last executing test programs: 9.278586792s ago: executing program 3 (id=4): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fd1c291b3091ec1a06000000975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 9.177917643s ago: executing program 0 (id=1): syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x0, 0x7, 0x4, "a6fa027b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.101177323s ago: executing program 2 (id=3): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0182101, &(0x7f00000004c0)) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xd4, 0x0, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800ef0100000000ffff01ff0a000000000200000000000006000880665600002aeeca542dd18e5e622573f7881549783c8c770d44863e379465801ac11faee327c4533f75aa3bd724a536fbc58ed83fa00b69a3966b14c7c1fb428c120b047638c65efe747f3938faf7fa19223c55c680d329e5f23e17a940f72e015c580bdd6047eb4432141eba15f303276d88455b18f4c0f277a247f921728dcf"], 0x24}, 0x1, 0x11}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x400042, 0x40, 0x2}, 0x18) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x1d, 0x0, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x1d, 0x3, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7c}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r5, &(0x7f0000000080)=""/50, 0x32, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) socket$inet_udplite(0x2, 0x2, 0x88) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r6, r6, r6}, &(0x7f0000000080)=""/34, 0x22, &(0x7f0000000000)={&(0x7f0000000280)={'wp512-generic\x00'}}) 9.069022203s ago: executing program 3 (id=6): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xdd3) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x2, 0x2002) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x90, 0x11, 0x148, 0x0, 0x0, 0x2d4, 0x2a8, 0x2a8, 0x2d4, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x1e4, 0x244, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'team_slave_1\x00', {0x5, 0x7, 0x2, 0xffffd5ee, 0x5, 0x1ff, 0xb, 0x18, 0x18}, {0x8}}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c4) 7.354527384s ago: executing program 0 (id=9): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf5a1, 0x1f, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000c40)={0x15, 0x0, 0x38}) 7.331198684s ago: executing program 2 (id=10): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) clock_adjtime(0x0, 0x0) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) r7 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x1b69, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x3, 0x0}) io_uring_enter(r7, 0x47be, 0x40098f2, 0x20, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x15, 0x3, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'nicvf0\x00', 0x800}) socket$netlink(0x10, 0x3, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) syz_open_dev$video(0x0, 0x8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) 7.183369645s ago: executing program 3 (id=12): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x3818, 0x8) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x10) read$dsp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.82654169s ago: executing program 2 (id=13): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) rmdir(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) 4.706863751s ago: executing program 1 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000004c0)="800000800000210ee7decd7a000000008100d2863bee7568", 0x18, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @local}, 0x14) 4.705188801s ago: executing program 3 (id=15): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r6, 0x4, 0x2) 3.972010835s ago: executing program 1 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000300)=@arm64) 3.419865419s ago: executing program 1 (id=17): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) fadvise64(r3, 0x7, 0x7, 0x3) waitid(0x2, r4, 0x0, 0x4, 0x0) 3.055504531s ago: executing program 0 (id=18): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x7f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001140)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000340)=""/47, 0x2f}], 0x3, &(0x7f00000006c0)=""/246, 0xf6}, 0x81}, {{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/3, 0x3}, {&(0x7f00000007c0)=""/243, 0xf3}], 0x2, &(0x7f00000008c0)=""/32, 0x20}, 0x200}, {{&(0x7f0000000900)=@nfc, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000980)=""/204, 0xcc}, {&(0x7f0000000a80)=""/248, 0xf8}, {&(0x7f0000000bc0)=""/58, 0x3a}, {&(0x7f0000000c00)=""/93, 0x5d}, {&(0x7f0000000c80)=""/237, 0xed}, {&(0x7f0000000d80)=""/111, 0x6f}, {&(0x7f0000000e00)=""/116, 0x74}, {&(0x7f0000000f40)=""/71, 0x47}], 0x8, &(0x7f0000001080)=""/169, 0xa9}, 0x7}], 0x3, 0x101, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r3, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x515200, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004840}, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0xd}, 0x1c) 2.408403115s ago: executing program 2 (id=19): keyctl$setperm(0x5, 0x0, 0x22281814) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}, {0x8, 0x2a19, 0x0, 0x0}], 0x2}) openat$pfkey(0xffffff9c, 0x0, 0x80a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0x20}, 0xc) write(r5, &(0x7f0000000180)="ec", 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x71, 0xffff1896, 0x3, 0x26, 0x0, 0x1a}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) 2.284855566s ago: executing program 3 (id=20): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x8) 2.187016326s ago: executing program 3 (id=21): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x800, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) shmget$private(0x0, 0x1000, 0x401, &(0x7f000005c000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000300"/28], 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESDEC]) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002"], 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={r5, 0x7fffffffffffffff, 0xb, 0xf2}) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34040000f303000229bd7000ffdbdf25040000000000000040000000f9ffffff0008000000020000ff7f000003000000090000000b0000000100008009000000c2040000010000000f00000008000000060000000e000000070000000c000000fd2b00000800000003000000010000000bf60000c5390000010400002300000006480000f9ffffff070000000700000081ffffff0100010003000000100000002abd0000002b050000020000000004000007000000e02800000800000001000000050000000300000107000000fdffffff03000000580000006e670000fb000000040000000600000001000000020000000700000008000000ff7fffffaa610000ff070000020000002317000006000000ff0f00000e006038865d0f5403d76e465abf0000b0030000030000002c380000db0b0000400100000400000000000002090000000400000007000000a61c000000000080100000000800000007000000ff07000003000000060000000c0000000200000008000000800000000700000007000000aa000000060000001e030000080000000300000007000000feffffff03000000090000000000000006000000def90000400000200200000002000000f1fffffff9ffffff0fffffff01010000000000000800000000800000baffffff0200000007000000000100000e00000007000000060000000200000004000000030000000000000004000004ffffff7f01040000142c00000500000000000000070000000400000009000000070000007700000009000000040000000f00000009000000000100000000010003000000995affffa2a1ffff10000000ff000000080000000500000007000000fe01000009000000b606000005000000feffffff08000000010000008100000005000000ff0700001f050000800000000500000005000000050000000008000009000000030000000000000008000000000000800300000001010000b230000006000000010000000100000000010000faffffff80ffffff07000000070000000300000008000000030000000600000003000000f4fffffffe070000030000000700000084420000050000008300000000000001040000000b0000000100000000000001080000005d06000005000000d83000000601000001000000010000000500000004000000aaffffff090000000000000001000000010000000600000008000000fbffffff0080070001000000ff070000040000007a6f00000800000004000000070000000000000004000000e504e8c048af20976a55427bffffffff090000000000000001000080080000000700000009000000b7010000fc0d0000ff0f0000001000006a0c0000000000000900000002000000000800005d860000060000000300000001040000a70300000000000009000000050000000800000000000000000000000500000001000000feffffff"], 0x434}, 0x1, 0x0, 0x0, 0x44}, 0x40034) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x150, 0x1a, 0xffffffffffffffff, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in=@loopback, {0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x970, 0x8, 0x0, 0xa80}, {0x0, 0x3, 0x0, 0xa6}, {0x4}, 0x70bd2a, 0x3503, 0xa, 0x0, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e20, @in=@empty}}]}, 0x150}}, 0x0) setsockopt$inet_int(r5, 0x29, 0x1a, 0x0, 0x0) 297.190668ms ago: executing program 1 (id=22): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 187.208609ms ago: executing program 1 (id=23): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x40000000}) ioctl$TCXONC(r1, 0x540a, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r8 = dup(r7) r9 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xfffffffc}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r8, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r9, 0x47f5, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=24): r0 = io_uring_setup(0x5043, &(0x7f0000000180)={0x0, 0x3d1f, 0x1000, 0x0, 0x1fe}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x25, &(0x7f00000003c0)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x12, 0x0, "c8fdcf50c3970b890fa9c23037c3fdee3358f88af324041769ed35bd362939b03fa2e11e2aa5b4062b79576ba3a5bb13e139fc19e82ad08e08375bcede13537d2e5ac5576c74e9d85ed29c617f953772"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 63.361724][ T5773] cgroup: Unknown subsys name 'net' [ 63.529296][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.923277][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.461728][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.470988][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.478686][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.486915][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.494373][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.504534][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.508459][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.512773][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.520256][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.533766][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.541924][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.549535][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.552611][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.556909][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.571710][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.579572][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.587000][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.589128][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.594748][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.609454][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.617942][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.628525][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.637036][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.644663][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.105270][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 67.116701][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 67.147464][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 67.228602][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 67.360785][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.368229][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.375936][ T5786] bridge_slave_0: entered allmulticast mode [ 67.383100][ T5786] bridge_slave_0: entered promiscuous mode [ 67.395617][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.402834][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.409966][ T5783] bridge_slave_0: entered allmulticast mode [ 67.417212][ T5783] bridge_slave_0: entered promiscuous mode [ 67.425356][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.432552][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.439698][ T5792] bridge_slave_0: entered allmulticast mode [ 67.447069][ T5792] bridge_slave_0: entered promiscuous mode [ 67.454356][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.461411][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.468649][ T5792] bridge_slave_1: entered allmulticast mode [ 67.476167][ T5792] bridge_slave_1: entered promiscuous mode [ 67.483603][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.490736][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.498097][ T5786] bridge_slave_1: entered allmulticast mode [ 67.504880][ T5786] bridge_slave_1: entered promiscuous mode [ 67.524364][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.531470][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.539277][ T5783] bridge_slave_1: entered allmulticast mode [ 67.546089][ T5783] bridge_slave_1: entered promiscuous mode [ 67.618227][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.638603][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.645938][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.653874][ T5789] bridge_slave_0: entered allmulticast mode [ 67.660528][ T5789] bridge_slave_0: entered promiscuous mode [ 67.669646][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.681920][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.695297][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.706710][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.718698][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.738553][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.745861][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.753414][ T5789] bridge_slave_1: entered allmulticast mode [ 67.760070][ T5789] bridge_slave_1: entered promiscuous mode [ 67.830443][ T5786] team0: Port device team_slave_0 added [ 67.839392][ T5786] team0: Port device team_slave_1 added [ 67.855694][ T5783] team0: Port device team_slave_0 added [ 67.863894][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.876199][ T5792] team0: Port device team_slave_0 added [ 67.895534][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.916493][ T5783] team0: Port device team_slave_1 added [ 67.935454][ T5792] team0: Port device team_slave_1 added [ 67.944134][ T5789] team0: Port device team_slave_0 added [ 67.973576][ T5789] team0: Port device team_slave_1 added [ 67.988800][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.996241][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.022847][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.080414][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.087491][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.113563][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.126405][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.133604][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.159685][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.185902][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.193098][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.219177][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.232277][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.239356][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.265889][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.277453][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.284546][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.310664][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.324142][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.331115][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.357481][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.374054][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.381030][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.407367][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.480732][ T5786] hsr_slave_0: entered promiscuous mode [ 68.486997][ T5786] hsr_slave_1: entered promiscuous mode [ 68.508896][ T5783] hsr_slave_0: entered promiscuous mode [ 68.515214][ T5783] hsr_slave_1: entered promiscuous mode [ 68.521296][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.529314][ T5783] Cannot create hsr debugfs directory [ 68.593036][ T5789] hsr_slave_0: entered promiscuous mode [ 68.599210][ T5789] hsr_slave_1: entered promiscuous mode [ 68.606146][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.614419][ T5789] Cannot create hsr debugfs directory [ 68.623279][ T5787] Bluetooth: hci0: command tx timeout [ 68.624189][ T5792] hsr_slave_0: entered promiscuous mode [ 68.635391][ T5792] hsr_slave_1: entered promiscuous mode [ 68.641399][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.649134][ T5792] Cannot create hsr debugfs directory [ 68.703589][ T5787] Bluetooth: hci1: command tx timeout [ 68.703883][ T5785] Bluetooth: hci2: command tx timeout [ 68.709398][ T5797] Bluetooth: hci3: command tx timeout [ 69.032163][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.043739][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.053446][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.067359][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.139880][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.151312][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.161517][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.171851][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.240330][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.260071][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.291287][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.316677][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.358258][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.368154][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.386247][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.403104][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.455156][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.515727][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.548923][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.556245][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.577981][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.585136][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.624317][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.638671][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.696413][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.718503][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.737556][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.744775][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.772046][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.779221][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.788812][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.795935][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.810241][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.817391][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.845689][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.886705][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.938561][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.945768][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.959860][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.966980][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.167285][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.260328][ T5783] veth0_vlan: entered promiscuous mode [ 70.295443][ T5783] veth1_vlan: entered promiscuous mode [ 70.378552][ T5783] veth0_macvtap: entered promiscuous mode [ 70.420603][ T5783] veth1_macvtap: entered promiscuous mode [ 70.515712][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.528980][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.557431][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.568955][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.579413][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.589544][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.598536][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.641530][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.690626][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.704000][ T5797] Bluetooth: hci0: command tx timeout [ 70.773462][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.781460][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.783260][ T5797] Bluetooth: hci3: command tx timeout [ 70.794213][ T5797] Bluetooth: hci1: command tx timeout [ 70.794264][ T5787] Bluetooth: hci2: command tx timeout [ 70.817639][ T5792] veth0_vlan: entered promiscuous mode [ 70.836081][ T5786] veth0_vlan: entered promiscuous mode [ 70.867188][ T2883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.872145][ T5786] veth1_vlan: entered promiscuous mode [ 70.883692][ T2883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.900638][ T5792] veth1_vlan: entered promiscuous mode [ 70.931637][ T5789] veth0_vlan: entered promiscuous mode [ 70.986044][ T5786] veth0_macvtap: entered promiscuous mode [ 71.011255][ T5789] veth1_vlan: entered promiscuous mode [ 71.038601][ T5786] veth1_macvtap: entered promiscuous mode [ 71.051328][ T5792] veth0_macvtap: entered promiscuous mode [ 71.090399][ T5792] veth1_macvtap: entered promiscuous mode [ 71.120593][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.131476][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.147064][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.169541][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.181195][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.192661][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.205974][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.223848][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.246479][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.275181][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.304896][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.315478][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.327837][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.352886][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.372656][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.391374][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.415124][ T5789] veth0_macvtap: entered promiscuous mode [ 71.444241][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.453342][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.462887][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.471646][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.485962][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.501089][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.511223][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.519440][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.519448][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.537759][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.549889][ T5789] veth1_macvtap: entered promiscuous mode [ 71.562866][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.595759][ T5875] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.606880][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.621542][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.635249][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.654880][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.668629][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.689551][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.701850][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.776414][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.791921][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.802352][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.814271][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.827960][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.842288][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.866140][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.905306][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.915690][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.924743][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.934405][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.033440][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.041389][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.129886][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.138557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.195702][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.217493][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.233089][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.324619][ T2883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.364430][ T2883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.418023][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.431738][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.441974][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.477348][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.513595][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.786645][ T5787] Bluetooth: hci0: command tx timeout [ 72.862679][ T5787] Bluetooth: hci2: command tx timeout [ 72.868126][ T5787] Bluetooth: hci1: command tx timeout [ 72.873617][ T5785] Bluetooth: hci3: command tx timeout [ 72.892282][ T27] audit: type=1326 audit(1762165199.794:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.3" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d2218efc9 code=0x0 [ 72.983025][ T5849] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.118689][ T5897] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.191703][ T5896] batadv0: entered promiscuous mode [ 73.192573][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 73.198568][ T5896] vlan2: entered promiscuous mode [ 73.312703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.321474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.336562][ T5849] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.366137][ T5849] usb 1-1: config 0 has no interface number 0 [ 73.377718][ T5849] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 73.389005][ T5849] usb 1-1: config 0 interface 1 has no altsetting 0 [ 73.411970][ T5849] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 73.447378][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.471667][ T5849] usb 1-1: Product: syz [ 73.481712][ T5849] usb 1-1: Manufacturer: syz [ 73.487767][ T5849] usb 1-1: SerialNumber: syz [ 73.502110][ T5849] usb 1-1: config 0 descriptor?? [ 73.777782][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.796984][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.854702][ T5849] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 73.866015][ T5849] cx231xx 1-1:0.1: Failed to read PCB config [ 73.872317][ T5849] cx231xx: probe of 1-1:0.1 failed with error -71 [ 73.926589][ T5849] usb 1-1: USB disconnect, device number 2 [ 74.802813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 74.811664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 74.863663][ T5785] Bluetooth: hci0: command tx timeout [ 74.943165][ T5785] Bluetooth: hci3: command tx timeout [ 74.948619][ T5785] Bluetooth: hci1: command tx timeout [ 74.954219][ T5785] Bluetooth: hci2: command tx timeout [ 74.960863][ T5916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.262755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.271065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.302583][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.314865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.382732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.391035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.622469][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 75.918996][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.972608][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 76.119199][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.146786][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.182685][ T23] usb 1-1: Product: syz [ 76.227521][ T23] usb 1-1: Manufacturer: syz [ 76.232170][ T23] usb 1-1: SerialNumber: syz [ 76.335690][ T5916] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.371788][ T23] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 77.313316][ T5949] syzkaller0: entered promiscuous mode [ 77.333212][ T5949] syzkaller0: entered allmulticast mode [ 78.680151][ T788] usb 1-1: USB disconnect, device number 3 [ 78.857015][ T5956] syz.3.15: attempt to access beyond end of device [ 78.857015][ T5956] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 78.909108][ T5966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15'. [ 79.140628][ T5956] mmap: syz.3.15 (5956) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.262670][ T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.453417][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 79.460764][ T788] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 79.472486][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.508194][ T788] usb 1-1: config 0 descriptor?? [ 79.724890][ T788] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 79.743700][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 79.768051][ T788] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 79.779981][ T788] usb 1-1: media controller created [ 79.792607][ T970] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 79.849283][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.929172][ T5974] dib0700: tx buffer length is larger than 4. Not supported. [ 79.958452][ T788] DVB: Unable to find symbol dib7000p_attach() [ 79.964910][ T788] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 80.004491][ T970] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.012679][ T970] usb 3-1: config 0 has no interface number 0 [ 80.024432][ T970] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 80.036653][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.055180][ T970] usb 3-1: config 0 descriptor?? [ 80.063852][ T970] usb 3-1: selecting invalid altsetting 1 [ 80.072037][ T970] dvb_ttusb_budget: ttusb_init_controller: error [ 80.078740][ T970] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 80.087550][ T788] rc_core: IR keymap rc-dib0700-rc5 not found [ 80.094262][ T788] Registered IR keymap rc-empty [ 80.101498][ T788] dvb-usb: could not initialize remote control. [ 80.149980][ T788] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 80.182561][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.257226][ T970] DVB: Unable to find symbol cx22700_attach() [ 80.358159][ T970] DVB: Unable to find symbol tda10046_attach() [ 80.408873][ T970] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 80.662712][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 80.698952][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.721340][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.750328][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 80.822579][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 80.833331][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 80.983208][ T23] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 81.016263][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.043410][ T23] usb 4-1: SerialNumber: syz [ 81.072055][ T5983] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 81.089556][ T23] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 81.109383][ T23] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 81.329691][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 81.762805][ T28] cfg80211: failed to load regulatory.db [ 81.777825][ T5996] [U]  [ 81.900084][ T5976] ------------[ cut here ]------------ [ 81.907679][ T5976] usb 1-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 81.933076][ T5976] WARNING: CPU: 1 PID: 5976 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10a1/0x17d0 [ 81.942847][ T5976] Modules linked in: [ 81.946748][ T5976] CPU: 1 PID: 5976 Comm: syz.2.19 Not tainted syzkaller #0 [ 81.954013][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.964328][ T5976] RIP: 0010:usb_submit_urb+0x10a1/0x17d0 [ 81.970048][ T5999] TCP: TCP_TX_DELAY enabled [ 81.975974][ T5976] Code: df 0f b6 44 05 00 84 c0 0f 85 2d 06 00 00 45 0f b6 45 00 48 c7 c7 00 cb 4a 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 cf 51 00 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 81.976793][ T788] usb 1-1: USB disconnect, device number 4 [ 81.996159][ T5976] RSP: 0018:ffffc9000527f870 EFLAGS: 00010246 [ 82.008397][ T5976] RAX: dc851f05ecc1b900 RBX: ffff888023303000 RCX: 0000000000080000 [ 82.016452][ T5976] RDX: ffffc9000d63b000 RSI: 0000000000007d02 RDI: 0000000000007d03 [ 82.024489][ T5976] RBP: 1ffff1100304885a R08: ffffc9000527f567 R09: 1ffff92000a4feac [ 82.032561][ T5976] R10: dffffc0000000000 R11: fffff52000a4fead R12: dffffc0000000000 [ 82.040570][ T5976] R13: ffff8880182442d0 R14: 0000000080000480 R15: ffff88802ea66e38 [ 82.048623][ T5976] FS: 00007f5d230bf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 82.057652][ T5976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.064373][ T5976] CR2: 00007f9ab8f82d58 CR3: 000000007e47b000 CR4: 00000000003506e0 [ 82.072377][ T5976] Call Trace: [ 82.076473][ T5976] [ 82.079455][ T5976] usb_start_wait_urb+0x115/0x4b0 [ 82.084752][ T5976] ? usb_api_blocking_completion+0xb0/0xb0 [ 82.090621][ T5976] usb_control_msg+0x233/0x3e0 [ 82.095501][ T5976] dib0700_i2c_xfer+0xb92/0xf60 [ 82.100405][ T5976] ? rt_mutex_slowlock+0x31f/0x5e0 [ 82.105635][ T5976] ? dib0700_set_gpio+0x1f0/0x1f0 [ 82.110685][ T5976] __i2c_transfer+0x868/0x2080 [ 82.115580][ T5976] ? i2c_cmd+0x110/0x110 [ 82.119824][ T5976] ? i2c_transfer+0x11b/0x390 [ 82.124525][ T5976] i2c_transfer+0x250/0x390 [ 82.129025][ T5976] ? __i2c_transfer+0x2080/0x2080 [ 82.134069][ T5976] ? __might_fault+0xc6/0x120 [ 82.138737][ T5976] ? __might_fault+0xaa/0x120 [ 82.143446][ T5976] ? _copy_from_user+0xa5/0xe0 [ 82.148201][ T5976] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 82.153183][ T5976] i2cdev_ioctl+0x646/0x7e0 [ 82.157683][ T5976] ? i2cdev_write+0x120/0x120 [ 82.162354][ T5976] ? bpf_lsm_file_ioctl+0x9/0x10 [ 82.167415][ T5976] ? security_file_ioctl+0x80/0xa0 [ 82.172553][ T5976] ? i2cdev_write+0x120/0x120 [ 82.177596][ T5976] __se_sys_ioctl+0xfd/0x170 [ 82.182185][ T5976] do_syscall_64+0x55/0xb0 [ 82.186709][ T5976] ? clear_bhb_loop+0x40/0x90 [ 82.191373][ T5976] ? clear_bhb_loop+0x40/0x90 [ 82.196063][ T5976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.201946][ T5976] RIP: 0033:0x7f5d2218efc9 [ 82.206444][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.226349][ T5976] RSP: 002b:00007f5d230bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.234849][ T5976] RAX: ffffffffffffffda RBX: 00007f5d223e5fa0 RCX: 00007f5d2218efc9 [ 82.242878][ T5976] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000005 [ 82.250872][ T5976] RBP: 00007f5d22211f91 R08: 0000000000000000 R09: 0000000000000000 [ 82.258896][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.266927][ T5976] R13: 00007f5d223e6038 R14: 00007f5d223e5fa0 R15: 00007ffca870a618 [ 82.274970][ T5976] [ 82.278713][ T5976] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.286004][ T5976] CPU: 1 PID: 5976 Comm: syz.2.19 Not tainted syzkaller #0 [ 82.293212][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.303267][ T5976] Call Trace: [ 82.306533][ T5976] [ 82.309450][ T5976] dump_stack_lvl+0x16c/0x230 [ 82.314121][ T5976] ? show_regs_print_info+0x20/0x20 [ 82.319308][ T5976] ? load_image+0x3b0/0x3b0 [ 82.323805][ T5976] panic+0x2c0/0x710 [ 82.327691][ T5976] ? bpf_jit_dump+0xd0/0xd0 [ 82.332183][ T5976] __warn+0x2e0/0x470 [ 82.336160][ T5976] ? usb_submit_urb+0x10a1/0x17d0 [ 82.341197][ T5976] ? usb_submit_urb+0x10a1/0x17d0 [ 82.346230][ T5976] report_bug+0x2be/0x4f0 [ 82.350558][ T5976] ? usb_submit_urb+0x10a1/0x17d0 [ 82.355574][ T5976] ? usb_submit_urb+0x10a1/0x17d0 [ 82.360589][ T5976] ? usb_submit_urb+0x10a3/0x17d0 [ 82.365600][ T5976] handle_bug+0xcf/0x120 [ 82.369828][ T5976] exc_invalid_op+0x1a/0x50 [ 82.374314][ T5976] asm_exc_invalid_op+0x1a/0x20 [ 82.379145][ T5976] RIP: 0010:usb_submit_urb+0x10a1/0x17d0 [ 82.384776][ T5976] Code: df 0f b6 44 05 00 84 c0 0f 85 2d 06 00 00 45 0f b6 45 00 48 c7 c7 00 cb 4a 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 cf 51 00 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 82.404390][ T5976] RSP: 0018:ffffc9000527f870 EFLAGS: 00010246 [ 82.410439][ T5976] RAX: dc851f05ecc1b900 RBX: ffff888023303000 RCX: 0000000000080000 [ 82.418395][ T5976] RDX: ffffc9000d63b000 RSI: 0000000000007d02 RDI: 0000000000007d03 [ 82.426344][ T5976] RBP: 1ffff1100304885a R08: ffffc9000527f567 R09: 1ffff92000a4feac [ 82.434297][ T5976] R10: dffffc0000000000 R11: fffff52000a4fead R12: dffffc0000000000 [ 82.442249][ T5976] R13: ffff8880182442d0 R14: 0000000080000480 R15: ffff88802ea66e38 [ 82.450216][ T5976] usb_start_wait_urb+0x115/0x4b0 [ 82.455235][ T5976] ? usb_api_blocking_completion+0xb0/0xb0 [ 82.461037][ T5976] usb_control_msg+0x233/0x3e0 [ 82.465791][ T5976] dib0700_i2c_xfer+0xb92/0xf60 [ 82.470630][ T5976] ? rt_mutex_slowlock+0x31f/0x5e0 [ 82.475725][ T5976] ? dib0700_set_gpio+0x1f0/0x1f0 [ 82.480727][ T5976] __i2c_transfer+0x868/0x2080 [ 82.485488][ T5976] ? i2c_cmd+0x110/0x110 [ 82.489722][ T5976] ? i2c_transfer+0x11b/0x390 [ 82.494385][ T5976] i2c_transfer+0x250/0x390 [ 82.498869][ T5976] ? __i2c_transfer+0x2080/0x2080 [ 82.503878][ T5976] ? __might_fault+0xc6/0x120 [ 82.508530][ T5976] ? __might_fault+0xaa/0x120 [ 82.513187][ T5976] ? _copy_from_user+0xa5/0xe0 [ 82.517935][ T5976] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 82.522867][ T5976] i2cdev_ioctl+0x646/0x7e0 [ 82.527362][ T5976] ? i2cdev_write+0x120/0x120 [ 82.532023][ T5976] ? bpf_lsm_file_ioctl+0x9/0x10 [ 82.536944][ T5976] ? security_file_ioctl+0x80/0xa0 [ 82.542041][ T5976] ? i2cdev_write+0x120/0x120 [ 82.546703][ T5976] __se_sys_ioctl+0xfd/0x170 [ 82.551276][ T5976] do_syscall_64+0x55/0xb0 [ 82.555673][ T5976] ? clear_bhb_loop+0x40/0x90 [ 82.560333][ T5976] ? clear_bhb_loop+0x40/0x90 [ 82.564989][ T5976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.570856][ T5976] RIP: 0033:0x7f5d2218efc9 [ 82.575253][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.594844][ T5976] RSP: 002b:00007f5d230bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.603238][ T5976] RAX: ffffffffffffffda RBX: 00007f5d223e5fa0 RCX: 00007f5d2218efc9 [ 82.611192][ T5976] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000005 [ 82.619142][ T5976] RBP: 00007f5d22211f91 R08: 0000000000000000 R09: 0000000000000000 [ 82.627091][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.635046][ T5976] R13: 00007f5d223e6038 R14: 00007f5d223e5fa0 R15: 00007ffca870a618 [ 82.643020][ T5976] [ 82.646264][ T5976] Kernel Offset: disabled [ 82.650614][ T5976] Rebooting in 86400 seconds..