#\x00!\x93~\xc4\n\x97\x86\xfd\xb7\fiBeisG#\xfd\x95\xf3\xa0\f\xday|\"&B\xde\x86\xdcHQ\x16\x1f\xc9\xb4#:R\xdb\xf8Mv\x9dl\xff\xa1\xea\x145\x8b\x95\xae\x83u\xb9\xfa,\xa2Ig\x1c\v\xd8z\a\xe1\x1c\xed,K\x06\x86\"\xc4\xae\xc1\x86\xe8\x89\x1f\x9c\xe1\xf3\x95S8\xbc\xe7\x962\xe0\xc9h\xd6\x0e \x7f\xb1\xe0\x7f+\xdf\xa0%\xe1\xef\x9b\xf1\xf2\xab\x85\xb1\x95\xf6\xae\ti\xa2\x9a\xe0\x05\xb2\xf9\x89\x9d\x8e\xa7\x14\xfe\xd3\xe2\xa3\xea8/1\xaaU\xa9\xbd\x8b\x1bw\xa8U\x0e\x1a\xfav\xb4\xeff\x049$\xe0IM[\xc9\xdaB>\xc5\xf5\x0f\x9f\x85u\x0f\xb9\xfbM\xf1\xd6C\x02\xfd\xf7\xd0\xc7\xccQ\x8c\x1f\x7f\xa9N\xd9h\xa6\xd2.\tf\xd0,\x00'/305, 0x4) fallocate(r0, 0x0, 0x800657, 0x40000b7) 1.183551413s ago: executing program 1 (id=241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004540)=@raw={'raw\x00', 0x8000038, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'ip6_vti0\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x3}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"c04c"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x1000, 0x1000, 0x9, 'snmp_trap\x00', 'syz0\x00', {0x7fffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 1.11663974s ago: executing program 2 (id=242): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) 1.019905518s ago: executing program 3 (id=243): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x7d5}, 0x20) 992.423032ms ago: executing program 0 (id=244): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) 905.246095ms ago: executing program 1 (id=245): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000380)={[{@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x104) umount2(&(0x7f0000000040)='.\x00', 0x2) 848.38603ms ago: executing program 3 (id=246): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9, &(0x7f0000000080)=0x47e, &(0x7f00000000c0)=0x1) 806.31112ms ago: executing program 4 (id=247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x4, 0x32, 0x5, 0xa, 0x0, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0xb, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0xc010) sendto$packet(r4, &(0x7f0000000140)="bad330753571e86229ae243c5287", 0xe, 0x22008001, &(0x7f0000000080)={0x11, 0x88a8, r7, 0x1, 0xda, 0x6, @multicast}, 0x14) 797.158691ms ago: executing program 0 (id=248): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5658e619a6bfc3d9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fsmount(r2, 0x0, 0x8c) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) 447.948297ms ago: executing program 3 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2503000000140009000000000000000000000000000000000008000b00", @ANYRES32=0x0, @ANYBLOB="050002"], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 301.523265ms ago: executing program 1 (id=250): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 284.022804ms ago: executing program 0 (id=251): msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 236.628246ms ago: executing program 3 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001a00010024bd70000000000002201400fc0200070002000008000300", @ANYRES32=r2], 0x34}}, 0xea5bc50b6199d7fe) 223.912088ms ago: executing program 4 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 47.53791ms ago: executing program 0 (id=254): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x4a25d, 0x49a41}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 47.031672ms ago: executing program 3 (id=255): r0 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x42080, 0x90}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) unshare(0x28000600) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0xbb) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x20, 0x0, 0x2, 0x0, @private=0xa010100, @multicast1}, {0x16, 0x0, 0x0, @private=0xa010102}}}}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) fchdir(r1) r3 = syz_io_uring_setup(0x4172, 0x0, &(0x7f0000001040), &(0x7f0000001080)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, 0x0) fchownat(r1, 0x0, r4, 0xee00, 0x800) vmsplice(r0, &(0x7f00000000c0), 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0xb8) 0s ago: executing program 4 (id=256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000001cc0)={@link_local, @local, @void, {@generic={0x8863}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 80.301420][ T5830] cgroup: Unknown subsys name 'net' [ 80.396835][ T5830] cgroup: Unknown subsys name 'cpuset' [ 80.406073][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.041978][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.401680][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.411257][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.428301][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.444175][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.444822][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.453002][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.466973][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.470056][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.478404][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.482710][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.489628][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.497003][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.504692][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.510560][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.519284][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.525835][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.539418][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.547649][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.555961][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.556955][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.563460][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.581181][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.583359][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.596044][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.598905][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.396909][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 85.416801][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 85.445688][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 85.637616][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 85.672041][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 85.843226][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.851582][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.859123][ T5849] bridge_slave_0: entered allmulticast mode [ 85.867119][ T5849] bridge_slave_0: entered promiscuous mode [ 85.889644][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.897145][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.904666][ T5843] bridge_slave_0: entered allmulticast mode [ 85.912481][ T5843] bridge_slave_0: entered promiscuous mode [ 85.920963][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.928688][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.936374][ T5842] bridge_slave_0: entered allmulticast mode [ 85.944817][ T5842] bridge_slave_0: entered promiscuous mode [ 85.954629][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.962093][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.969660][ T5842] bridge_slave_1: entered allmulticast mode [ 85.978937][ T5842] bridge_slave_1: entered promiscuous mode [ 85.987644][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.995555][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.002815][ T5849] bridge_slave_1: entered allmulticast mode [ 86.010906][ T5849] bridge_slave_1: entered promiscuous mode [ 86.031330][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.038710][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.046407][ T5843] bridge_slave_1: entered allmulticast mode [ 86.054125][ T5843] bridge_slave_1: entered promiscuous mode [ 86.199785][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.214552][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.228405][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.264312][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.277333][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.293318][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.304329][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.311891][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.320817][ T5851] bridge_slave_0: entered allmulticast mode [ 86.328649][ T5851] bridge_slave_0: entered promiscuous mode [ 86.337005][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.345150][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.352439][ T5844] bridge_slave_0: entered allmulticast mode [ 86.360237][ T5844] bridge_slave_0: entered promiscuous mode [ 86.406430][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.414646][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.421913][ T5851] bridge_slave_1: entered allmulticast mode [ 86.429711][ T5851] bridge_slave_1: entered promiscuous mode [ 86.437263][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.444704][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.451914][ T5844] bridge_slave_1: entered allmulticast mode [ 86.459832][ T5844] bridge_slave_1: entered promiscuous mode [ 86.532650][ T5843] team0: Port device team_slave_0 added [ 86.541417][ T5842] team0: Port device team_slave_0 added [ 86.550294][ T5849] team0: Port device team_slave_0 added [ 86.564116][ T5858] Bluetooth: hci0: command tx timeout [ 86.585156][ T5843] team0: Port device team_slave_1 added [ 86.594038][ T5842] team0: Port device team_slave_1 added [ 86.603666][ T5849] team0: Port device team_slave_1 added [ 86.614051][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.628119][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.637412][ T5858] Bluetooth: hci1: command tx timeout [ 86.637945][ T5858] Bluetooth: hci2: command tx timeout [ 86.657417][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.705994][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.716360][ T51] Bluetooth: hci4: command tx timeout [ 86.723231][ T51] Bluetooth: hci3: command tx timeout [ 86.801299][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.808535][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.834620][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.848080][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.855240][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.881688][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.895310][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.902268][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.928541][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.955753][ T5844] team0: Port device team_slave_0 added [ 86.964941][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.972118][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.999334][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.013586][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.020590][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.047256][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.063076][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.070176][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.096768][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.111066][ T5851] team0: Port device team_slave_0 added [ 87.122495][ T5851] team0: Port device team_slave_1 added [ 87.134221][ T5844] team0: Port device team_slave_1 added [ 87.306018][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.313326][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.339480][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.372951][ T5843] hsr_slave_0: entered promiscuous mode [ 87.380244][ T5843] hsr_slave_1: entered promiscuous mode [ 87.402630][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.409671][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.436152][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.448774][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.456170][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.484590][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.542487][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.550012][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.576453][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.606106][ T5849] hsr_slave_0: entered promiscuous mode [ 87.613644][ T5849] hsr_slave_1: entered promiscuous mode [ 87.620422][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 87.626368][ T5849] Cannot create hsr debugfs directory [ 87.638206][ T5842] hsr_slave_0: entered promiscuous mode [ 87.645561][ T5842] hsr_slave_1: entered promiscuous mode [ 87.652129][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 87.657950][ T5842] Cannot create hsr debugfs directory [ 87.882588][ T5851] hsr_slave_0: entered promiscuous mode [ 87.889934][ T5851] hsr_slave_1: entered promiscuous mode [ 87.896864][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 87.902644][ T5851] Cannot create hsr debugfs directory [ 87.915530][ T5844] hsr_slave_0: entered promiscuous mode [ 87.922721][ T5844] hsr_slave_1: entered promiscuous mode [ 87.929697][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 87.935618][ T5844] Cannot create hsr debugfs directory [ 88.569354][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.584992][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.597642][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.621580][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.643233][ T51] Bluetooth: hci0: command tx timeout [ 88.706323][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.713545][ T51] Bluetooth: hci2: command tx timeout [ 88.713584][ T51] Bluetooth: hci1: command tx timeout [ 88.734996][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.755414][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.767626][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.794532][ T51] Bluetooth: hci4: command tx timeout [ 88.797413][ T5858] Bluetooth: hci3: command tx timeout [ 88.902791][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.917917][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.931232][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.942325][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.084297][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.109224][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.121793][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.144159][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.280883][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.297393][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.309189][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.335519][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.362439][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.404921][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.426999][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.489827][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.497704][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.530953][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.538126][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.561975][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.574759][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.622390][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.629635][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.657053][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.664289][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.707207][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.778958][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.786131][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.795233][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.802438][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.877622][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.955162][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.029145][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.108415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.115781][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.168648][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.175957][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.277812][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.318995][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.326377][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.357570][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.364938][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.498993][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.577517][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.713306][ T5858] Bluetooth: hci0: command tx timeout [ 90.736138][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.803058][ T5858] Bluetooth: hci1: command tx timeout [ 90.803331][ T51] Bluetooth: hci2: command tx timeout [ 90.873179][ T51] Bluetooth: hci4: command tx timeout [ 90.873526][ T5858] Bluetooth: hci3: command tx timeout [ 90.889035][ T5843] veth0_vlan: entered promiscuous mode [ 91.019815][ T5843] veth1_vlan: entered promiscuous mode [ 91.055253][ T5842] veth0_vlan: entered promiscuous mode [ 91.102650][ T5849] veth0_vlan: entered promiscuous mode [ 91.116658][ T5842] veth1_vlan: entered promiscuous mode [ 91.137693][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.191267][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.217448][ T5849] veth1_vlan: entered promiscuous mode [ 91.251442][ T5843] veth0_macvtap: entered promiscuous mode [ 91.268524][ T5843] veth1_macvtap: entered promiscuous mode [ 91.376349][ T5842] veth0_macvtap: entered promiscuous mode [ 91.401639][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.437049][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.456597][ T5842] veth1_macvtap: entered promiscuous mode [ 91.475322][ T5849] veth0_macvtap: entered promiscuous mode [ 91.524647][ T5849] veth1_macvtap: entered promiscuous mode [ 91.539292][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.547561][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.557107][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.584877][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.595396][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.620476][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.670613][ T5844] veth0_vlan: entered promiscuous mode [ 91.679915][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.690199][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.724343][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.734026][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.798805][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.821295][ T5844] veth1_vlan: entered promiscuous mode [ 91.856341][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.894802][ T5851] veth0_vlan: entered promiscuous mode [ 91.905988][ T1169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.915389][ T1169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.926495][ T1169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.949766][ T1169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.974747][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.985961][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.027230][ T5851] veth1_vlan: entered promiscuous mode [ 92.086858][ T1224] cfg80211: failed to load regulatory.db [ 92.115083][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.123719][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.136629][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.150492][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.250143][ T5844] veth0_macvtap: entered promiscuous mode [ 92.275187][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.298860][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.308704][ T5844] veth1_macvtap: entered promiscuous mode [ 92.317737][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.376003][ T5851] veth0_macvtap: entered promiscuous mode [ 92.435107][ T5851] veth1_macvtap: entered promiscuous mode [ 92.461885][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.482954][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.549109][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.693500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.720540][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.729701][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.769333][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.794147][ T5858] Bluetooth: hci0: command tx timeout [ 92.837409][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.873316][ T5858] Bluetooth: hci2: command tx timeout [ 92.875176][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.884504][ T5858] Bluetooth: hci1: command tx timeout [ 92.908042][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.953493][ T5858] Bluetooth: hci4: command tx timeout [ 92.953840][ T51] Bluetooth: hci3: command tx timeout [ 92.975517][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.982038][ T5973] FAT-fs (loop5): unable to read boot sector [ 93.017547][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.090817][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.103778][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.151221][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.174336][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228487][ T5978] loop2: detected capacity change from 0 to 512 [ 93.499529][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.522214][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.672209][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.705651][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.757345][ T5986] mmap: syz.2.14 (5986) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.850974][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.877132][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.877849][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.914434][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.002403][ T5990] netlink: 'syz.2.15': attribute type 3 has an invalid length. [ 94.310589][ T5994] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.751907][ T6001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.570508][ T6043] loop5: detected capacity change from 0 to 7 [ 96.650554][ T6043] Dev loop5: unable to read RDB block 7 [ 96.688522][ T6043] loop5: AHDI p1 p2 p3 [ 96.709000][ T6043] loop5: partition table partially beyond EOD, truncated [ 96.751369][ T6043] loop5: p1 start 1818582900 is beyond EOD, truncated [ 96.783079][ T6043] loop5: p3 start 335544320 is beyond EOD, truncated [ 98.489660][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 99.074742][ T6107] syzkaller0: entered promiscuous mode [ 99.170147][ T6107] syzkaller0: entered allmulticast mode [ 99.524691][ T6112] fuse: fd is not a fuse device [ 100.076368][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 101.881800][ T6157] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 101.937443][ T6161] syz.4.76 uses obsolete (PF_INET,SOCK_PACKET) [ 103.725746][ T6217] syzkaller0: entered promiscuous mode [ 103.744164][ T6217] syzkaller0: entered allmulticast mode [ 104.440195][ T6241] loop1: detected capacity change from 0 to 128 [ 104.450260][ T6241] ======================================================= [ 104.450260][ T6241] WARNING: The mand mount option has been deprecated and [ 104.450260][ T6241] and is ignored by this kernel. Remove the mand [ 104.450260][ T6241] option from the mount to silence this warning. [ 104.450260][ T6241] ======================================================= [ 104.520691][ T6241] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 104.736271][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.114'. [ 104.818426][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.116'. [ 104.946546][ T6253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.570278][ T6275] loop1: detected capacity change from 0 to 128 [ 105.627489][ T6275] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 107.060753][ T6306] syzkaller0: entered promiscuous mode [ 107.076704][ T6306] syzkaller0: entered allmulticast mode [ 107.560344][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.570302][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.957655][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.004198][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.457250][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.486128][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.518496][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.882441][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.140426][ T6400] Zero length message leads to an empty skb [ 111.475363][ T6408] loop1: detected capacity change from 0 to 128 [ 111.515865][ T6408] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 113.401943][ T30] audit: type=1326 audit(1773900861.615:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5dcf9c799 code=0x0 [ 114.586061][ T6519] overlayfs: failed to clone upperpath [ 115.338362][ T6543] ip6gre1: entered promiscuous mode [ 115.359928][ T6543] ip6gre1: entered allmulticast mode [ 117.056445][ T6596] sctp: [Deprecated]: syz.0.248 (pid 6596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.056445][ T6596] Use struct sctp_sack_info instead [ 117.482402][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.252'. [ 117.541812][ T6619] node ffff8880562f02c0 offset 0 parent ffff8880562f0000 shift 0 count 1 values 0 array ffff888029e02e40 list ffff8880562f02d8 ffff8880562f02d8 marks 0 0 0 [ 117.633677][ T6619] ------------[ cut here ]------------ [ 117.639202][ T6619] kernel BUG at ./include/linux/xarray.h:1441! [ 117.702741][ T6619] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 117.709073][ T6619] CPU: 0 UID: 0 PID: 6619 Comm: syz.1.250 Not tainted syzkaller #0 PREEMPT(full) [ 117.718309][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.728489][ T6619] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 117.734614][ T6619] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 117.754270][ T6619] RSP: 0018:ffffc9011b76ee20 EFLAGS: 00010246 [ 117.760453][ T6619] RAX: 0000000000000000 RBX: ffff8880562f02c0 RCX: 5c5e7ce7a3dee000 [ 117.768443][ T6619] RDX: ffffc90004842000 RSI: 0000000000004d6c RDI: 0000000000004d6d [ 117.776419][ T6619] RBP: ffffc9011b76f130 R08: ffffc9011b76eba7 R09: 1ffff920236edd74 [ 117.784400][ T6619] R10: dffffc0000000000 R11: fffff520236edd75 R12: ffffea00025c50f0 [ 117.792380][ T6619] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9011b76f010 [ 117.800396][ T6619] FS: 00007fa5ddf3a6c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 117.809416][ T6619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.816007][ T6619] CR2: 00007fa5dcfe9e80 CR3: 0000000079b0a000 CR4: 00000000003526f0 [ 117.823986][ T6619] Call Trace: [ 117.827306][ T6619] [ 117.830265][ T6619] ? collapse_scan_file+0x1c1/0x5230 [ 117.835577][ T6619] ? __pfx___schedule+0x10/0x10 [ 117.840445][ T6619] ? __pfx_collapse_scan_file+0x10/0x10 [ 117.846010][ T6619] ? __lock_acquire+0x6b5/0x2cf0 [ 117.851048][ T6619] ? schedule+0x16e/0x360 [ 117.855386][ T6619] ? __up_read+0x291/0x6b0 [ 117.859808][ T6619] ? __pfx___up_read+0x10/0x10 [ 117.864575][ T6619] collapse_single_pmd+0x22b/0x4510 [ 117.869782][ T6619] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.874984][ T6619] ? debug_object_free+0x2d7/0x490 [ 117.880191][ T6619] ? __flush_work+0xa26/0xc50 [ 117.884872][ T6619] ? __pfx_collapse_single_pmd+0x10/0x10 [ 117.890712][ T6619] ? __flush_work+0x100/0xc50 [ 117.895434][ T6619] ? madvise_collapse+0x18c/0x820 [ 117.900476][ T6619] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 117.906135][ T6619] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.912153][ T6619] madvise_collapse+0x34c/0x820 [ 117.917015][ T6619] madvise_vma_behavior+0x1094/0x4460 [ 117.922943][ T6619] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 117.928701][ T6619] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 117.934265][ T6619] ? __lock_acquire+0x6b5/0x2cf0 [ 117.939213][ T6619] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.944331][ T6619] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.949453][ T6619] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.954912][ T6619] ? debug_object_assert_init+0x209/0x370 [ 117.960932][ T6619] ? rcu_is_watching+0x15/0xb0 [ 117.965765][ T6619] ? trace_hrtimer_start+0x82/0x230 [ 117.971005][ T6619] ? finish_task_switch+0x41f/0xbe0 [ 117.976315][ T6619] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.981633][ T6619] ? mas_prev_slot+0xb7b/0xbf0 [ 117.986427][ T6619] ? find_vma_prev+0x123/0x1b0 [ 117.991219][ T6619] ? __pfx_find_vma_prev+0x10/0x10 [ 117.996371][ T6619] ? __pfx___resched_curr+0x10/0x10 [ 118.001591][ T6619] madvise_walk_vmas+0x573/0xae0 [ 118.006552][ T6619] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 118.012074][ T6619] ? blk_start_plug+0x6e/0x1b0 [ 118.016878][ T6619] madvise_do_behavior+0x386/0x540 [ 118.022031][ T6619] ? __pfx_madvise_do_behavior+0x10/0x10 [ 118.027683][ T6619] ? down_read+0x270/0x2e0 [ 118.032109][ T6619] ? madvise_lock+0x146/0x2e0 [ 118.036797][ T6619] do_madvise+0x1fa/0x2e0 [ 118.041132][ T6619] ? __pfx_do_madvise+0x10/0x10 [ 118.046174][ T6619] ? __se_sys_futex+0x3a8/0x450 [ 118.051136][ T6619] ? rcu_is_watching+0x15/0xb0 [ 118.055929][ T6619] __x64_sys_madvise+0xa6/0xc0 [ 118.060809][ T6619] do_syscall_64+0x14d/0xf80 [ 118.065667][ T6619] ? trace_irq_disable+0x3b/0x150 [ 118.070715][ T6619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.076784][ T6619] ? clear_bhb_loop+0x40/0x90 [ 118.081470][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.087362][ T6619] RIP: 0033:0x7fa5dcf9c799 [ 118.091956][ T6619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.111653][ T6619] RSP: 002b:00007fa5ddf3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 118.120259][ T6619] RAX: ffffffffffffffda RBX: 00007fa5dd215fa0 RCX: 00007fa5dcf9c799 [ 118.128322][ T6619] RDX: 0000000000000019 RSI: 0000000000600000 RDI: 0000200000000000 [ 118.136383][ T6619] RBP: 00007fa5dd032c99 R08: 0000000000000000 R09: 0000000000000000 [ 118.144357][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.152511][ T6619] R13: 00007fa5dd216038 R14: 00007fa5dd215fa0 R15: 00007ffdc6f0a878 [ 118.160502][ T6619] [ 118.163544][ T6619] Modules linked in: [ 118.168795][ T6619] ---[ end trace 0000000000000000 ]--- [ 118.229391][ T6619] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 118.269989][ T6619] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 118.403695][ T6619] RSP: 0018:ffffc9011b76ee20 EFLAGS: 00010246 [ 118.409929][ T6619] RAX: 0000000000000000 RBX: ffff8880562f02c0 RCX: 5c5e7ce7a3dee000 [ 118.421198][ T6619] RDX: ffffc90004842000 RSI: 0000000000004d6c RDI: 0000000000004d6d [ 118.429599][ T6619] RBP: ffffc9011b76f130 R08: ffffc9011b76eba7 R09: 1ffff920236edd74 [ 118.444171][ T6619] R10: dffffc0000000000 R11: fffff520236edd75 R12: ffffea00025c50f0 [ 118.452282][ T6619] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9011b76f010 [ 118.461290][ T6619] FS: 00007fa5ddf3a6c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 118.470571][ T6619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.478211][ T6619] CR2: 00007f7c8ffe92f8 CR3: 0000000079b0a000 CR4: 00000000003526f0 [ 118.486613][ T6619] Kernel panic - not syncing: Fatal exception [ 118.493692][ T6619] Kernel Offset: disabled [ 118.498150][ T6619] Rebooting in 86400 seconds..