last executing test programs: 51.865162705s ago: executing program 3 (id=219): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80800) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000002c0)={0x3, 0x2000}, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 50.30831773s ago: executing program 3 (id=224): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000010000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, r0}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 48.741098349s ago: executing program 3 (id=227): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xf0, 0xfffffffffffffffe}) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)}, {&(0x7f0000000040)}], 0x2}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000000)=0x3de, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) 47.970915701s ago: executing program 3 (id=228): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x31, 0x0, &(0x7f00000001c0)) 46.927855837s ago: executing program 3 (id=233): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 44.67196537s ago: executing program 3 (id=238): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xf0, 0xfffffffffffffffe}) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)}, {&(0x7f0000000040)}], 0x2}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000000)=0x3de, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) 29.162265442s ago: executing program 32 (id=238): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xf0, 0xfffffffffffffffe}) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)}, {&(0x7f0000000040)}], 0x2}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000000)=0x3de, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) 21.737471777s ago: executing program 4 (id=280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000002000000"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f0000000080), 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x25}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000400)={r5, r4}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) gettid() 18.30355801s ago: executing program 4 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='freezer.parent_freezing\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 15.074459503s ago: executing program 0 (id=295): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x49844}}], 0x0, 0xc4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x81) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r5, &(0x7f0000001f40)=""/72, 0x48) r6 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 14.870071116s ago: executing program 4 (id=296): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20005004) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x20018e, 0x6, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x7, 0x2bf, 0x6c7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r4, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8c", 0x7}], 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x7f) connect$inet(r0, &(0x7f0000000100)={0x2, 0x8003, @broadcast}, 0x10) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x8000, 0x0) 12.010175399s ago: executing program 0 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = accept4(r0, &(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}], 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010e0e0000000000000007000000", @ANYRES32, @ANYBLOB="20000100"], 0x38}}, 0xc000) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000004c0)=0x9, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000, 0x0) semop(0x0, &(0x7f0000000500)=[{0x0, 0x0, 0x1800}], 0x1) syz_open_dev$audion(&(0x7f0000000300), 0x3ff, 0x72840) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) 10.001937669s ago: executing program 2 (id=303): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x7, 0x159542) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000004c0)={0xd0f000, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 9.301486066s ago: executing program 2 (id=304): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 9.161636949s ago: executing program 2 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='freezer.parent_freezing\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 7.042564039s ago: executing program 0 (id=307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6.926748516s ago: executing program 1 (id=308): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xc, &(0x7f0000002100)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.055207552s ago: executing program 2 (id=309): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) connect$netlink(r0, &(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001480)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r8, 0x3) r9 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x9, 0x4, 0x0, 0x5, 0xf42, 0xfffffffffffffffd}, {0x4, 0x2, 0x1, 0xfffefffffffffffe}, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x4004000, 0x33}, 0x0, @in=@loopback, 0x3503, 0x0, 0x1, 0x4, 0x7fffdfff, 0x0, 0x4}}, 0xe8) ioctl$sock_SIOCINQ(r8, 0x541b, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="cd3e00000000fbdbdf2501000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040200006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e8528300000800020003000000"], 0xec}, 0x1, 0x0, 0x0, 0x4004041}, 0x4) 6.010598239s ago: executing program 0 (id=310): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000841}, 0x4000040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$ptp0(0xffffffffffffff9c, 0x0, 0x410201, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) shmctl$IPC_RMID(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r3, 0x8, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x5e, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x1070bd27, 0x7ffa, {0x0, 0x0, 0x0, r7, {0x10, 0x7}, {}, {0x71022c39d5e9904c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 6.0064602s ago: executing program 1 (id=311): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) rseq(0x0, 0x0, 0x400000000, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x13f, 0x1}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.971616774s ago: executing program 1 (id=312): r0 = socket(0x23, 0x5, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 4.889364923s ago: executing program 4 (id=313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x7, 0x159542) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000004c0)={0xd0f000, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 4.829982638s ago: executing program 0 (id=314): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100441405030000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.170630789s ago: executing program 4 (id=315): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000080)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = fcntl$dupfd(r4, 0x406, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 4.001615871s ago: executing program 0 (id=316): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) 3.890010798s ago: executing program 1 (id=317): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.637768853s ago: executing program 1 (id=318): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x400, 0x4000, 0x3a6}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0xa, 0xffff133a, 0x80000001], [{0x20, 0x0, 0x0, 0x1}, {0x35, 0x31}, {0x0, 0x8}, {}, {}, {0x0, 0x9}, {0x0, 0x3}, {}, {0x6}, {0x101}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0xc}) r2 = fsmount(r0, 0x0, 0x80) fchdir(r2) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r3, 0x3518, 0xaddf, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3.495033283s ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000acbc5840ba0d0030ea2600000001090212"], 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r0, @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.2200593s ago: executing program 1 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110064010101000000000000000000000000e000000100000000000000000000000064010101000000000000000000000000fe880000000000000000000000000101320300000000000002000200"], 0xa0}}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x20800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x8], [0x2], [0x0, 0x0, 0xfffffffffffffbaf]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000440)={r8}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 401.808115ms ago: executing program 4 (id=321): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) rseq(0x0, 0x0, 0x400000000, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x13f, 0x1}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=322): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x8d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20088004, 0x0, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[]) open(&(0x7f00000000c0)='./file1\x00', 0x49c802, 0x81) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 83.650779][ T5823] cgroup: Unknown subsys name 'net' [ 83.795741][ T5823] cgroup: Unknown subsys name 'cpuset' [ 83.804997][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.340040][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.108118][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.132331][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.141559][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.147816][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.149423][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.156812][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.164494][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.170412][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.179414][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.185141][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.192235][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.199961][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.205726][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.212310][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.220679][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.234017][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.235083][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.249403][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.257557][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.266105][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.273914][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.284468][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.291617][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.305045][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.321052][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.890085][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.063735][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.103422][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.270155][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.280671][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.288657][ T5846] bridge_slave_0: entered allmulticast mode [ 89.297640][ T5846] bridge_slave_0: entered promiscuous mode [ 89.311114][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.318523][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.325756][ T5846] bridge_slave_1: entered allmulticast mode [ 89.333387][ T5846] bridge_slave_1: entered promiscuous mode [ 89.346601][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.371063][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.455435][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.531810][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.541001][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.548608][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.556129][ T5851] bridge_slave_0: entered allmulticast mode [ 89.563651][ T5851] bridge_slave_0: entered promiscuous mode [ 89.593093][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.600216][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.607767][ T5836] bridge_slave_0: entered allmulticast mode [ 89.615236][ T5836] bridge_slave_0: entered promiscuous mode [ 89.623774][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.630979][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.638536][ T5836] bridge_slave_1: entered allmulticast mode [ 89.646586][ T5836] bridge_slave_1: entered promiscuous mode [ 89.685403][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.693305][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.700484][ T5851] bridge_slave_1: entered allmulticast mode [ 89.708104][ T5851] bridge_slave_1: entered promiscuous mode [ 89.742220][ T5846] team0: Port device team_slave_0 added [ 89.805376][ T5846] team0: Port device team_slave_1 added [ 89.828000][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.853428][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.916729][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.926199][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.934408][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.942097][ T5837] bridge_slave_0: entered allmulticast mode [ 89.949295][ T5837] bridge_slave_0: entered promiscuous mode [ 89.959146][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.983002][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.989966][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.016367][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.055899][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.063859][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.071217][ T5837] bridge_slave_1: entered allmulticast mode [ 90.078869][ T5837] bridge_slave_1: entered promiscuous mode [ 90.097662][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.105060][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.115028][ T5833] bridge_slave_0: entered allmulticast mode [ 90.123386][ T5833] bridge_slave_0: entered promiscuous mode [ 90.131272][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.138505][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.165777][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.180493][ T5851] team0: Port device team_slave_0 added [ 90.213502][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.220723][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.228218][ T5833] bridge_slave_1: entered allmulticast mode [ 90.236291][ T5833] bridge_slave_1: entered promiscuous mode [ 90.251823][ T5851] team0: Port device team_slave_1 added [ 90.274131][ T5836] team0: Port device team_slave_0 added [ 90.311386][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.337911][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.349658][ T5836] team0: Port device team_slave_1 added [ 90.358890][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.367247][ T51] Bluetooth: hci2: command tx timeout [ 90.368327][ T5853] Bluetooth: hci0: command tx timeout [ 90.373656][ T5842] Bluetooth: hci4: command tx timeout [ 90.379040][ T5853] Bluetooth: hci3: command tx timeout [ 90.384700][ T5845] Bluetooth: hci1: command tx timeout [ 90.424124][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.508498][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.516319][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.542767][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.569091][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.576491][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.602605][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.616187][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.623374][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.650087][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.667534][ T5846] hsr_slave_0: entered promiscuous mode [ 90.674788][ T5846] hsr_slave_1: entered promiscuous mode [ 90.685013][ T5833] team0: Port device team_slave_0 added [ 90.692762][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.699736][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.726405][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.767190][ T5833] team0: Port device team_slave_1 added [ 90.827171][ T5837] team0: Port device team_slave_0 added [ 90.890624][ T5837] team0: Port device team_slave_1 added [ 90.910540][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.917704][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.943672][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.956589][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.964072][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.990103][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.035463][ T5851] hsr_slave_0: entered promiscuous mode [ 91.042086][ T5851] hsr_slave_1: entered promiscuous mode [ 91.048302][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.057111][ T5851] Cannot create hsr debugfs directory [ 91.123381][ T5836] hsr_slave_0: entered promiscuous mode [ 91.129922][ T5836] hsr_slave_1: entered promiscuous mode [ 91.139046][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.146835][ T5836] Cannot create hsr debugfs directory [ 91.198812][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.205956][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.231977][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.246120][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.253166][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.279127][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.354769][ T5833] hsr_slave_0: entered promiscuous mode [ 91.362710][ T5833] hsr_slave_1: entered promiscuous mode [ 91.369082][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.376950][ T5833] Cannot create hsr debugfs directory [ 91.611850][ T5837] hsr_slave_0: entered promiscuous mode [ 91.618214][ T5837] hsr_slave_1: entered promiscuous mode [ 91.625149][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.632916][ T5837] Cannot create hsr debugfs directory [ 91.980401][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.994999][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.016372][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.044002][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.057722][ T44] cfg80211: failed to load regulatory.db [ 92.115135][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.130309][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.140887][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.158062][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.255227][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.268248][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.281155][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.299875][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.388004][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.409473][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.442711][ T5845] Bluetooth: hci1: command tx timeout [ 92.448254][ T5845] Bluetooth: hci3: command tx timeout [ 92.454721][ T5842] Bluetooth: hci4: command tx timeout [ 92.454755][ T5853] Bluetooth: hci2: command tx timeout [ 92.460143][ T5842] Bluetooth: hci0: command tx timeout [ 92.477188][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.487773][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.573599][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.624657][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.665669][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.673069][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.694989][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.702256][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.713770][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.725140][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.749917][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.757131][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.769638][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.824631][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.856626][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.863901][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.906255][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.913443][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.968843][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.990708][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.075353][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.110122][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.147909][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.155226][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.194170][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.201325][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.221379][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.228652][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.240640][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.247945][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.320311][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.439754][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.467348][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.474544][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.490890][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.589058][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.596751][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.812016][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.848942][ T5851] veth0_vlan: entered promiscuous mode [ 93.910044][ T5851] veth1_vlan: entered promiscuous mode [ 94.033361][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.075362][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.087741][ T5851] veth0_macvtap: entered promiscuous mode [ 94.117807][ T5851] veth1_macvtap: entered promiscuous mode [ 94.179298][ T5846] veth0_vlan: entered promiscuous mode [ 94.208616][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.237284][ T5846] veth1_vlan: entered promiscuous mode [ 94.267477][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.277756][ T5836] veth0_vlan: entered promiscuous mode [ 94.298225][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.308489][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.317836][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.326755][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.346050][ T5836] veth1_vlan: entered promiscuous mode [ 94.358375][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.494602][ T5846] veth0_macvtap: entered promiscuous mode [ 94.524224][ T5842] Bluetooth: hci0: command tx timeout [ 94.529764][ T5842] Bluetooth: hci3: command tx timeout [ 94.535461][ T5845] Bluetooth: hci2: command tx timeout [ 94.540887][ T5845] Bluetooth: hci4: command tx timeout [ 94.541798][ T51] Bluetooth: hci1: command tx timeout [ 94.564029][ T5846] veth1_macvtap: entered promiscuous mode [ 94.572121][ T5836] veth0_macvtap: entered promiscuous mode [ 94.620627][ T5836] veth1_macvtap: entered promiscuous mode [ 94.662646][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.671388][ T5837] veth0_vlan: entered promiscuous mode [ 94.688595][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.697481][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.709133][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.726986][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.754687][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.786525][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.795686][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.804616][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.813455][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.828350][ T5837] veth1_vlan: entered promiscuous mode [ 94.852918][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.861848][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.870560][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.881309][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.903837][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.921277][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.946274][ T5833] veth0_vlan: entered promiscuous mode [ 94.977832][ T5833] veth1_vlan: entered promiscuous mode [ 95.038588][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.065019][ T5837] veth0_macvtap: entered promiscuous mode [ 95.128747][ T5837] veth1_macvtap: entered promiscuous mode [ 95.173355][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.181220][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.187131][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.198200][ T5833] veth0_macvtap: entered promiscuous mode [ 95.222027][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.236517][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.260620][ T5833] veth1_macvtap: entered promiscuous mode [ 95.279678][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.337466][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.349245][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.358554][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.367577][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.399072][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.413855][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.421142][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.430379][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.440273][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.455867][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.496270][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.508417][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518839][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.528346][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.921719][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.114769][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.366516][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.395035][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.486862][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.518000][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.602174][ T51] Bluetooth: hci4: command tx timeout [ 96.602268][ T5845] Bluetooth: hci3: command tx timeout [ 96.612917][ T51] Bluetooth: hci1: command tx timeout [ 96.613254][ T5842] Bluetooth: hci2: command tx timeout [ 96.618495][ T5843] Bluetooth: hci0: command tx timeout [ 96.642562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.964211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.066678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.760276][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.771782][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.803902][ T5980] vlan2: entered allmulticast mode [ 97.809075][ T5980] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 98.499248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.500042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.500321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.500355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.500386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.500417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.500447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.093925][ T5999] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 99.107097][ T5999] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 99.176673][ T5992] tty tty25: ldisc open failed (-12), clearing slot 24 [ 99.798412][ T5999] syz.1.13 (5999) used greatest stack depth: 19496 bytes left [ 101.102464][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.421520][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 101.469090][ T5839] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 101.520855][ T5839] usb 4-1: config 0 has no interface number 0 [ 101.683642][ T5839] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 101.698305][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.747378][ T5839] usb 4-1: Product: syz [ 101.771226][ T5839] usb 4-1: Manufacturer: syz [ 101.809167][ T5839] usb 4-1: SerialNumber: syz [ 101.871705][ T6032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.932021][ T5839] usb 4-1: config 0 descriptor?? [ 102.009873][ T5839] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 102.924299][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 103.481166][ T5839] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 103.540416][ T5839] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 103.617941][ T5839] usb 4-1: USB disconnect, device number 2 [ 103.771799][ T5839] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 104.544218][ T5839] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 104.556172][ T5839] quatech2 4-1:0.51: device disconnected [ 105.420517][ T6065] overlayfs: failed to resolve './file0': -2 [ 106.802890][ T6078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.864830][ T6093] syz.3.39 (6093): drop_caches: 2 [ 110.569408][ T6111] overlayfs: failed to resolve './file0': -2 [ 116.043804][ T6143] syz.2.57 (6143): drop_caches: 2 [ 116.050597][ T6143] syz.2.57 (6143): drop_caches: 2 [ 116.269192][ T6147] overlayfs: failed to resolve './file0': -2 [ 120.688488][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.186531][ T6212] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 127.341035][ T6262] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 133.642319][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.648860][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.432874][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.440845][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.513321][ T6346] bridge0: entered allmulticast mode [ 136.584744][ T6352] bridge_slave_1: left allmulticast mode [ 136.615365][ T6352] bridge_slave_1: left promiscuous mode [ 136.653635][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.055567][ T6352] bridge_slave_0: left allmulticast mode [ 137.061468][ T6352] bridge_slave_0: left promiscuous mode [ 137.068370][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.732152][ T6401] netlink: 'syz.1.133': attribute type 10 has an invalid length. [ 141.749493][ T6401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.761513][ T6401] team0: Port device bond0 added [ 141.773161][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 142.004463][ T6402] netlink: 'syz.0.135': attribute type 9 has an invalid length. [ 142.570200][ T6409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 142.964303][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.213749][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.265978][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.284758][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 143.295612][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.557912][ T9] usb 3-1: config 0 descriptor?? [ 143.992156][ T9] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 143.999189][ T9] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 144.026868][ T9] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 144.114643][ T6419] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.781526][ T9] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 144.791227][ T9] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 144.812373][ T6401] team0 (unregistering): Port device team_slave_0 removed [ 144.823452][ T9] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 144.850059][ T6401] team0 (unregistering): Port device team_slave_1 removed [ 144.885067][ T6401] team0 (unregistering): Port device bond0 removed [ 145.049237][ T9] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 145.062029][ T9] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 145.171843][ T9] usb 3-1: USB disconnect, device number 2 [ 145.632395][ T6432] ======================================================= [ 145.632395][ T6432] WARNING: The mand mount option has been deprecated and [ 145.632395][ T6432] and is ignored by this kernel. Remove the mand [ 145.632395][ T6432] option from the mount to silence this warning. [ 145.632395][ T6432] ======================================================= [ 147.748676][ T6449] orangefs_mount: mount request failed with -4 [ 148.082347][ T6445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.725816][ T6486] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 154.541967][ T6497] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.231197][ T6539] Zero length message leads to an empty skb [ 160.311650][ T5978] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 160.821490][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 160.852771][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.889656][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.902461][ T5978] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 160.923542][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.121646][ T2154] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.287793][ T5978] usb 4-1: config 0 descriptor?? [ 161.297084][ T5978] usb 4-1: can't set config #0, error -71 [ 161.305720][ T5978] usb 4-1: USB disconnect, device number 3 [ 161.448461][ T2154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.283263][ T2154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.293252][ T2154] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.306976][ T2154] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.316661][ T2154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.347158][ T2154] usb 3-1: config 0 descriptor?? [ 163.551722][ T2154] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 163.846440][ T2154] usb 3-1: USB disconnect, device number 3 [ 164.054569][ T6567] fido_id[6567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 164.127132][ T6575] netlink: 292 bytes leftover after parsing attributes in process `syz.3.187'. [ 164.144142][ T6575] macvlan0: entered promiscuous mode [ 164.163350][ T6575] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 164.177948][ T6575] netlink: 'syz.3.187': attribute type 2 has an invalid length. [ 164.970122][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.844096][ T6605] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.705320][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 173.503296][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 173.515736][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 173.774904][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 174.022167][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 174.039142][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 174.056023][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.066512][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 174.081527][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 174.090029][ T9] usb 2-1: Product: syz [ 174.141505][ T9] usb 2-1: Manufacturer: syz [ 174.151578][ T9] usb 2-1: SerialNumber: syz [ 174.174825][ T9] usb 2-1: config 0 descriptor?? [ 174.181214][ T6633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.243096][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 174.292949][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 174.782833][ T5929] usb 2-1: USB disconnect, device number 2 [ 174.863686][ T5929] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 177.878555][ T6672] loop7: detected capacity change from 0 to 16384 [ 180.936065][ T2154] IPVS: starting estimator thread 0... [ 181.125323][ T6700] IPVS: using max 28 ests per chain, 67200 per kthread [ 181.404662][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.698525][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 181.743612][ C0] Illegal XDP return value 16128 on prog (id 31) dev lo, expect packet loss! [ 181.790234][ T6703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.999765][ T6712] tmpfs: Bad value for 'mpol' [ 183.327843][ T6726] mkiss: ax0: crc mode is auto. [ 183.354148][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 185.681502][ T5956] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 185.721170][ T30] audit: type=1326 audit(1749935647.802:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.4.237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3918e929 code=0x0 [ 185.966961][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.521554][ T5956] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 186.530656][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.064091][ T5956] usb 2-1: config 0 descriptor?? [ 188.331933][ T5956] usb 2-1: can't set config #0, error -71 [ 188.394202][ T5956] usb 2-1: USB disconnect, device number 3 [ 194.447157][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.454981][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.398763][ T6812] mkiss: ax0: crc mode is auto. [ 196.407023][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 197.066065][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.006859][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 198.019402][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.033840][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 198.144554][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.534757][ T9] usb 5-1: config 0 descriptor?? [ 198.677378][ T9] usb 5-1: can't set config #0, error -71 [ 198.720954][ T9] usb 5-1: USB disconnect, device number 2 [ 199.011874][ T6830] syz.0.260 (6830): drop_caches: 2 [ 199.030892][ T6830] syz.0.260 (6830): drop_caches: 2 [ 204.581468][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.591164][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.602505][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.618337][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.631646][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.682909][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 205.275637][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 205.307167][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.363797][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 205.394568][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.416119][ T6050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.443777][ T9] usb 3-1: config 0 descriptor?? [ 206.610096][ T6050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.691824][ T5845] Bluetooth: hci4: command tx timeout [ 208.311067][ T6050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.731997][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.739710][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.763149][ T5845] Bluetooth: hci4: command tx timeout [ 208.774936][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 208.783004][ T6898] bridge0: entered allmulticast mode [ 208.833115][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 208.890039][ T9] usb 3-1: USB disconnect, device number 4 [ 209.149859][ T6050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.541777][ T6899] bridge_slave_1: left allmulticast mode [ 209.698769][ T6899] bridge_slave_1: left promiscuous mode [ 209.720598][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.609647][ T6899] bridge_slave_0: left allmulticast mode [ 210.629164][ T6899] bridge_slave_0: left promiscuous mode [ 210.839021][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.871575][ T5838] Bluetooth: hci4: command tx timeout [ 212.259201][ T6050] bridge_slave_1: left promiscuous mode [ 212.278293][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.323824][ T6050] bridge_slave_0: left allmulticast mode [ 212.338706][ T6050] bridge_slave_0: left promiscuous mode [ 212.374478][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.521992][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 212.522933][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 212.528119][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 212.536527][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 212.921859][ T5842] Bluetooth: hci4: command tx timeout [ 214.399868][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.422431][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.439892][ T6050] bond0 (unregistering): Released all slaves [ 214.457731][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 214.531949][ T6872] chnl_net:caif_netlink_parms(): no params data found [ 214.641194][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 214.660382][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.701244][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 214.759526][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.808959][ T24] usb 3-1: config 0 descriptor?? [ 216.051722][ T5948] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 217.468858][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 217.611723][ T5948] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 217.627383][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 217.642461][ T5948] usb 2-1: config 0 has no interface number 0 [ 217.648698][ T5948] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.659730][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 217.697390][ T24] usb 3-1: USB disconnect, device number 5 [ 217.715214][ T5948] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 217.782062][ T5948] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.809309][ T5948] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.841531][ T5948] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 217.875990][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.038234][ T5948] usb 2-1: config 0 descriptor?? [ 218.121318][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.121717][ T5948] usb 2-1: can't set config #0, error -71 [ 218.133355][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.159425][ T6872] bridge_slave_0: entered allmulticast mode [ 218.287103][ T5948] usb 2-1: USB disconnect, device number 4 [ 218.316574][ T6872] bridge_slave_0: entered promiscuous mode [ 218.355867][ T6986] overlayfs: missing 'lowerdir' [ 218.723147][ T6050] hsr_slave_0: left promiscuous mode [ 218.738748][ T6050] hsr_slave_1: left promiscuous mode [ 218.762500][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.830872][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.856914][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.868836][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.939879][ T6050] veth1_macvtap: left promiscuous mode [ 218.957447][ T6050] veth0_macvtap: left promiscuous mode [ 218.981674][ T6050] veth1_vlan: left promiscuous mode [ 218.988083][ T6050] veth0_vlan: left promiscuous mode [ 219.142088][ T7000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.790268][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 221.839263][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 222.201486][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 222.436859][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.444407][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.451976][ T6872] bridge_slave_1: entered allmulticast mode [ 222.459783][ T6872] bridge_slave_1: entered promiscuous mode [ 222.718651][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.908651][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.698087][ T6872] team0: Port device team_slave_0 added [ 223.764838][ T6872] team0: Port device team_slave_1 added [ 223.929628][ T30] audit: type=1326 audit(1749935686.022:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.1.311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f0938e929 code=0x0 [ 224.028403][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.039755][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.074018][ T6872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.220605][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.546963][ T918] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 224.561783][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.599524][ T6872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.733359][ T918] usb 3-1: Using ep0 maxpacket: 16 [ 224.761785][ T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.788881][ T6872] hsr_slave_0: entered promiscuous mode [ 224.794613][ T918] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 224.805251][ T6872] hsr_slave_1: entered promiscuous mode [ 224.822607][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.847844][ T6872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.874116][ T918] usb 3-1: config 0 descriptor?? [ 224.884722][ T6872] Cannot create hsr debugfs directory [ 225.689832][ T918] usbhid 3-1:0.0: can't add hid device: -71 [ 225.711529][ T918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 225.751773][ T918] usb 3-1: USB disconnect, device number 6 [ 226.031271][ T7066] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 226.061899][ T7066] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.673767][ T918] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 228.801423][ T6872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.849331][ T6872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.852279][ T7083] netlink: 80 bytes leftover after parsing attributes in process `syz.1.320'. [ 228.881839][ T918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.897496][ T918] usb 3-1: config 0 has no interfaces? [ 228.914110][ T918] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 228.961190][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.981594][ T6872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.025414][ T918] usb 3-1: config 0 descriptor?? [ 229.046557][ T6872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.231450][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 229.287510][ T918] usb 3-1: USB disconnect, device number 7 [ 229.396839][ T5922] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.439023][ T5922] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.471763][ T5922] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.480842][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.564568][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.575619][ T7083] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 229.586801][ T30] audit: type=1326 audit(1749935691.682:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.4.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3918e929 code=0x0 [ 229.617879][ T5922] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.659236][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.710937][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.718142][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.768435][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.775747][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.864681][ T7085] ------------[ cut here ]------------ [ 229.870294][ T7085] WARNING: CPU: 0 PID: 7085 at drivers/gpu/drm/drm_prime.c:193 drm_prime_destroy_file_private+0x4b/0x60 [ 229.882925][ T7085] Modules linked in: [ 229.886862][ T7085] CPU: 0 UID: 0 PID: 7085 Comm: syz.1.320 Not tainted 6.16.0-rc1-next-20250613-syzkaller #0 PREEMPT(full) [ 229.899027][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.909213][ T7085] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60 [ 229.916042][ T7085] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 fd 74 bd fc 48 83 3b 00 75 0c e8 b2 b1 59 fc 5b e9 bc f8 04 06 cc e8 a6 b1 59 fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 229.935868][ T7085] RSP: 0018:ffffc9001ab57c80 EFLAGS: 00010283 [ 229.942079][ T7085] RAX: ffffffff8566b5ea RBX: ffff888143bd2410 RCX: 0000000000080000 [ 229.950120][ T7085] RDX: ffffc9000dd09000 RSI: 000000000000095c RDI: 000000000000095d [ 229.958210][ T7085] RBP: 0000000000000000 R08: ffffc9001ab57c07 R09: 1ffff9200356af80 [ 229.966381][ T7085] R10: dffffc0000000000 R11: fffff5200356af81 R12: ffff888142f58000 [ 229.974519][ T7085] R13: ffff888143bd22d8 R14: 0000000000000000 R15: dffffc0000000000 [ 229.983356][ T7085] FS: 00007f3f0a1d96c0(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 229.992935][ T7085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.999566][ T7085] CR2: 00007f485bd03619 CR3: 0000000055cf0000 CR4: 00000000003526f0 [ 230.007618][ T7085] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.015675][ T7085] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.023708][ T7085] Call Trace: [ 230.027020][ T7085] [ 230.029976][ T7085] drm_file_free+0x79a/0x960 [ 230.034671][ T7085] drm_release+0x2de/0x3f0 [ 230.039155][ T7085] ? __pfx_drm_release+0x10/0x10 [ 230.044327][ T7085] __fput+0x44c/0xa70 [ 230.048397][ T7085] task_work_run+0x1d4/0x260 [ 230.053096][ T7085] ? __pfx_task_work_run+0x10/0x10 [ 230.058278][ T7085] ? exit_to_user_mode_loop+0x40/0x110 [ 230.063840][ T7085] exit_to_user_mode_loop+0xec/0x110 [ 230.069173][ T7085] do_syscall_64+0x2bd/0x3b0 [ 230.073852][ T7085] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.079091][ T7085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.086013][ T7085] ? clear_bhb_loop+0x60/0xb0 [ 230.090710][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.097315][ T7085] RIP: 0033:0x7f3f0938e929 [ 230.101794][ T7085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.121495][ T7085] RSP: 002b:00007f3f0a1d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 230.129942][ T7085] RAX: 0000000000000000 RBX: 00007f3f095b6080 RCX: 00007f3f0938e929 [ 230.138005][ T7085] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 230.146073][ T7085] RBP: 00007f3f09410b39 R08: 0000000000000000 R09: 0000000000000000 [ 230.154110][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.162188][ T7085] R13: 0000000000000000 R14: 00007f3f095b6080 R15: 00007ffcad1802e8 [ 230.170211][ T7085] [ 230.173301][ T7085] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.180584][ T7085] CPU: 0 UID: 0 PID: 7085 Comm: syz.1.320 Not tainted 6.16.0-rc1-next-20250613-syzkaller #0 PREEMPT(full) [ 230.191954][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.202010][ T7085] Call Trace: [ 230.205310][ T7085] [ 230.208241][ T7085] dump_stack_lvl+0x99/0x250 [ 230.212854][ T7085] ? __asan_memcpy+0x40/0x70 [ 230.217458][ T7085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.222673][ T7085] ? __pfx__printk+0x10/0x10 [ 230.227304][ T7085] panic+0x2db/0x790 [ 230.231242][ T7085] ? __pfx_panic+0x10/0x10 [ 230.235670][ T7085] ? show_trace_log_lvl+0x4fb/0x550 [ 230.240895][ T7085] __warn+0x31b/0x4b0 [ 230.244890][ T7085] ? drm_prime_destroy_file_private+0x4b/0x60 [ 230.250977][ T7085] ? drm_prime_destroy_file_private+0x4b/0x60 [ 230.257056][ T7085] report_bug+0x2be/0x4f0 [ 230.261421][ T7085] ? drm_prime_destroy_file_private+0x4b/0x60 [ 230.267495][ T7085] ? drm_prime_destroy_file_private+0x4b/0x60 [ 230.273563][ T7085] ? drm_prime_destroy_file_private+0x4d/0x60 [ 230.279630][ T7085] handle_bug+0x84/0x160 [ 230.283885][ T7085] exc_invalid_op+0x1a/0x50 [ 230.288416][ T7085] asm_exc_invalid_op+0x1a/0x20 [ 230.293294][ T7085] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60 [ 230.299998][ T7085] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 fd 74 bd fc 48 83 3b 00 75 0c e8 b2 b1 59 fc 5b e9 bc f8 04 06 cc e8 a6 b1 59 fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 230.319611][ T7085] RSP: 0018:ffffc9001ab57c80 EFLAGS: 00010283 [ 230.325690][ T7085] RAX: ffffffff8566b5ea RBX: ffff888143bd2410 RCX: 0000000000080000 [ 230.333664][ T7085] RDX: ffffc9000dd09000 RSI: 000000000000095c RDI: 000000000000095d [ 230.341646][ T7085] RBP: 0000000000000000 R08: ffffc9001ab57c07 R09: 1ffff9200356af80 [ 230.349625][ T7085] R10: dffffc0000000000 R11: fffff5200356af81 R12: ffff888142f58000 [ 230.357600][ T7085] R13: ffff888143bd22d8 R14: 0000000000000000 R15: dffffc0000000000 [ 230.365577][ T7085] ? drm_prime_destroy_file_private+0x4a/0x60 [ 230.371661][ T7085] drm_file_free+0x79a/0x960 [ 230.376258][ T7085] drm_release+0x2de/0x3f0 [ 230.380675][ T7085] ? __pfx_drm_release+0x10/0x10 [ 230.385612][ T7085] __fput+0x44c/0xa70 [ 230.389611][ T7085] task_work_run+0x1d4/0x260 [ 230.394214][ T7085] ? __pfx_task_work_run+0x10/0x10 [ 230.399335][ T7085] ? exit_to_user_mode_loop+0x40/0x110 [ 230.404801][ T7085] exit_to_user_mode_loop+0xec/0x110 [ 230.410091][ T7085] do_syscall_64+0x2bd/0x3b0 [ 230.414690][ T7085] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.419894][ T7085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.425977][ T7085] ? clear_bhb_loop+0x60/0xb0 [ 230.430658][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.436557][ T7085] RIP: 0033:0x7f3f0938e929 [ 230.440973][ T7085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.460586][ T7085] RSP: 002b:00007f3f0a1d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 230.469011][ T7085] RAX: 0000000000000000 RBX: 00007f3f095b6080 RCX: 00007f3f0938e929 [ 230.476993][ T7085] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 230.484969][ T7085] RBP: 00007f3f09410b39 R08: 0000000000000000 R09: 0000000000000000 [ 230.493029][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.500999][ T7085] R13: 0000000000000000 R14: 00007f3f095b6080 R15: 00007ffcad1802e8 [ 230.508986][ T7085] [ 230.512354][ T7085] Kernel Offset: disabled [ 230.516690][ T7085] Rebooting in 86400 seconds..