last executing test programs: 4.825066339s ago: executing program 1 (id=18): clock_gettime(0xfffffffffffffffb, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2059) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000340)=""/32, 0x20}], 0x10000000000000dc) 4.758176248s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x8, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000680)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0xc3) r1 = fanotify_init(0x200, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x40) 4.672715258s ago: executing program 3 (id=4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000e40)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000e80)={0xffffff00, 0xfffffff5, 0x2, 0x3000000, 0xb, "5a22c9cd6a45cc1c50dfdc689aada25780bdf5"}) writev(r1, &(0x7f00000023c0)=[{&(0x7f0000001040)="e220cdb04c7d1ef61d398dcad313f648b9f3dbe80a89", 0x16}, {&(0x7f0000001140)="1b37d3c88bc00f6dbb38f22e1714fcadbe6a74de74b940064164a99e0e19a1a4652b0ead13d8ad959c814261027911f9f3beeb6e2073a158f66da581827f86330dbd", 0x42}], 0x2) 4.622178523s ago: executing program 4 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.195675287s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000180)='./file1\x00', 0x88) io_setup(0x200, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002b40)=[&(0x7f0000000240)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0}]) 3.915379812s ago: executing program 3 (id=21): openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000001c0)=0x80000003, 0x4) listen(r0, 0x100004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000200)=0x80000005, 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{&(0x7f0000000280)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x34}}, 0x80, 0x0}}], 0x1, 0x24008010) 3.817175094s ago: executing program 4 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f801500014000000200080008"], 0x4c}}, 0x0) 3.742045643s ago: executing program 3 (id=23): r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000019600)={0xf0002004}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000019640)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r5, &(0x7f0000019680)="2e000000010002", 0x7) sendmmsg$inet6(r0, &(0x7f00000196c0), 0x0, 0x68145) r6 = fsopen(&(0x7f0000019740)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000019780)={@cgroup=r7, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000197c0)={0x19, 0x3, &(0x7f0000019880)=ANY=[@ANYBLOB="180000000100000000000000"], &(0x7f00000198c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x0, 0x8, 0x20) 1.979807579s ago: executing program 4 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000300)=[@wrmsr={0x65, 0x20, {0x40000098, 0x3}}], 0xfffffffffffffe33}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0xd, 0xf, 0x0, 0x7fffffff, 0x8000, 0x5, 0x5}, {0x7, 0xf13, 0x1, 0x4, 0x3, 0x1, 0xffffffff}]}) 1.79772055s ago: executing program 0 (id=25): mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000280)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000500)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a40)={[0x690, 0x7d, 0x80006, 0x4000000010000e51, 0x102, 0x547a, 0x103c, 0x200000000006, 0xfffffffffffffffd, 0x3aa, 0xfffffffffffff9de, 0x8000000000000, 0x5, 0x40000000009, 0x378, 0xfffffffffffff802], 0x6000, 0x194110}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.780361591s ago: executing program 1 (id=26): set_mempolicy(0x3, &(0x7f0000000000)=0x1ff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)="4a5669ec3282cd3fe82af9573cbff67106", 0x2, r0}, 0x38) 1.779486269s ago: executing program 3 (id=27): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000440), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.224373579s ago: executing program 1 (id=28): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000080), 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 1.224152894s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ubifs/chk_general\x00', 0x402, 0x1d3) write(r0, 0x0, 0x30) 1.205969253s ago: executing program 4 (id=30): r0 = syz_open_dev$sndctrl(&(0x7f000001b540), 0x1, 0x48400) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f000001b580), 0x82002, 0x0) write$dsp(r1, &(0x7f000001b5c0)='F', 0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f000001b700)=0x9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f000001b740)=0x8) 980.159088ms ago: executing program 2 (id=31): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000280), 0x4000000000001f2, 0x0) 856.339963ms ago: executing program 1 (id=32): r0 = epoll_create1(0x80000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000500)={0x4, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000540)={0x60002013}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000580)={0x80000000}) 840.600738ms ago: executing program 0 (id=33): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000680)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000700)="050314fdd3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000740)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 786.37919ms ago: executing program 2 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0xb, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 223.779564ms ago: executing program 1 (id=35): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/sys/kernel/printk\x00', 0x1, 0x0) write(r2, &(0x7f0000000ac0)='0 0', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000bc0)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r4, &(0x7f0000000cc0)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r4) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, 0x0, 0x0) bind$rxrpc(r1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={0x0, 0x40c}}, 0x0) 190.322305ms ago: executing program 2 (id=36): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280100000000000001"], 0x128}, 0x4004000) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 113.92384ms ago: executing program 2 (id=37): gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000440)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='counter', 0x7) 68.176414ms ago: executing program 4 (id=38): set_mempolicy(0x3, &(0x7f0000000000)=0x1ff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)="4a5669ec3282cd3fe82af9573cbff67106", 0x2, r0}, 0x38) 43.702876ms ago: executing program 2 (id=39): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=40): mkdir(&(0x7f00000000c0)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./mytrace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000500)="81ad487a93bcc742d44390224c6d1160de27d96125406583e86e6818747d732d9cbe5e699a7ad8700b011c496556f40ccbf56dd73b167e1034737d6a04d06bac72a496b3237b48bca3d58be09906b28c10fac50641282ec5288d782ecda8eda9552587770431a0a128120f5e", 0x6c}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 76.764937][ T5601] cgroup: Unknown subsys name 'net' [ 76.988750][ T5601] cgroup: Unknown subsys name 'cpuset' [ 77.051642][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.620383][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.085490][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.101181][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.107130][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.114033][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.114700][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.116955][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.117702][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.120646][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.125100][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.127402][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.280314][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.291853][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.297546][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.305691][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.309257][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.310229][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.317530][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.318835][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.352627][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.354457][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.394890][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.397839][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.398470][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.402930][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.403898][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.638046][ T5617] rdma_rxe: Failed to create IPv4 UDP tunnel [ 82.638956][ T5622] rdma_rxe: Failed to create IPv4 UDP tunnel [ 82.673173][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.691196][ T5621] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.696020][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.711679][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.724955][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.136035][ T5624] infiniband rxe0: set active [ 83.136058][ T5624] infiniband rxe0: added rxe_eth0 [ 83.182026][ T5620] Bluetooth: hci0: command tx timeout [ 83.222740][ T5624] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 83.222777][ T5624] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 83.222813][ T5624] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 83.223440][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.260929][ T5620] Bluetooth: hci1: command tx timeout [ 83.335060][ T5624] RDS/IB: rxe0: added [ 83.335785][ T5624] smc: adding ib device rxe0 with port count 1 [ 83.335942][ T5624] smc: ib device rxe0 port 1 has no pnetid [ 83.381483][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.423006][ T5620] Bluetooth: hci2: command tx timeout [ 83.423006][ T5615] Bluetooth: hci3: command tx timeout [ 83.429022][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.501230][ T5615] Bluetooth: hci4: command tx timeout [ 83.714879][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.820074][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.008336][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.562602][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.875856][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.944181][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.944321][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.944494][ T5613] bridge_slave_0: entered allmulticast mode [ 84.948694][ T5613] bridge_slave_0: entered promiscuous mode [ 85.043791][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.043903][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.044054][ T5613] bridge_slave_1: entered allmulticast mode [ 85.047110][ T5613] bridge_slave_1: entered promiscuous mode [ 85.105952][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.106075][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.106633][ T5622] bridge_slave_0: entered allmulticast mode [ 85.110208][ T5622] bridge_slave_0: entered promiscuous mode [ 85.166978][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.167102][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.167245][ T5617] bridge_slave_0: entered allmulticast mode [ 85.170192][ T5617] bridge_slave_0: entered promiscuous mode [ 85.176446][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.176559][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.176700][ T5621] bridge_slave_0: entered allmulticast mode [ 85.180317][ T5621] bridge_slave_0: entered promiscuous mode [ 85.190925][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.191057][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.191224][ T5622] bridge_slave_1: entered allmulticast mode [ 85.246580][ T5622] bridge_slave_1: entered promiscuous mode [ 85.262763][ T5615] Bluetooth: hci0: command tx timeout [ 85.267707][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.267818][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.267965][ T5617] bridge_slave_1: entered allmulticast mode [ 85.270026][ T5617] bridge_slave_1: entered promiscuous mode [ 85.281458][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.281640][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.282118][ T5621] bridge_slave_1: entered allmulticast mode [ 85.286087][ T5621] bridge_slave_1: entered promiscuous mode [ 85.335444][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.340839][ T5615] Bluetooth: hci1: command tx timeout [ 85.380198][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.418056][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.442820][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.447396][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.447551][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.453250][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.501782][ T5615] Bluetooth: hci3: command tx timeout [ 85.501812][ T5620] Bluetooth: hci2: command tx timeout [ 85.503614][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.506735][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.558548][ T5613] team0: Port device team_slave_0 added [ 85.580969][ T5620] Bluetooth: hci4: command tx timeout [ 85.637390][ T5613] team0: Port device team_slave_1 added [ 85.710248][ T5622] team0: Port device team_slave_0 added [ 85.742023][ T5617] team0: Port device team_slave_0 added [ 85.745788][ T5621] team0: Port device team_slave_0 added [ 85.750009][ T5622] team0: Port device team_slave_1 added [ 85.780603][ T5617] team0: Port device team_slave_1 added [ 85.786486][ T5621] team0: Port device team_slave_1 added [ 85.814227][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.814245][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.814291][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.900169][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.900186][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.900211][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.949034][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.949051][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.949073][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.963747][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.963764][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.963788][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.967861][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.967876][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.967900][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.980236][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.980252][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.980284][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.990574][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.990591][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.990615][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.992754][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.992767][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.992792][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.149249][ T5613] hsr_slave_0: entered promiscuous mode [ 86.152766][ T5613] hsr_slave_1: entered promiscuous mode [ 86.248135][ T5622] hsr_slave_0: entered promiscuous mode [ 86.248903][ T5622] hsr_slave_1: entered promiscuous mode [ 86.249548][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 86.249572][ T5622] Cannot create hsr debugfs directory [ 86.716398][ T5621] hsr_slave_0: entered promiscuous mode [ 86.717116][ T5621] hsr_slave_1: entered promiscuous mode [ 86.717625][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 86.717642][ T5621] Cannot create hsr debugfs directory [ 86.724837][ T5617] hsr_slave_0: entered promiscuous mode [ 86.726084][ T5617] hsr_slave_1: entered promiscuous mode [ 86.726977][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 86.726993][ T5617] Cannot create hsr debugfs directory [ 86.893906][ T1002] cfg80211: failed to load regulatory.db [ 87.340943][ T5620] Bluetooth: hci0: command tx timeout [ 87.421059][ T5620] Bluetooth: hci1: command tx timeout [ 87.553240][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.580994][ T5620] Bluetooth: hci3: command tx timeout [ 87.581002][ T5615] Bluetooth: hci2: command tx timeout [ 87.589909][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.590635][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.593402][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.593592][ T5624] bridge_slave_0: entered allmulticast mode [ 87.595808][ T5624] bridge_slave_0: entered promiscuous mode [ 87.642340][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.661050][ T5620] Bluetooth: hci4: command tx timeout [ 87.665865][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.666337][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.666445][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.666601][ T5624] bridge_slave_1: entered allmulticast mode [ 87.668050][ T5624] bridge_slave_1: entered promiscuous mode [ 87.672700][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.707313][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.743768][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.775894][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.804105][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.825548][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.893730][ T5624] team0: Port device team_slave_0 added [ 87.908816][ T5624] team0: Port device team_slave_1 added [ 87.968762][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.999170][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.002292][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.002308][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.002332][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.017717][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.075535][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.077231][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.077245][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.077269][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.078675][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.125720][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.164457][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.205963][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.278736][ T5624] hsr_slave_0: entered promiscuous mode [ 88.279532][ T5624] hsr_slave_1: entered promiscuous mode [ 88.280034][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 88.280051][ T5624] Cannot create hsr debugfs directory [ 88.394251][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.433868][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.662883][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.683708][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.705889][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.743949][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.772717][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.805620][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.014111][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.050420][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.071442][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.108903][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.117618][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.155602][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.179265][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.215260][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.308985][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.354923][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.383814][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.397652][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.415029][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.418771][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.431621][ T5620] Bluetooth: hci0: command tx timeout [ 89.454685][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.464308][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.493760][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.501784][ T5620] Bluetooth: hci1: command tx timeout [ 89.548854][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.607129][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.607342][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.644357][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.653128][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.656587][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.661155][ T5620] Bluetooth: hci2: command tx timeout [ 89.661184][ T5620] Bluetooth: hci3: command tx timeout [ 89.740822][ T5615] Bluetooth: hci4: command tx timeout [ 89.771310][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.825648][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.830578][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.831605][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.876420][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.876522][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.959408][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.988092][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.009895][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.010119][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.104903][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.105054][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.200542][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.238202][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.242824][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.243000][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.294576][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.294753][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.419574][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.517640][ T1256] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.520472][ T1256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.587863][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.588081][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.106879][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.598503][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.607228][ T5613] veth0_vlan: entered promiscuous mode [ 91.796105][ T5613] veth1_vlan: entered promiscuous mode [ 91.919909][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.056135][ T5613] veth0_macvtap: entered promiscuous mode [ 92.116152][ T5613] veth1_macvtap: entered promiscuous mode [ 92.259518][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.305062][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.320678][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.324359][ T5621] veth0_vlan: entered promiscuous mode [ 92.336566][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.405944][ T5621] veth1_vlan: entered promiscuous mode [ 92.799798][ T5624] veth0_vlan: entered promiscuous mode [ 92.808429][ T5621] veth0_macvtap: entered promiscuous mode [ 92.834342][ T5622] veth0_vlan: entered promiscuous mode [ 92.870069][ T5617] veth0_vlan: entered promiscuous mode [ 92.884703][ T5621] veth1_macvtap: entered promiscuous mode [ 92.896224][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.896249][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.950521][ T5624] veth1_vlan: entered promiscuous mode [ 92.955437][ T5622] veth1_vlan: entered promiscuous mode [ 92.973451][ T5617] veth1_vlan: entered promiscuous mode [ 93.028313][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.038658][ T1256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.038673][ T1256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.069025][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.211414][ T5624] veth0_macvtap: entered promiscuous mode [ 93.233986][ T5622] veth0_macvtap: entered promiscuous mode [ 93.273926][ T5617] veth0_macvtap: entered promiscuous mode [ 93.277261][ T5624] veth1_macvtap: entered promiscuous mode [ 93.321706][ T5617] veth1_macvtap: entered promiscuous mode [ 93.327706][ T5622] veth1_macvtap: entered promiscuous mode [ 93.546945][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.665430][ T5751] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.683170][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.783733][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.788145][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.818971][ T36] audit: type=1800 audit(1793602084.654:2): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2" name=08 dev="sda1" ino=2043 res=0 errno=-22 [ 93.869173][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.889183][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.889204][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.902015][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.945008][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.196843][ T1249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.196866][ T1249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.650075][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.650097][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.850217][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.850240][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.004410][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.004434][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.105920][ T1137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.137029][ T1249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.137049][ T1249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.196053][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.196073][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.211591][ T5868] FAULT_INJECTION: forcing a failure. [ 97.211591][ T5868] name fail_futex, interval 1, probability 0, space 0, times 1 [ 97.211644][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 97.211668][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.211688][ T5868] Call Trace: [ 97.211695][ T5868] [ 97.211704][ T5868] dump_stack_lvl+0xe8/0x150 [ 97.211742][ T5868] should_fail_ex+0x447/0x5e0 [ 97.211773][ T5868] get_futex_key+0x1ab/0x1410 [ 97.211809][ T5868] ? __pfx_get_futex_key+0x10/0x10 [ 97.211831][ T5868] ? rcu_is_watching+0x16/0xb0 [ 97.211855][ T5868] ? __update_load_avg_cfs_rq+0x6ae/0xad0 [ 97.211885][ T5868] futex_wait_setup+0x4a/0x590 [ 97.211921][ T5868] ? __futex_wait+0xdd/0x480 [ 97.211954][ T5868] __futex_wait+0x177/0x480 [ 97.211991][ T5868] ? __pfx___futex_wait+0x10/0x10 [ 97.212025][ T5868] ? __pfx_futex_wake_mark+0x10/0x10 [ 97.212059][ T5868] ? try_to_wake_up+0x854/0x1430 [ 97.212096][ T5868] futex_wait+0x121/0x390 [ 97.212136][ T5868] ? __pfx_futex_wait+0x10/0x10 [ 97.212174][ T5868] ? __local_bh_enable+0x1e3/0x2f0 [ 97.212210][ T5868] do_futex+0x3e7/0x4e0 [ 97.212241][ T5868] ? __pfx_do_futex+0x10/0x10 [ 97.212267][ T5868] ? __sys_bind+0x371/0x410 [ 97.212302][ T5868] __se_sys_futex+0x3a8/0x450 [ 97.212334][ T5868] ? __pfx___se_sys_futex+0x10/0x10 [ 97.212359][ T5868] ? rcu_is_watching+0x16/0xb0 [ 97.212387][ T5868] ? __x64_sys_futex+0x21/0xf0 [ 97.212415][ T5868] do_syscall_64+0x166/0x520 [ 97.212436][ T5868] ? trace_irq_disable+0x3b/0x140 [ 97.212457][ T5868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.212477][ T5868] ? clear_bhb_loop+0x70/0xc0 [ 97.212500][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.212520][ T5868] RIP: 0033:0x7f3a3c2ef559 [ 97.212548][ T5868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.212565][ T5868] RSP: 002b:00007f3a3a53e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.212586][ T5868] RAX: ffffffffffffffda RBX: 00007f3a3c575fa8 RCX: 00007f3a3c2ef559 [ 97.212601][ T5868] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3a3c575fa8 [ 97.212614][ T5868] RBP: 00007f3a3c575fa0 R08: 0000000000000000 R09: 0000000000000000 [ 97.212626][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.212638][ T5868] R13: 00007f3a3c576038 R14: 00007fff3956b550 R15: 00007fff3956b638 [ 97.212669][ T5868] [ 97.498742][ T1249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.498765][ T1249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.557966][ T1039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.580986][ T1249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.581178][ T1249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.650874][ T1249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.652609][ T1249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.068562][ T5877] Bluetooth: MGMT ver 1.23 [ 99.508128][ T3375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.735574][ T3375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.263797][ T1039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.466796][ T5890] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.513201][ T3375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.703554][ T3378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.704300][ T3378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.704473][ T3378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.704638][ T3378] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.704795][ T3378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.772681][ T3378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.773504][ T1256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.814410][ T1256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.819829][ T1249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.963470][ T1249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.610770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.630773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.640784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.650776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.660776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.670770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.680766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.690772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.700791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.710774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.187695][ T5931] Zero length message leads to an empty skb [ 104.468601][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 104.544263][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 104.687734][ T5942] syzkaller0: entered promiscuous mode [ 104.687764][ T5942] syzkaller0: entered allmulticast mode [ 105.097834][ T5950] ioremap: invalid physical address 8000000000000000 [ 105.097927][ T5950] ------------[ cut here ]------------ [ 105.097936][ T5950] 1 [ 105.097942][ T5950] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller+0x51e/0x620, CPU#0: syz.1.35/5950 [ 105.122779][ T5950] Modules linked in: [ 105.126703][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.136412][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.146568][ T5950] RIP: 0010:__ioremap_caller+0x51e/0x620 [ 105.152284][ T5950] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 54 15 4e 00 48 8b 74 24 60 48 c7 c7 80 0c 8a 8b e8 c3 a3 ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 105.172047][ T5950] RSP: 0018:ffffc9000611f880 EFLAGS: 00010246 [ 105.178140][ T5950] RAX: 0000000000000032 RBX: 1ffff92000c23f00 RCX: 911a4cbda220f100 [ 105.186226][ T5950] RDX: ffffc9000ee21000 RSI: 0000000000000285 RDI: 0000000000000286 [ 105.194371][ T5950] RBP: ffffc9000611f990 R08: 0000000000000000 R09: 0000000000000000 [ 105.202408][ T5950] R10: dffffc0000000000 R11: fffff52000c23ec1 R12: 0000000000020000 [ 105.210428][ T5950] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 105.218471][ T5950] FS: 00007f3a3a53e6c0(0000) GS:ffff888124716000(0000) knlGS:0000000000000000 [ 105.227476][ T5950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.234139][ T5950] CR2: 0000001b3390fff8 CR3: 000000002c610000 CR4: 00000000003526f0 [ 105.242178][ T5950] Call Trace: [ 105.245471][ T5950] [ 105.248463][ T5950] ? register_device+0x12c/0x570 [ 105.253561][ T5950] ? __pfx___ioremap_caller+0x10/0x10 [ 105.258972][ T5950] ? __kasan_kmalloc+0x93/0xb0 [ 105.263797][ T5950] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 105.269373][ T5950] ? _parse_integer_limit+0x18e/0x1e0 [ 105.274823][ T5950] ? register_device+0xc6/0x570 [ 105.279704][ T5950] ? register_device+0xc6/0x570 [ 105.284912][ T5950] register_device+0x12c/0x570 [ 105.289725][ T5950] phram_setup+0x412/0x620 [ 105.294236][ T5950] ? __pfx_phram_setup+0x10/0x10 [ 105.299229][ T5950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.305145][ T5950] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.311022][ T5950] ? mutex_lock_nested+0x14d/0x1d0 [ 105.316171][ T5950] ? param_attr_store+0xcf/0x310 [ 105.321195][ T5950] param_attr_store+0x214/0x310 [ 105.326100][ T5950] ? __pfx_param_attr_store+0x10/0x10 [ 105.331559][ T5950] ? __pfx_sysfs_kf_write+0x10/0x10 [ 105.336780][ T5950] module_attr_store+0x65/0x90 [ 105.341732][ T5950] kernfs_fop_write_iter+0x3a5/0x540 [ 105.347067][ T5950] vfs_write+0x61e/0xbb0 [ 105.351401][ T5950] ? __pfx_vfs_write+0x10/0x10 [ 105.356201][ T5950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.362079][ T5950] ? mutex_lock_nested+0x14d/0x1d0 [ 105.367231][ T5950] ? fdget_pos+0x11e/0x160 [ 105.371752][ T5950] ksys_write+0x156/0x270 [ 105.376217][ T5950] ? __pfx_ksys_write+0x10/0x10 [ 105.381173][ T5950] do_syscall_64+0x166/0x520 [ 105.385805][ T5950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.391946][ T5950] ? clear_bhb_loop+0x70/0xc0 [ 105.396666][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.402627][ T5950] RIP: 0033:0x7f3a3c2ef559 [ 105.407124][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.426833][ T5950] RSP: 002b:00007f3a3a53e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.435331][ T5950] RAX: ffffffffffffffda RBX: 00007f3a3c575fa0 RCX: 00007f3a3c2ef559 [ 105.443366][ T5950] RDX: 000000000000001e RSI: 0000200000000cc0 RDI: 000000000000000a [ 105.451404][ T5950] RBP: 00007f3a3c386b50 R08: 0000000000000000 R09: 0000000000000000 [ 105.459396][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.467459][ T5950] R13: 00007f3a3c576038 R14: 00007f3a3c575fa0 R15: 00007fff3956b638 [ 105.475520][ T5950] [ 105.478571][ T5950] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.485866][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.495504][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.505570][ T5950] Call Trace: [ 105.508866][ T5950] [ 105.511812][ T5950] vpanic+0x26f/0x710 [ 105.515822][ T5950] panic+0xc5/0xd0 [ 105.519562][ T5950] ? __pfx_panic+0x10/0x10 [ 105.524013][ T5950] __warn+0x315/0x4c0 [ 105.528015][ T5950] ? __ioremap_caller+0x51e/0x620 [ 105.533072][ T5950] ? __ioremap_caller+0x51e/0x620 [ 105.538118][ T5950] __report_bug+0x276/0x570 [ 105.542741][ T5950] ? __ioremap_caller+0x51e/0x620 [ 105.547800][ T5950] ? __pfx___report_bug+0x10/0x10 [ 105.552846][ T5950] ? irq_work_queue+0xbf/0x150 [ 105.557636][ T5950] ? vprintk_emit+0x55c/0x5f0 [ 105.562323][ T5950] ? kasan_save_track+0x3e/0x80 [ 105.567194][ T5950] ? __kasan_kmalloc+0x93/0xb0 [ 105.571981][ T5950] ? __pfx_vprintk_emit+0x10/0x10 [ 105.577029][ T5950] ? kernfs_fop_write_iter+0x3a5/0x540 [ 105.582554][ T5950] ? ksys_write+0x156/0x270 [ 105.587076][ T5950] ? do_syscall_64+0x166/0x520 [ 105.591862][ T5950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.597951][ T5950] ? __ioremap_caller+0x51e/0x620 [ 105.603000][ T5950] report_bug+0x16b/0x220 [ 105.607349][ T5950] ? __ioremap_caller+0x51e/0x620 [ 105.612433][ T5950] ? __ioremap_caller+0x520/0x620 [ 105.617519][ T5950] handle_bug+0x9c/0x200 [ 105.621783][ T5950] exc_invalid_op+0x1a/0x50 [ 105.626308][ T5950] asm_exc_invalid_op+0x1a/0x20 [ 105.631174][ T5950] RIP: 0010:__ioremap_caller+0x51e/0x620 [ 105.636867][ T5950] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 54 15 4e 00 48 8b 74 24 60 48 c7 c7 80 0c 8a 8b e8 c3 a3 ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 105.656488][ T5950] RSP: 0018:ffffc9000611f880 EFLAGS: 00010246 [ 105.662571][ T5950] RAX: 0000000000000032 RBX: 1ffff92000c23f00 RCX: 911a4cbda220f100 [ 105.670564][ T5950] RDX: ffffc9000ee21000 RSI: 0000000000000285 RDI: 0000000000000286 [ 105.679287][ T5950] RBP: ffffc9000611f990 R08: 0000000000000000 R09: 0000000000000000 [ 105.687364][ T5950] R10: dffffc0000000000 R11: fffff52000c23ec1 R12: 0000000000020000 [ 105.695359][ T5950] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 105.703376][ T5950] ? register_device+0x12c/0x570 [ 105.708361][ T5950] ? __pfx___ioremap_caller+0x10/0x10 [ 105.713772][ T5950] ? __kasan_kmalloc+0x93/0xb0 [ 105.718558][ T5950] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 105.724125][ T5950] ? _parse_integer_limit+0x18e/0x1e0 [ 105.729519][ T5950] ? register_device+0xc6/0x570 [ 105.734403][ T5950] ? register_device+0xc6/0x570 [ 105.739299][ T5950] register_device+0x12c/0x570 [ 105.744103][ T5950] phram_setup+0x412/0x620 [ 105.748553][ T5950] ? __pfx_phram_setup+0x10/0x10 [ 105.753541][ T5950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.759381][ T5950] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.765215][ T5950] ? mutex_lock_nested+0x14d/0x1d0 [ 105.770365][ T5950] ? param_attr_store+0xcf/0x310 [ 105.775364][ T5950] param_attr_store+0x214/0x310 [ 105.780260][ T5950] ? __pfx_param_attr_store+0x10/0x10 [ 105.785664][ T5950] ? __pfx_sysfs_kf_write+0x10/0x10 [ 105.790878][ T5950] module_attr_store+0x65/0x90 [ 105.795682][ T5950] kernfs_fop_write_iter+0x3a5/0x540 [ 105.800994][ T5950] vfs_write+0x61e/0xbb0 [ 105.805319][ T5950] ? __pfx_vfs_write+0x10/0x10 [ 105.810119][ T5950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.815949][ T5950] ? mutex_lock_nested+0x14d/0x1d0 [ 105.821086][ T5950] ? fdget_pos+0x11e/0x160 [ 105.825542][ T5950] ksys_write+0x156/0x270 [ 105.829897][ T5950] ? __pfx_ksys_write+0x10/0x10 [ 105.834883][ T5950] do_syscall_64+0x166/0x520 [ 105.839492][ T5950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.845618][ T5950] ? clear_bhb_loop+0x70/0xc0 [ 105.850396][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.856288][ T5950] RIP: 0033:0x7f3a3c2ef559 [ 105.860700][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.880301][ T5950] RSP: 002b:00007f3a3a53e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.888710][ T5950] RAX: ffffffffffffffda RBX: 00007f3a3c575fa0 RCX: 00007f3a3c2ef559 [ 105.896673][ T5950] RDX: 000000000000001e RSI: 0000200000000cc0 RDI: 000000000000000a [ 105.904637][ T5950] RBP: 00007f3a3c386b50 R08: 0000000000000000 R09: 0000000000000000 [ 105.912690][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.920652][ T5950] R13: 00007f3a3c576038 R14: 00007f3a3c575fa0 R15: 00007fff3956b638 [ 105.928670][ T5950] [ 105.931834][ T5950] Kernel Offset: disabled [ 105.936152][ T5950] Rebooting in 86400 seconds..