last executing test programs: 7.665971759s ago: executing program 1 (id=2): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r2, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x18, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}, [{0x4, 0x3}]}, 0x18}}, 0x8080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000280)="64b81bda58bf7cc372cece7a68bba1c3df52476738f9", 0x16}, {&(0x7f0000000ac0)="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", 0xfe0}, {&(0x7f0000000600)="1dc5f9d8193fb0c033a70a246ab32927e314f58a0fea503e365368f038218151fb4afb035e18991bd0cd3a7c24bc9a326e48706e13c6b5af0536b19d9c559b688f133c53bf0365fd2be7ce7bc19e55666a5d8f18673ea66c31efb25404f24da912e5330c6074d0e00946dc659cf772185ab4e49a9423e7a8329433e85fc17e40dd0240d2d3c91aca64bf3d3a808af0a71bd7290afbeabeafce9777ac5e9b0aeb4eb0d2e66bdc38a34def6cb5770e7e18b1e2976a9d89a93e549741b7e4659a89dc0c72e870", 0xc5}, {&(0x7f0000000380)}], 0x4, 0x0, 0x0, 0x5) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x322, 0x6, 0x0, 0x4, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000440)={'pcl724\x00', [0x3dc0, 0x8001, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0xb, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]}) 7.349121021s ago: executing program 2 (id=3): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84015}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0x689d80000000) r5 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.625721706s ago: executing program 2 (id=6): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) socket(0x10, 0x3, 0x0) getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, 0x0, 0x0) timerfd_create(0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/46, 0x2e}}], 0x1, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2404c001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 5.995738884s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b40)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000300)="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", 0xfc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.120004967s ago: executing program 2 (id=7): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c808) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = io_uring_setup(0x899, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="9baa00fea0000000716d8f78d400000095000000010000"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xa}, 0x2) 4.932583535s ago: executing program 4 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) 3.335474832s ago: executing program 1 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) 1.915423555s ago: executing program 2 (id=10): fanotify_init(0x10, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)="51b81649e9e3eef074b57f2caf79", 0xe}) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x5, 0x0, 0x2000}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x50) 1.890451376s ago: executing program 3 (id=4): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x44) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x4, 0x4, 0x0, 0x7, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000002, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x100, 0x9, 0x100000000000, 0x4000000000, 0x3, 0x2, 0x6, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) 1.857748368s ago: executing program 0 (id=1): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 4 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) getpid() syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x402, 0x0) r6 = socket$inet(0x2, 0x3, 0x3) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000040801080000010000000000030000003c0004800800010000000000000001400800000008000140000000020800024000000001400000000408000140ffffffff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89101) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 64.521290][ T5824] cgroup: Unknown subsys name 'net' [ 64.648270][ T5824] cgroup: Unknown subsys name 'cpuset' [ 64.656463][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.957113][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.152948][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.161012][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.170343][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.180236][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.189244][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.192171][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.197395][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.204574][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.212351][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.219836][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.226267][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.240968][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.241028][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.248915][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.263273][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.264832][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.272107][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.279196][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.286003][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.292514][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.307164][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.316021][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.317505][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.333854][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.351023][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.959478][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 68.983645][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.036544][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 69.075754][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 69.138884][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 69.336329][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.343585][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.350827][ T5837] bridge_slave_0: entered allmulticast mode [ 69.358156][ T5837] bridge_slave_0: entered promiscuous mode [ 69.366851][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.374072][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.381296][ T5836] bridge_slave_0: entered allmulticast mode [ 69.388687][ T5836] bridge_slave_0: entered promiscuous mode [ 69.428041][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.435600][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.443041][ T5837] bridge_slave_1: entered allmulticast mode [ 69.450613][ T5837] bridge_slave_1: entered promiscuous mode [ 69.458107][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.465392][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.472568][ T5836] bridge_slave_1: entered allmulticast mode [ 69.479890][ T5836] bridge_slave_1: entered promiscuous mode [ 69.495532][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.502713][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.510286][ T5840] bridge_slave_0: entered allmulticast mode [ 69.518017][ T5840] bridge_slave_0: entered promiscuous mode [ 69.536095][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.543403][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.550959][ T5851] bridge_slave_0: entered allmulticast mode [ 69.558880][ T5851] bridge_slave_0: entered promiscuous mode [ 69.588910][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.597297][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.604573][ T5838] bridge_slave_0: entered allmulticast mode [ 69.612709][ T5838] bridge_slave_0: entered promiscuous mode [ 69.620072][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.627319][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.634456][ T5840] bridge_slave_1: entered allmulticast mode [ 69.642231][ T5840] bridge_slave_1: entered promiscuous mode [ 69.649643][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.657007][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.664148][ T5851] bridge_slave_1: entered allmulticast mode [ 69.671696][ T5851] bridge_slave_1: entered promiscuous mode [ 69.699591][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.706878][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.714045][ T5838] bridge_slave_1: entered allmulticast mode [ 69.721507][ T5838] bridge_slave_1: entered promiscuous mode [ 69.765187][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.778532][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.802769][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.824708][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.837219][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.861579][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.874298][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.907001][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.929701][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.962833][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.995926][ T5837] team0: Port device team_slave_0 added [ 70.004604][ T5836] team0: Port device team_slave_0 added [ 70.022983][ T5840] team0: Port device team_slave_0 added [ 70.040598][ T5837] team0: Port device team_slave_1 added [ 70.048619][ T5836] team0: Port device team_slave_1 added [ 70.066263][ T5840] team0: Port device team_slave_1 added [ 70.074409][ T5851] team0: Port device team_slave_0 added [ 70.104244][ T5838] team0: Port device team_slave_0 added [ 70.122413][ T5851] team0: Port device team_slave_1 added [ 70.151143][ T5838] team0: Port device team_slave_1 added [ 70.183746][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.190707][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.216795][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.229663][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.236691][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.263012][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.284937][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.292223][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.318306][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.326312][ T51] Bluetooth: hci4: command tx timeout [ 70.331522][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.341530][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.367593][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.390516][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.397497][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.424129][ T51] Bluetooth: hci1: command tx timeout [ 70.424242][ T51] Bluetooth: hci3: command tx timeout [ 70.425510][ T5858] Bluetooth: hci0: command tx timeout [ 70.429749][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.441419][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.452004][ T51] Bluetooth: hci2: command tx timeout [ 70.464351][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.490426][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.519255][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.526283][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.552591][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.566056][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.573000][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.598965][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.626837][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.633765][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.659751][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.672988][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.679986][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.706013][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.769555][ T5837] hsr_slave_0: entered promiscuous mode [ 70.776631][ T5837] hsr_slave_1: entered promiscuous mode [ 70.822292][ T5840] hsr_slave_0: entered promiscuous mode [ 70.829234][ T5840] hsr_slave_1: entered promiscuous mode [ 70.835735][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 70.841506][ T5840] Cannot create hsr debugfs directory [ 70.861154][ T5851] hsr_slave_0: entered promiscuous mode [ 70.867869][ T5851] hsr_slave_1: entered promiscuous mode [ 70.874178][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 70.879950][ T5851] Cannot create hsr debugfs directory [ 70.930913][ T5836] hsr_slave_0: entered promiscuous mode [ 70.937705][ T5836] hsr_slave_1: entered promiscuous mode [ 70.944035][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 70.950029][ T5836] Cannot create hsr debugfs directory [ 70.981682][ T5838] hsr_slave_0: entered promiscuous mode [ 70.988241][ T5838] hsr_slave_1: entered promiscuous mode [ 70.994561][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 71.000484][ T5838] Cannot create hsr debugfs directory [ 71.214082][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.220910][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.607545][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.620111][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.630679][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.650860][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.704408][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.727361][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.738671][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.760628][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.828947][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.843333][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.864526][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.875981][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.990754][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.007071][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.028043][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.059695][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.111502][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.180540][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.204570][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.216410][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.241714][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.270863][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.290578][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.297964][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.344315][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.353713][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.360829][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.402006][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.409309][ T5858] Bluetooth: hci4: command tx timeout [ 72.488461][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.496531][ T51] Bluetooth: hci2: command tx timeout [ 72.496634][ T5161] Bluetooth: hci3: command tx timeout [ 72.502295][ T51] Bluetooth: hci1: command tx timeout [ 72.513214][ T5858] Bluetooth: hci0: command tx timeout [ 72.527356][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.559033][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.566158][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.577116][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.584275][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.612997][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.620144][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.644240][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.651346][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.746514][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.808180][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.865705][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.930298][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.956983][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.964164][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.976264][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.983429][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.008111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.015586][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.064917][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.072114][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.135881][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.207841][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.240013][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.380971][ T5837] veth0_vlan: entered promiscuous mode [ 73.447398][ T5837] veth1_vlan: entered promiscuous mode [ 73.577792][ T5851] veth0_vlan: entered promiscuous mode [ 73.654237][ T5837] veth0_macvtap: entered promiscuous mode [ 73.685763][ T5851] veth1_vlan: entered promiscuous mode [ 73.701851][ T5837] veth1_macvtap: entered promiscuous mode [ 73.787863][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.802478][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.818273][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.856731][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.866106][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.875125][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.897312][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.906463][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.923776][ T5851] veth0_macvtap: entered promiscuous mode [ 73.943299][ T5836] veth0_vlan: entered promiscuous mode [ 73.952394][ T5851] veth1_macvtap: entered promiscuous mode [ 74.031483][ T5836] veth1_vlan: entered promiscuous mode [ 74.044807][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.061221][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.118710][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.127496][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.137258][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.147322][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.156226][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.180408][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.243889][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.253494][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.278147][ T5840] veth0_vlan: entered promiscuous mode [ 74.333916][ T5838] veth0_vlan: entered promiscuous mode [ 74.354957][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.370304][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.370334][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.399463][ T5840] veth1_vlan: entered promiscuous mode [ 74.437715][ T5836] veth0_macvtap: entered promiscuous mode [ 74.486295][ T5858] Bluetooth: hci4: command tx timeout [ 74.498785][ T5838] veth1_vlan: entered promiscuous mode [ 74.514623][ T5836] veth1_macvtap: entered promiscuous mode [ 74.546299][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.560117][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.567934][ T5858] Bluetooth: hci3: command tx timeout [ 74.578071][ T51] Bluetooth: hci2: command tx timeout [ 74.578105][ T5161] Bluetooth: hci0: command tx timeout [ 74.583686][ T5858] Bluetooth: hci1: command tx timeout [ 74.632812][ T5840] veth0_macvtap: entered promiscuous mode [ 74.634063][ T5958] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 74.647078][ T5840] veth1_macvtap: entered promiscuous mode [ 74.669062][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.710405][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.770904][ T5838] veth0_macvtap: entered promiscuous mode [ 74.812414][ T910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.852875][ T5838] veth1_macvtap: entered promiscuous mode [ 74.873051][ T910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.053090][ T910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.332408][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.346734][ T910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.400745][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.516138][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.534952][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.554615][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.577506][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.653809][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.671208][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.739495][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.750033][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.768700][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.791311][ T1114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.802966][ T1114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.843747][ T1114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.897224][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.905799][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.120499][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.137890][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.477627][ T5971] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.493364][ T5971] overlayfs: failed to resolve './file1': -2 [ 76.575388][ T5858] Bluetooth: hci4: command tx timeout [ 76.646101][ T5858] Bluetooth: hci1: command tx timeout [ 76.658341][ T5858] Bluetooth: hci0: command tx timeout [ 76.664131][ T5858] Bluetooth: hci2: command tx timeout [ 76.669905][ T51] Bluetooth: hci3: command tx timeout [ 77.016322][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.053651][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.278144][ T5977] misc userio: The device must be registered before sending interrupts [ 77.729807][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.746060][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.760477][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.761649][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.226506][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.447749][ T29] cfg80211: failed to load regulatory.db [ 83.358576][ T5990] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 83.370502][ T5990] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 83.378934][ T5990] CPU: 1 UID: 0 PID: 5990 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 83.388039][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.398091][ T5990] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 83.403566][ T5990] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 83.423200][ T5990] RSP: 0018:ffffc900053479a0 EFLAGS: 00010006 [ 83.429288][ T5990] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 83.437258][ T5990] RDX: 1ffff92000a68f40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 83.445235][ T5990] RBP: ffffc90005347aa0 R08: 0000000000000003 R09: 0000000000000004 [ 83.453205][ T5990] R10: dffffc0000000000 R11: fffff52000a68f50 R12: 0000000000000000 [ 83.461172][ T5990] R13: ffff88801b092850 R14: 0000000000000018 R15: ffffc90005347c20 [ 83.469142][ T5990] FS: 000055555814a500(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 83.478058][ T5990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.484631][ T5990] CR2: 0000001b31913ff8 CR3: 000000007bbac000 CR4: 00000000003526f0 [ 83.492587][ T5990] Call Trace: [ 83.495867][ T5990] [ 83.498784][ T5990] ? __lock_acquire+0x6b5/0x2cf0 [ 83.503711][ T5990] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 83.508978][ T5990] ? do_raw_spin_lock+0x12b/0x2f0 [ 83.514081][ T5990] rwsem_del_wake_waiter+0x25d/0x2e0 [ 83.519352][ T5990] rwsem_down_write_slowpath+0xa6f/0x1080 [ 83.525065][ T5990] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 83.530947][ T5990] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 83.537090][ T5990] ? futex_wake+0x4ac/0x580 [ 83.541575][ T5990] ? __pfx_futex_wait+0x10/0x10 [ 83.546411][ T5990] ? vm_mmap_pgoff+0x234/0x4f0 [ 83.551158][ T5990] down_write_killable+0x1eb/0x240 [ 83.556258][ T5990] ? __pfx_down_write_killable+0x10/0x10 [ 83.561887][ T5990] ? apparmor_mmap_file+0x197/0x3e0 [ 83.567084][ T5990] ? security_mmap_file+0x4df/0xa20 [ 83.572280][ T5990] vm_mmap_pgoff+0x234/0x4f0 [ 83.576860][ T5990] ? __se_sys_futex+0x3a8/0x450 [ 83.581700][ T5990] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 83.586797][ T5990] ? __pfx___se_sys_futex+0x10/0x10 [ 83.591984][ T5990] ? rcu_is_watching+0x15/0xb0 [ 83.596734][ T5990] ? ksys_mmap_pgoff+0xf3/0x760 [ 83.601581][ T5990] ? __x64_sys_mmap+0x7f/0x140 [ 83.606338][ T5990] do_syscall_64+0x14d/0xf80 [ 83.610924][ T5990] ? trace_irq_disable+0x3b/0x150 [ 83.615939][ T5990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.621989][ T5990] ? clear_bhb_loop+0x40/0x90 [ 83.626653][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.632534][ T5990] RIP: 0033:0x7f463019c502 [ 83.636948][ T5990] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 83.656539][ T5990] RSP: 002b:00007ffd68546838 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 83.665025][ T5990] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f463019c502 [ 83.672983][ T5990] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 83.680939][ T5990] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 83.688906][ T5990] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffd685469a0 [ 83.696869][ T5990] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 83.704841][ T5990] [ 83.707850][ T5990] Modules linked in: [ 83.711737][ T5990] ---[ end trace 0000000000000000 ]--- [ 83.717178][ T5990] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 83.722630][ T5990] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 83.742219][ T5990] RSP: 0018:ffffc900053479a0 EFLAGS: 00010006 [ 83.748270][ T5990] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 83.756225][ T5990] RDX: 1ffff92000a68f40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 83.764177][ T5990] RBP: ffffc90005347aa0 R08: 0000000000000003 R09: 0000000000000004 [ 83.772131][ T5990] R10: dffffc0000000000 R11: fffff52000a68f50 R12: 0000000000000000 [ 83.780092][ T5990] R13: ffff88801b092850 R14: 0000000000000018 R15: ffffc90005347c20 [ 83.788062][ T5990] FS: 000055555814a500(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 83.796974][ T5990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.803541][ T5990] CR2: 0000001b31913ff8 CR3: 000000007bbac000 CR4: 00000000003526f0 [ 83.811499][ T5990] Kernel panic - not syncing: Fatal exception [ 83.817816][ T5990] Kernel Offset: disabled [ 83.822121][ T5990] Rebooting in 86400 seconds..