last executing test programs: 8.880209905s ago: executing program 3 (id=9): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 8.725752506s ago: executing program 3 (id=10): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x5, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x200e, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x172, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x1000004, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) 8.034279818s ago: executing program 3 (id=12): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 6.677219019s ago: executing program 3 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x54}}, 0x0) 6.184795816s ago: executing program 3 (id=16): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0x9a090a, 0x937}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x30, "69dbe06d441544cbaecb5b97d814627d71c8f3e996b3fcf1ac79d3322bf3ef1f7e0cb4615056cb80b20ea31165aa664a"}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socket$inet6(0xa, 0x3, 0x2f) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd408205"], 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000100)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 4.737098788s ago: executing program 2 (id=25): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0x980913}) 4.689117207s ago: executing program 2 (id=26): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x9, "2632cd5f"}, @local=@item_4={0x3, 0x2, 0x5, "214deb20"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 4.241797758s ago: executing program 1 (id=30): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "ff0f000000000000f5a72d8604ffdefe00", 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') close_range(r1, 0xffffffffffffffff, 0x0) 4.096690607s ago: executing program 1 (id=31): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x5, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x200e, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x172, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x1000004, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) 4.082317648s ago: executing program 0 (id=32): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 3.995194026s ago: executing program 1 (id=33): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x36, 0xc8, "fac392f8e4108cca"}}}, 0xe) socket$inet6_udp(0xa, 0x2, 0x0) 3.919747503s ago: executing program 0 (id=34): syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.860411332s ago: executing program 1 (id=35): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 3.686524382s ago: executing program 0 (id=36): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xc800) 3.661788727s ago: executing program 1 (id=37): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 3.535723642s ago: executing program 0 (id=38): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x0, @vbi={0x80000000, 0x20000000, 0x1, 0x41416770, [0x1, 0x7fffffff], [0x40, 0x67f], 0x1}}) 3.391028385s ago: executing program 0 (id=39): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000200)={0xc7, 0x0, 0x1}) clock_settime(0xfffffffb, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.607724565s ago: executing program 3 (id=40): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x20000}, 0x0, 0x5a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000440)="79002eb4870f20c06635000001000f22c00f01c4b8e30d8ed0660fea7441f3acf30f062ef3a5f3d37954", 0x1d}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x0, 0x1ff}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x3, 0x0, 0x2}, {0xeda7, 0x4, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000140)) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x0, 0x5, 0x2, {0x2, 0x31}}, &(0x7f00000005c0)={0x0, 0x3, 0x32, @string={0x32, 0x3, "275347946972b2e5113e98cb33d2510145ca03ee6cee9e449b9bd8666a4c3ff7a37eedc898c0253f436e682e9c29dcc1"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="000f0c000000050f0c0001071002106c05164bbd5d5dbf8eb9cc7379b389a128377499c1ebbf19ed789b646ab2021532cb3baebfe8be187e3572837d3c70beb09f926fd7e592d0f54b"], &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x93, 0x8, 0x2, 0x0, "85130fe4", "45af8fcd"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0xb, 0x8, 0x8, 0x8}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000940)={0x20, 0xa, 0x54, "882c1afee303f478f80edc3bd0297f17fa407f01797daf98f58f17144990e8ca551a23b85c88e67c7c34b19f179fcd3af66d47779d29c1bcbd11a416ef72b53efb25672bb975ab1e1ba7d8479dd261acefda84d9"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x200, 0x4, [0x0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xab}, &(0x7f0000000b00)={0x40, 0x9, 0x1}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "8d17"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @random="41064e4a0c45"}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "1939"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.403432712s ago: executing program 2 (id=41): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x5, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x200e, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x172, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x1000004, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) 2.201823118s ago: executing program 2 (id=42): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 1.992326243s ago: executing program 0 (id=43): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 1.953640427s ago: executing program 2 (id=44): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x64) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r5, 0x209}], 0x1, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 688.063002ms ago: executing program 2 (id=45): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 0s ago: executing program 1 (id=46): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e1247", 0x84, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 74.889326][ T5598] cgroup: Unknown subsys name 'net' [ 75.132388][ T5598] cgroup: Unknown subsys name 'cpuset' [ 75.185994][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.831510][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.053016][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.065880][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.067021][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.068481][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.069335][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.091269][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.097779][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.099971][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.128696][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.129447][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.323917][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.343259][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.357786][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.370748][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.374350][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.388461][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.402893][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.411046][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.411815][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.441574][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.130939][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.131117][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.131265][ T5610] bridge_slave_0: entered allmulticast mode [ 81.133991][ T5610] bridge_slave_0: entered promiscuous mode [ 81.152320][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.153064][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.153336][ T5615] bridge_slave_0: entered allmulticast mode [ 81.157538][ T5615] bridge_slave_0: entered promiscuous mode [ 81.160533][ T4926] Bluetooth: hci0: command tx timeout [ 81.181722][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.181992][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.182227][ T5610] bridge_slave_1: entered allmulticast mode [ 81.185258][ T5610] bridge_slave_1: entered promiscuous mode [ 81.203756][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.204025][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.204538][ T5615] bridge_slave_1: entered allmulticast mode [ 81.208315][ T5615] bridge_slave_1: entered promiscuous mode [ 81.245473][ T4926] Bluetooth: hci1: command tx timeout [ 81.347569][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.370643][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.371021][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.371370][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.371616][ T5625] bridge_slave_0: entered allmulticast mode [ 81.373996][ T5625] bridge_slave_0: entered promiscuous mode [ 81.382859][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.383212][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.383478][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.383761][ T5624] bridge_slave_0: entered allmulticast mode [ 81.391400][ T5624] bridge_slave_0: entered promiscuous mode [ 81.409030][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.409667][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.409956][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.410196][ T5625] bridge_slave_1: entered allmulticast mode [ 81.413316][ T5625] bridge_slave_1: entered promiscuous mode [ 81.440958][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.441267][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.441491][ T5624] bridge_slave_1: entered allmulticast mode [ 81.446756][ T5624] bridge_slave_1: entered promiscuous mode [ 81.475532][ T4926] Bluetooth: hci2: command tx timeout [ 81.475627][ T5630] Bluetooth: hci3: command tx timeout [ 81.603657][ T5610] team0: Port device team_slave_0 added [ 81.627968][ T822] cfg80211: failed to load regulatory.db [ 81.653379][ T5615] team0: Port device team_slave_0 added [ 81.833078][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.836421][ T5610] team0: Port device team_slave_1 added [ 81.851096][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.853602][ T5615] team0: Port device team_slave_1 added [ 81.868378][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.894875][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.990321][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.990332][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.990346][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.015842][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.015858][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.015881][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.021625][ T5625] team0: Port device team_slave_0 added [ 82.024325][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.024338][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.024360][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.034207][ T5624] team0: Port device team_slave_0 added [ 82.039410][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.039424][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.039447][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.043840][ T5625] team0: Port device team_slave_1 added [ 82.065636][ T5624] team0: Port device team_slave_1 added [ 82.246746][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.246761][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.246784][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.294664][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.294680][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.294710][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.300030][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.300043][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.300065][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.355540][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.355557][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.355589][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.390825][ T5610] hsr_slave_0: entered promiscuous mode [ 82.392852][ T5610] hsr_slave_1: entered promiscuous mode [ 82.409157][ T5615] hsr_slave_0: entered promiscuous mode [ 82.411132][ T5615] hsr_slave_1: entered promiscuous mode [ 82.412829][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 82.412934][ T5615] Cannot create hsr debugfs directory [ 82.560639][ T5625] hsr_slave_0: entered promiscuous mode [ 82.561740][ T5625] hsr_slave_1: entered promiscuous mode [ 82.562665][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 82.562686][ T5625] Cannot create hsr debugfs directory [ 82.604997][ T5624] hsr_slave_0: entered promiscuous mode [ 82.607479][ T5624] hsr_slave_1: entered promiscuous mode [ 82.609082][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 82.609103][ T5624] Cannot create hsr debugfs directory [ 83.235662][ T5630] Bluetooth: hci0: command tx timeout [ 83.316784][ T5630] Bluetooth: hci1: command tx timeout [ 83.477290][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.518908][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.523342][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.548641][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.555835][ T5630] Bluetooth: hci2: command tx timeout [ 83.555862][ T5630] Bluetooth: hci3: command tx timeout [ 83.560353][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.600455][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.622887][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.649195][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.780868][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.811416][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.823698][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.850611][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.865693][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.901901][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.929531][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.970399][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.123132][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.148949][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.161046][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.188843][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.206980][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.252901][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.281316][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.310678][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.480856][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.511994][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.516584][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.561121][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.571578][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.612651][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.624734][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.649176][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.699001][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.806984][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.850523][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.858987][ T3827] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.859220][ T3827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.932025][ T3827] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.932247][ T3827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.003998][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.051799][ T3827] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.052037][ T3827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.072325][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.101827][ T3827] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.101972][ T3827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.209777][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.280138][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.280753][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.309523][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.315638][ T4926] Bluetooth: hci0: command tx timeout [ 85.380446][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.380693][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.396781][ T4926] Bluetooth: hci1: command tx timeout [ 85.494257][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.563939][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.564072][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.627543][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.627762][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.637060][ T4926] Bluetooth: hci3: command tx timeout [ 85.637089][ T4926] Bluetooth: hci2: command tx timeout [ 86.373242][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.677146][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.776826][ T5610] veth0_vlan: entered promiscuous mode [ 86.861388][ T5610] veth1_vlan: entered promiscuous mode [ 86.971075][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.064975][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.075252][ T5625] veth0_vlan: entered promiscuous mode [ 87.117654][ T5610] veth0_macvtap: entered promiscuous mode [ 87.134745][ T5625] veth1_vlan: entered promiscuous mode [ 87.150802][ T5610] veth1_macvtap: entered promiscuous mode [ 87.258970][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.261764][ T5624] veth0_vlan: entered promiscuous mode [ 87.300002][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.349010][ T5624] veth1_vlan: entered promiscuous mode [ 87.356228][ T3821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.360105][ T5625] veth0_macvtap: entered promiscuous mode [ 87.362069][ T5615] veth0_vlan: entered promiscuous mode [ 87.364088][ T3821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.379806][ T3821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.392925][ T3821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.395559][ T5630] Bluetooth: hci0: command tx timeout [ 87.404537][ T5625] veth1_macvtap: entered promiscuous mode [ 87.483250][ T5630] Bluetooth: hci1: command tx timeout [ 87.502374][ T5615] veth1_vlan: entered promiscuous mode [ 87.680362][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.717131][ T5630] Bluetooth: hci2: command tx timeout [ 87.717160][ T5630] Bluetooth: hci3: command tx timeout [ 87.789040][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.817298][ T5624] veth0_macvtap: entered promiscuous mode [ 87.850119][ T3827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.876555][ T5624] veth1_macvtap: entered promiscuous mode [ 87.879881][ T3827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.907210][ T3827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.924745][ T3827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.963785][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.963808][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.053482][ T5615] veth0_macvtap: entered promiscuous mode [ 88.178898][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.179742][ T5615] veth1_macvtap: entered promiscuous mode [ 88.302972][ T214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.302989][ T214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.335222][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.582480][ T3821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.596991][ T3827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.597009][ T3827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.597866][ T3821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.614322][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.623682][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.627653][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.687003][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.821334][ T1037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.929661][ T1037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.930069][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.930097][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.964362][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.011553][ T3738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.417435][ T5765] overlayfs: failed to resolve './file1': -2 [ 89.573874][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.573894][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.304016][ T214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.304036][ T214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.525776][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.525796][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.572604][ T5776] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 93.572628][ T5776] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 93.572650][ T5776] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 93.653882][ T5776] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.728517][ T5776] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.781859][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.781878][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.542689][ T5793] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 95.924291][ T5717] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 96.071153][ T5801] overlayfs: failed to resolve './file1': -2 [ 96.154682][ T5799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.485278][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.489362][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.489383][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.489408][ T5717] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 97.489420][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.644351][ T5799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.751868][ T5811] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.779720][ T5717] usb 2-1: config 0 descriptor?? [ 98.178481][ T5717] usbhid 2-1:0.0: can't add hid device: -71 [ 98.178599][ T5717] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 98.576541][ T5717] usb 2-1: USB disconnect, device number 2 [ 98.596566][ T5822] comedi comedi4: bad chanlist[0]=0xfffffffe chan=65534 range length=2 [ 98.850350][ T5724] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.960180][ T5828] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 99.019365][ T5724] usb 4-1: no configurations [ 99.019384][ T5724] usb 4-1: can't read configurations, error -22 [ 99.149656][ T5830] overlayfs: failed to resolve './bus': -2 [ 99.296457][ T5724] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.486162][ T5724] usb 4-1: no configurations [ 99.486181][ T5724] usb 4-1: can't read configurations, error -22 [ 99.518496][ T5846] sg_write: data in/out 732/14 bytes for SCSI command 0x1-- guessing data in; [ 99.518496][ T5846] program syz.0.28 not setting count and/or reply_len properly [ 99.567350][ T5724] usb usb4-port1: attempt power cycle [ 99.944881][ T5854] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.944900][ T5854] overlayfs: failed to set xattr on upper [ 99.944914][ T5854] overlayfs: ...falling back to redirect_dir=nofollow. [ 99.944919][ T5854] overlayfs: ...falling back to index=off. [ 99.944922][ T5854] overlayfs: ...falling back to uuid=null. [ 99.944945][ T5854] overlayfs: conflicting lowerdir path [ 99.959093][ T5718] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 99.975717][ T5724] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.999537][ T5724] usb 4-1: no configurations [ 99.999555][ T5724] usb 4-1: can't read configurations, error -22 [ 100.112767][ T5858] overlayfs: failed to resolve './bus': -2 [ 100.145479][ T5724] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.151948][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.152184][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.152200][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.152222][ T5718] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 100.152234][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.215252][ T5724] usb 4-1: no configurations [ 100.215273][ T5724] usb 4-1: can't read configurations, error -22 [ 100.226831][ T5724] usb usb4-port1: unable to enumerate USB device [ 100.257605][ T5860] Bluetooth: MGMT ver 1.23 [ 100.300526][ T5718] usb 3-1: config 0 descriptor?? [ 100.396115][ T5864] Zero length message leads to an empty skb [ 100.646394][ T5717] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.816760][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 100.820467][ T5718] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found [ 100.820710][ T5718] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found [ 100.824127][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.863936][ T5717] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 100.863953][ T5717] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 100.863963][ T5717] usb 2-1: config 14 has no interface number 0 [ 100.863971][ T5717] usb 2-1: config 14 has no interface number 1 [ 100.864011][ T5717] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 100.864023][ T5717] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 100.864036][ T5717] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 100.864048][ T5717] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 100.864062][ T5717] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 100.864075][ T5717] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.864088][ T5717] usb 2-1: config 14 interface 57 has no altsetting 0 [ 100.864097][ T5717] usb 2-1: config 14 interface 228 has no altsetting 0 [ 100.882726][ T5717] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 100.882756][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.882775][ T5717] usb 2-1: Product: syz [ 100.882788][ T5717] usb 2-1: Manufacturer: syz [ 100.882801][ T5717] usb 2-1: SerialNumber: syz [ 101.005175][ T5718] usb 3-1: USB disconnect, device number 2 [ 101.434243][ T5717] legousbtower 2-1:14.57: interrupt endpoints not found [ 101.806458][ T5687] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.825012][ T5717] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 101.862369][ T5717] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 101.885124][ T5877] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.887413][ T5877] overlayfs: failed to set xattr on upper [ 101.887426][ T5877] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.887434][ T5877] overlayfs: ...falling back to index=off. [ 101.887441][ T5877] overlayfs: ...falling back to uuid=null. [ 101.887491][ T5877] overlayfs: conflicting lowerdir path [ 101.962593][ T5687] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.006891][ T5687] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 102.011929][ T5687] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 102.011958][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.011985][ T5687] usb 4-1: Product: syz [ 102.011999][ T5687] usb 4-1: Manufacturer: syz [ 102.012013][ T5687] usb 4-1: SerialNumber: syz [ 102.078294][ T5879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.417653][ T5687] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 103.146455][ T5885] usb 2-1: LEGO USB Tower reset control request failed [ 103.308333][ T5717] usb 2-1: USB disconnect, device number 3 [ 103.523540][ T5687] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 103.523557][ T5687] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 103.779748][ T5717] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 103.858760][ T5889] overlayfs: failed to resolve './bus': -2 [ 103.925159][ T5687] usb 4-1: invalid uac2 rates [ 103.930803][ T5687] usb 4-1: invalid uac2 rates [ 103.931463][ T5687] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 103.932007][ T5687] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 104.083384][ T5879] ------------[ cut here ]------------ [ 104.083395][ T5879] task_rq(p) != rq [ 104.083404][ T5879] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#1: syz.0.43/5879 [ 104.083442][ T5879] Modules linked in: [ 104.083470][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: syz.0.43 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 104.083492][ T5879] Tainted: [L]=SOFTLOCKUP [ 104.083497][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.083508][ T5879] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 104.083530][ T5879] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 104.083543][ T5879] RSP: 0018:ffffc9000539f520 EFLAGS: 00010006 [ 104.083555][ T5879] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 104.083566][ T5879] RDX: 0000000000000000 RSI: ffff888037f3be00 RDI: ffff8880b873ba40 [ 104.083577][ T5879] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 104.083587][ T5879] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 104.083598][ T5879] R13: 1ffff110170e78d6 R14: ffff888037f3be00 R15: ffffffff8dc257d0 [ 104.083609][ T5879] FS: 00007fb6d17366c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 104.083622][ T5879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.083632][ T5879] CR2: 00007f1d697556b8 CR3: 000000005ad2e000 CR4: 00000000003526f0 [ 104.083646][ T5879] Call Trace: [ 104.083658][ T5879] [ 104.083668][ T5879] set_next_task_fair+0xa68/0xce0 [ 104.083692][ T5879] __schedule+0x3e03/0x5550 [ 104.083729][ T5879] ? __pfx___schedule+0x10/0x10 [ 104.083752][ T5879] ? schedule+0x90/0x360 [ 104.083770][ T5879] schedule+0x164/0x360 [ 104.083788][ T5879] schedule_timeout+0xc3/0x2c0 [ 104.083804][ T5879] ? __hrtimer_rearm_deferred+0x99/0x440 [ 104.083822][ T5879] ? __pfx_schedule_timeout+0x10/0x10 [ 104.083839][ T5879] ? do_raw_spin_lock+0x12b/0x2f0 [ 104.083861][ T5879] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.083878][ T5879] ? wait_for_completion+0x274/0x5e0 [ 104.083897][ T5879] wait_for_completion+0x2cc/0x5e0 [ 104.083923][ T5879] ? __pfx_wait_for_completion+0x10/0x10 [ 104.083941][ T5879] ? generic_exec_single+0x191/0x430 [ 104.083961][ T5879] ? smp_call_function_single_async+0xaa/0x110 [ 104.083982][ T5879] rdmsrq_safe_on_cpu+0x18c/0x240 [ 104.084004][ T5879] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 104.084022][ T5879] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 104.084040][ T5879] ? __might_fault+0xaf/0x130 [ 104.084069][ T5879] msr_read+0x13d/0x240 [ 104.084093][ T5879] ? __pfx_msr_read+0x10/0x10 [ 104.084116][ T5879] ? rw_verify_area+0x2ac/0x4e0 [ 104.084133][ T5879] ? __pfx_msr_read+0x10/0x10 [ 104.084155][ T5879] vfs_read+0x212/0xa80 [ 104.084177][ T5879] ? __pfx_vfs_read+0x10/0x10 [ 104.084195][ T5879] ? __fget_files+0x2a/0x420 [ 104.084217][ T5879] ? __fget_files+0x2a/0x420 [ 104.084231][ T5879] ? __fget_files+0x3a6/0x420 [ 104.084245][ T5879] ? __fget_files+0x2a/0x420 [ 104.084266][ T5879] ksys_read+0x156/0x270 [ 104.084285][ T5879] ? __pfx_ksys_read+0x10/0x10 [ 104.084308][ T5879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.084324][ T5879] do_syscall_64+0x174/0x580 [ 104.084342][ T5879] ? trace_irq_disable+0x3b/0x140 [ 104.084360][ T5879] ? clear_bhb_loop+0x40/0x90 [ 104.084379][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.084394][ T5879] RIP: 0033:0x7fb6d34dce59 [ 104.084410][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.084423][ T5879] RSP: 002b:00007fb6d1736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.084437][ T5879] RAX: ffffffffffffffda RBX: 00007fb6d3755fa0 RCX: 00007fb6d34dce59 [ 104.084449][ T5879] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 104.084459][ T5879] RBP: 00007fb6d3572e6f R08: 0000000000000000 R09: 0000000000000000 [ 104.084468][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.084478][ T5879] R13: 00007fb6d3756038 R14: 00007fb6d3755fa0 R15: 00007ffdd10bc9e8 [ 104.084500][ T5879] [ 104.084507][ T5879] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.084520][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: syz.0.43 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 104.084541][ T5879] Tainted: [L]=SOFTLOCKUP [ 104.084546][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.084555][ T5879] Call Trace: [ 104.084560][ T5879] [ 104.084566][ T5879] vpanic+0x56c/0xa60 [ 104.084588][ T5879] ? __pfx__printk+0x10/0x10 [ 104.084604][ T5879] ? __pfx_vpanic+0x10/0x10 [ 104.084624][ T5879] ? is_bpf_text_address+0x292/0x2b0 [ 104.084645][ T5879] ? is_bpf_text_address+0x26/0x2b0 [ 104.084672][ T5879] panic+0xc5/0xd0 [ 104.084693][ T5879] ? __pfx_panic+0x10/0x10 [ 104.084725][ T5879] __warn+0x315/0x4c0 [ 104.084745][ T5879] ? hrtick_start_fair+0x196/0x1f0 [ 104.084765][ T5879] ? hrtick_start_fair+0x196/0x1f0 [ 104.084785][ T5879] __report_bug+0x339/0x540 [ 104.084807][ T5879] ? hrtick_start_fair+0x196/0x1f0 [ 104.084827][ T5879] ? __pfx___report_bug+0x10/0x10 [ 104.084845][ T5879] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.084871][ T5879] ? hrtick_start_fair+0x196/0x1f0 [ 104.084889][ T5879] report_bug+0x16a/0x220 [ 104.084908][ T5879] ? hrtick_start_fair+0x196/0x1f0 [ 104.084925][ T5879] ? hrtick_start_fair+0x198/0x1f0 [ 104.084944][ T5879] handle_bug+0x9c/0x200 [ 104.084964][ T5879] exc_invalid_op+0x1a/0x50 [ 104.084985][ T5879] asm_exc_invalid_op+0x1a/0x20 [ 104.084999][ T5879] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 104.085018][ T5879] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 104.085030][ T5879] RSP: 0018:ffffc9000539f520 EFLAGS: 00010006 [ 104.085042][ T5879] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 104.085053][ T5879] RDX: 0000000000000000 RSI: ffff888037f3be00 RDI: ffff8880b873ba40 [ 104.085063][ T5879] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 104.085074][ T5879] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 104.085085][ T5879] R13: 1ffff110170e78d6 R14: ffff888037f3be00 R15: ffffffff8dc257d0 [ 104.085101][ T5879] ? set_next_task_fair+0xa4e/0xce0 [ 104.085122][ T5879] set_next_task_fair+0xa68/0xce0 [ 104.085143][ T5879] __schedule+0x3e03/0x5550 [ 104.085177][ T5879] ? __pfx___schedule+0x10/0x10 [ 104.085199][ T5879] ? schedule+0x90/0x360 [ 104.085222][ T5879] schedule+0x164/0x360 [ 104.085240][ T5879] schedule_timeout+0xc3/0x2c0 [ 104.085255][ T5879] ? __hrtimer_rearm_deferred+0x99/0x440 [ 104.085273][ T5879] ? __pfx_schedule_timeout+0x10/0x10 [ 104.085291][ T5879] ? do_raw_spin_lock+0x12b/0x2f0 [ 104.085313][ T5879] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.085331][ T5879] ? wait_for_completion+0x274/0x5e0 [ 104.085350][ T5879] wait_for_completion+0x2cc/0x5e0 [ 104.085376][ T5879] ? __pfx_wait_for_completion+0x10/0x10 [ 104.085396][ T5879] ? generic_exec_single+0x191/0x430 [ 104.085417][ T5879] ? smp_call_function_single_async+0xaa/0x110 [ 104.085438][ T5879] rdmsrq_safe_on_cpu+0x18c/0x240 [ 104.085459][ T5879] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 104.085478][ T5879] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 104.085496][ T5879] ? __might_fault+0xaf/0x130 [ 104.085526][ T5879] msr_read+0x13d/0x240 [ 104.085549][ T5879] ? __pfx_msr_read+0x10/0x10 [ 104.085573][ T5879] ? rw_verify_area+0x2ac/0x4e0 [ 104.085590][ T5879] ? __pfx_msr_read+0x10/0x10 [ 104.085612][ T5879] vfs_read+0x212/0xa80 [ 104.085634][ T5879] ? __pfx_vfs_read+0x10/0x10 [ 104.085653][ T5879] ? __fget_files+0x2a/0x420 [ 104.085669][ T5879] ? __fget_files+0x2a/0x420 [ 104.085683][ T5879] ? __fget_files+0x3a6/0x420 [ 104.085697][ T5879] ? __fget_files+0x2a/0x420 [ 104.085718][ T5879] ksys_read+0x156/0x270 [ 104.085737][ T5879] ? __pfx_ksys_read+0x10/0x10 [ 104.085759][ T5879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.085775][ T5879] do_syscall_64+0x174/0x580 [ 104.085793][ T5879] ? trace_irq_disable+0x3b/0x140 [ 104.085811][ T5879] ? clear_bhb_loop+0x40/0x90 [ 104.085829][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.085844][ T5879] RIP: 0033:0x7fb6d34dce59 [ 104.085855][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.085867][ T5879] RSP: 002b:00007fb6d1736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.085881][ T5879] RAX: ffffffffffffffda RBX: 00007fb6d3755fa0 RCX: 00007fb6d34dce59 [ 104.085892][ T5879] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 104.085902][ T5879] RBP: 00007fb6d3572e6f R08: 0000000000000000 R09: 0000000000000000 [ 104.085911][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.085919][ T5879] R13: 00007fb6d3756038 R14: 00007fb6d3755fa0 R15: 00007ffdd10bc9e8 [ 104.085941][ T5879] [ 105.177398][ T5879] Shutting down cpus with NMI [ 105.177562][ T5879] Kernel Offset: disabled