last executing test programs: 24.203091035s ago: executing program 2 (id=5): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000640)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r2}]) dup3(r2, r0, 0x80000) 23.83103099s ago: executing program 2 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) 22.958680085s ago: executing program 2 (id=9): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x3}, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110100000000000b6"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 21.86832061s ago: executing program 0 (id=13): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2c41, 0xe4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) 21.47467124s ago: executing program 0 (id=14): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x16, 0xd, 0x1, 0x10001}]}) close_range(r1, r1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x1c000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e23, 0x9, @local, 0x81}}, {{0xa, 0x4e23, 0x3, @private1, 0x7}}]}, 0x20c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8}, @fastopen={0x22, 0x7, "074f0c3aad"}]}}}}}}}}, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000038f000/0x1000)=nil) 21.352278308s ago: executing program 0 (id=15): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 21.273156918s ago: executing program 0 (id=16): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='wi', 0x2}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) 21.129828585s ago: executing program 0 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) 20.583296225s ago: executing program 0 (id=19): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 7.824160286s ago: executing program 32 (id=9): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x3}, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110100000000000b6"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 5.471792617s ago: executing program 33 (id=19): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 4.170913331s ago: executing program 1 (id=64): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) setns(0xc9, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 3.700811314s ago: executing program 3 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 2.881294167s ago: executing program 5 (id=50): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='wi', 0x2}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) 2.720784519s ago: executing program 5 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000180)={r4, 0x0, r0, 0x1}) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}, 0x44}], 0x1, 0x20, 0x0) 2.718920412s ago: executing program 1 (id=69): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) eventfd2(0xe5c, 0x80000) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0xa8902, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.800939195s ago: executing program 5 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r2, &(0x7f0000004780)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) unshare(0x42000000) 1.800631962s ago: executing program 1 (id=62): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x3, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x3, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0xa, 0x0, 0x8, 0x4, 0x8, 0x80000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0xf4e, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x41, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x26, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x28683892, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa21, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x0, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x41}, @empty, 0x7, 0x7fff, 0x3d, 0x500, 0x5, 0x19c003f}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x34, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x34}}, 0x8000) 1.799054257s ago: executing program 4 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe5, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0xdddd1000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0x8, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0xf8, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x60000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xffffffff, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.798014837s ago: executing program 3 (id=72): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 1.59128828s ago: executing program 5 (id=63): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90d, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5524, 0x4, 0x3, 0x1ce}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x1, 0x8004, 0x0, 0x0}}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r8, &(0x7f0000000440)={0x2, 0x0, {&(0x7f00000004c0)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1.443313207s ago: executing program 4 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1.438188944s ago: executing program 3 (id=76): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) openat$full(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) 1.153078064s ago: executing program 4 (id=66): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0x0, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x83, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x80200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x7c23, 0x6, 0x6, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x1, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x1, 0x4, 0x4c, 0x2, 0x764, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0x80000000, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x1, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) ioctl$UI_DEV_DESTROY(r1, 0x5502) 892.617769ms ago: executing program 1 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 700.83127ms ago: executing program 5 (id=68): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x71, &(0x7f0000000100)={0x800, 0x4, 0x1, 0xc05}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x2, 0x0) 700.511527ms ago: executing program 4 (id=70): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='wi', 0x2}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) 700.38745ms ago: executing program 3 (id=73): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) chdir(0x0) mknod$loop(0x0, 0x2000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000e40)=ANY=[], 0x20, 0x0) write(r0, &(0x7f0000000000)='3', 0x1) 696.565572ms ago: executing program 1 (id=80): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) openat$full(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) 531.822243ms ago: executing program 4 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='dummy_udc.0', 0xb) 531.657472ms ago: executing program 3 (id=75): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1, {}, 0xfd}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 357.213517ms ago: executing program 4 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0xa512, 0xfffdfffe, '\x00', 0x7b}, 0x0, [0x8, 0x1, 0x1000, 0x9, 0xb, 0x7fffffff, 0x6, 0x8, 0xbc0, 0x2007, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a9, 0xd, 0x5, 0xb, 0x3, 0x2a, 0x400, 0x2000040, 0x10200000, 0x7, 0x0, 0x6, 0x804, 0x0, 0x3, 0x4, 0x6, 0x6, 0x7ff, 0x3ff, 0x1, 0x5, 0x3, 0xfffffeff, 0x6, 0x3, 0x0, 0xffff8007, 0x2000000e, 0xe, 0x0, 0x200002, 0x5, 0xe, 0x0, 0x9, 0x80010001, 0x400, 0x9, 0x40000009, 0xfffff647, 0xb3d, 0x4, 0x10, 0x9, 0x8, 0x9000, 0x5, 0x8, 0x98, 0xbe, 0x801, 0x1, 0x8, 0x3d, 0x1, 0xa, 0xfffffffe, 0x80000000, 0x69e, 0xb, 0x7004000, 0x0, 0x8, 0x8, 0x7, 0x9, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x4, 0x100007ff, 0x4, 0xef, 0xff, 0x4, 0x3, 0x0, 0x58a0, 0xb, 0x19, 0x48895, 0x6, 0x7, 0x89, 0xfffffffe, 0xa1a9, 0xe0ae, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x8, 0x2, 0x1, 0xc3c, 0x1, 0x11, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x621c6328, 0x7, 0xfffffffe, 0x7, 0x6, 0xff]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x38, r2, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000d35d01"], 0x20) 1.708366ms ago: executing program 1 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ad", 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c012}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fba000010324d770b40102fd"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=87): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90d, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5524, 0x4, 0x3, 0x1ce}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x1, 0x8004, 0x0, 0x0}}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r8, &(0x7f0000000440)={0x2, 0x0, {&(0x7f00000004c0)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3656' (ED25519) to the list of known hosts. [ 33.656893][ T5654] cgroup: Unknown subsys name 'net' [ 33.809704][ T5654] cgroup: Unknown subsys name 'cpuset' [ 33.814103][ T5654] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.861044][ T5654] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.248961][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.254228][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.257777][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.258760][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.261355][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.262105][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.262747][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.264120][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.264630][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.265752][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.268021][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.286596][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.287423][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.288632][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.289682][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.308084][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.309592][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.310067][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.310938][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.313498][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.995101][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.995719][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.995789][ T5733] bridge_slave_0: entered allmulticast mode [ 39.998676][ T5733] bridge_slave_0: entered promiscuous mode [ 40.025508][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.026740][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.026811][ T5733] bridge_slave_1: entered allmulticast mode [ 40.028389][ T5733] bridge_slave_1: entered promiscuous mode [ 40.083272][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.104344][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.104464][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.104507][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.104572][ T5734] bridge_slave_0: entered allmulticast mode [ 40.105304][ T5734] bridge_slave_0: entered promiscuous mode [ 40.107739][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.107814][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.107908][ T5749] bridge_slave_0: entered allmulticast mode [ 40.108885][ T5749] bridge_slave_0: entered promiscuous mode [ 40.110355][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.110394][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.110449][ T5749] bridge_slave_1: entered allmulticast mode [ 40.111144][ T5749] bridge_slave_1: entered promiscuous mode [ 40.138023][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.138143][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.138224][ T5734] bridge_slave_1: entered allmulticast mode [ 40.138948][ T5734] bridge_slave_1: entered promiscuous mode [ 40.172073][ T5733] team0: Port device team_slave_0 added [ 40.181108][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.182557][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.185516][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.185610][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.185649][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.185708][ T5732] bridge_slave_0: entered allmulticast mode [ 40.186407][ T5732] bridge_slave_0: entered promiscuous mode [ 40.198659][ T5733] team0: Port device team_slave_1 added [ 40.207126][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.215688][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.215820][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.215918][ T5732] bridge_slave_1: entered allmulticast mode [ 40.218200][ T5732] bridge_slave_1: entered promiscuous mode [ 40.239130][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.243096][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.243118][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.244643][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.244675][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.244694][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.267609][ T5749] team0: Port device team_slave_0 added [ 40.278469][ T5734] team0: Port device team_slave_0 added [ 40.280907][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.288287][ T5749] team0: Port device team_slave_1 added [ 40.290184][ T5734] team0: Port device team_slave_1 added [ 40.291402][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.304887][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.304950][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.305013][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.333131][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.333173][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.333207][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.333943][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.333955][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.333968][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.346726][ T5732] team0: Port device team_slave_0 added [ 40.358606][ T5733] hsr_slave_0: entered promiscuous mode [ 40.359291][ T5733] hsr_slave_1: entered promiscuous mode [ 40.360481][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.360498][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.360524][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.362868][ T5732] team0: Port device team_slave_1 added [ 40.397168][ T5749] hsr_slave_0: entered promiscuous mode [ 40.397796][ T5749] hsr_slave_1: entered promiscuous mode [ 40.398263][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 40.398342][ T5749] Cannot create hsr debugfs directory [ 40.426976][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.427362][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.427385][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.455553][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.455601][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.455641][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.485678][ T5734] hsr_slave_0: entered promiscuous mode [ 40.486186][ T5734] hsr_slave_1: entered promiscuous mode [ 40.486501][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 40.486512][ T5734] Cannot create hsr debugfs directory [ 40.582258][ T5732] hsr_slave_0: entered promiscuous mode [ 40.582879][ T5732] hsr_slave_1: entered promiscuous mode [ 40.583252][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 40.583266][ T5732] Cannot create hsr debugfs directory [ 40.855861][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.865044][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.867678][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.878903][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.886567][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.897828][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.911337][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.918335][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.964872][ T5749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.969673][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.970158][ T5749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.974484][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.981352][ T5749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.987837][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.988584][ T5749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.994026][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.089656][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.096441][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.108686][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.115727][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.116501][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.122754][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.126336][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.132000][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.136632][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.219469][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.219871][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.225970][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.229386][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.234776][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.240382][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.246387][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.248065][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.254598][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.265423][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.265622][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.274192][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.295534][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.295623][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.324846][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.328065][ T5744] Bluetooth: hci1: command tx timeout [ 41.328095][ T65] Bluetooth: hci0: command tx timeout [ 41.328401][ T5744] Bluetooth: hci2: command tx timeout [ 41.361050][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.361135][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.378503][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.378591][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.397331][ T65] Bluetooth: hci3: command tx timeout [ 41.469253][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.484200][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.513406][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.522046][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.524908][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.525042][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.531697][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.532138][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.538603][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.538697][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.549704][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.549834][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.811348][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.850343][ T5749] veth0_vlan: entered promiscuous mode [ 41.854121][ T5749] veth1_vlan: entered promiscuous mode [ 41.868345][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.890105][ T5749] veth0_macvtap: entered promiscuous mode [ 41.897904][ T5749] veth1_macvtap: entered promiscuous mode [ 41.914269][ T5733] veth0_vlan: entered promiscuous mode [ 41.925589][ T5733] veth1_vlan: entered promiscuous mode [ 41.930168][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.938600][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.960841][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.974576][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.980989][ T5733] veth0_macvtap: entered promiscuous mode [ 41.988111][ T5733] veth1_macvtap: entered promiscuous mode [ 42.034346][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.050951][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.051020][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.057961][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.075986][ T5732] veth0_vlan: entered promiscuous mode [ 42.079157][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.079194][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.090586][ T5732] veth1_vlan: entered promiscuous mode [ 42.098937][ T5734] veth0_vlan: entered promiscuous mode [ 42.110860][ T5734] veth1_vlan: entered promiscuous mode [ 42.152917][ T5749] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.162335][ T5749] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.169065][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.169136][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.174099][ T5749] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.180850][ T5749] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.191760][ T5732] veth0_macvtap: entered promiscuous mode [ 42.198067][ T5749] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.201702][ T5734] veth0_macvtap: entered promiscuous mode [ 42.206849][ T5732] veth1_macvtap: entered promiscuous mode [ 42.208716][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.209016][ T5734] veth1_macvtap: entered promiscuous mode [ 42.216845][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.216894][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.234310][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.237967][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.243382][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.245932][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.255005][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.352282][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.352348][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.399421][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.399480][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.420788][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.420857][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.430581][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.430648][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.448796][ T5573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.451336][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.451657][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.451879][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.452096][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.452252][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.452514][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.452682][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.452828][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.452997][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.453257][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.453483][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.479111][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.499476][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.863458][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 43.399602][ T65] Bluetooth: hci0: command tx timeout [ 43.403414][ T5744] Bluetooth: hci2: command tx timeout [ 43.408625][ T65] Bluetooth: hci1: command tx timeout [ 43.485498][ T65] Bluetooth: hci3: command tx timeout [ 44.463517][ T5922] bridge_slave_0: left allmulticast mode [ 44.463733][ T5922] bridge_slave_0: left promiscuous mode [ 44.464556][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.473445][ T5922] bridge_slave_1: left allmulticast mode [ 44.475788][ T5922] bridge_slave_1: left promiscuous mode [ 44.475990][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.487839][ T5922] bond0: (slave bond_slave_0): Releasing backup interface [ 44.494508][ T5922] bond0: (slave bond_slave_1): Releasing backup interface [ 44.506181][ T5922] team0: Port device team_slave_0 removed [ 44.522079][ T5922] team0: Port device team_slave_1 removed [ 44.525429][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.528795][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.533583][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.533633][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.539404][ T5922] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 44.584684][ T5896] Set syz1 is full, maxelem 65536 reached [ 44.813706][ T5926] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 45.108610][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 45.363818][ T5937] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 45.375145][ T5937] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 45.381296][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 45.477140][ T65] Bluetooth: hci1: command tx timeout [ 45.477185][ T5744] Bluetooth: hci2: command tx timeout [ 45.477238][ T65] Bluetooth: hci0: command tx timeout [ 45.557188][ T5095] Bluetooth: hci3: command tx timeout [ 47.229253][ T5956] process 'syz.1.25' launched './file0' with NULL argv: empty string added [ 47.245205][ T5956] FAULT_INJECTION: forcing a failure. [ 47.245205][ T5956] name failslab, interval 1, probability 0, space 0, times 1 [ 47.245296][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) [ 47.245330][ T5956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.245342][ T5956] Call Trace: [ 47.245349][ T5956] [ 47.245357][ T5956] dump_stack_lvl+0x100/0x190 [ 47.245384][ T5956] should_fail_ex.cold+0x5/0xa [ 47.245408][ T5956] should_failslab+0xc2/0x120 [ 47.245431][ T5956] __kmalloc_cache_noprof+0x91/0x6d0 [ 47.245519][ T5956] ? apparmor_capable+0x1d7/0x4d0 [ 47.245542][ T5956] ? single_open+0x4d/0x1d0 [ 47.245564][ T5956] ? __pfx_proc_setgroups_show+0x10/0x10 [ 47.245583][ T5956] single_open+0x4d/0x1d0 [ 47.245600][ T5956] proc_setgroups_open+0x35a/0x7e0 [ 47.245613][ T5956] do_dentry_open+0x6ab/0x14d0 [ 47.245625][ T5956] ? __pfx_proc_setgroups_open+0x10/0x10 [ 47.245639][ T5956] vfs_open+0x82/0x3f0 [ 47.245660][ T5956] path_openat+0x19fa/0x2440 [ 47.245691][ T5956] ? __pfx_path_openat+0x10/0x10 [ 47.245718][ T5956] do_file_open+0x20e/0x430 [ 47.245740][ T5956] ? __pfx_do_file_open+0x10/0x10 [ 47.245766][ T5956] ? __pfx_kfree_link+0x10/0x10 [ 47.245787][ T5956] ? _raw_spin_unlock+0x28/0x50 [ 47.245807][ T5956] ? alloc_fd+0x471/0x7a0 [ 47.245832][ T5956] do_sys_openat2+0x10f/0x1e0 [ 47.245856][ T5956] ? __pfx_do_sys_openat2+0x10/0x10 [ 47.245877][ T5956] ? find_held_lock+0x2b/0x80 [ 47.245900][ T5956] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 47.245923][ T5956] __ia32_compat_sys_openat+0x12d/0x210 [ 47.245950][ T5956] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 47.245980][ T5956] do_int80_emulation+0x166/0x650 [ 47.245998][ T5956] asm_int80_emulation+0x1a/0x20 [ 47.246010][ T5956] RIP: 0023:0xf71675ab [ 47.246020][ T5956] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 47.246030][ T5956] RSP: 002b:00000000f541d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 47.246042][ T5956] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f541d490 [ 47.246049][ T5956] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.246055][ T5956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.246062][ T5956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 47.246069][ T5956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.246083][ T5956] [ 47.557837][ T5744] Bluetooth: hci1: command tx timeout [ 47.557930][ T5095] Bluetooth: hci0: command tx timeout [ 47.558159][ T65] Bluetooth: hci2: command tx timeout [ 47.637124][ T5095] Bluetooth: hci3: command tx timeout [ 47.971339][ T5948] Set syz1 is full, maxelem 65536 reached [ 51.064420][ T5992] syz.3.37 uses obsolete (PF_INET,SOCK_PACKET) [ 51.092694][ T5994] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.124762][ T5994] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 53.236084][ T6031] input: syz1 as /devices/virtual/input/input5 [ 53.488652][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 53.510908][ T6035] Zero length message leads to an empty skb [ 55.629553][ T6042] Set syz1 is full, maxelem 65536 reached [ 58.761755][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.765798][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.769220][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.770837][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.771481][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.996199][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.081986][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.161301][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.178765][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.181128][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.184947][ T6046] bridge_slave_0: entered allmulticast mode [ 59.187928][ T6046] bridge_slave_0: entered promiscuous mode [ 59.191605][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.194090][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.196375][ T6046] bridge_slave_1: entered allmulticast mode [ 59.199554][ T6046] bridge_slave_1: entered promiscuous mode [ 59.218352][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.222954][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.244440][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.259060][ T6046] team0: Port device team_slave_0 added [ 59.262557][ T6046] team0: Port device team_slave_1 added [ 59.276296][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.276506][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.276529][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.278156][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.278169][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.278188][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.318172][ T6046] hsr_slave_0: entered promiscuous mode [ 59.319021][ T6046] hsr_slave_1: entered promiscuous mode [ 59.319585][ T6046] debugfs: 'hsr0' already exists in 'hsr' [ 59.319603][ T6046] Cannot create hsr debugfs directory [ 59.403039][ T13] bridge_slave_1: left allmulticast mode [ 59.403112][ T13] bridge_slave_1: left promiscuous mode [ 59.405276][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.413339][ T13] bridge_slave_0: left allmulticast mode [ 59.413391][ T13] bridge_slave_0: left promiscuous mode [ 59.413531][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.516089][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.521924][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.526449][ T13] bond0 (unregistering): Released all slaves [ 59.658894][ T6046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.663309][ T6046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.664164][ T6046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.672219][ T6046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.672876][ T6046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.676273][ T6046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.676907][ T6046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.683291][ T6046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.728204][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 59.782418][ T13] hsr_slave_0: left promiscuous mode [ 59.784598][ T13] hsr_slave_1: left promiscuous mode [ 59.785712][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.785740][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.791391][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.791447][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.799644][ T13] veth1_macvtap: left promiscuous mode [ 59.799739][ T13] veth0_macvtap: left promiscuous mode [ 59.799790][ T13] veth1_vlan: left promiscuous mode [ 59.799834][ T13] veth0_vlan: left promiscuous mode [ 59.960484][ T13] team0 (unregistering): Port device team_slave_1 removed [ 59.966329][ T13] team0 (unregistering): Port device team_slave_0 removed [ 60.060155][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.093694][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.119242][ T6046] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.135123][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.135243][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.145437][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.145531][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.322173][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 60.497280][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.527985][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.683540][ T6046] veth0_vlan: entered promiscuous mode [ 60.690369][ T6046] veth1_vlan: entered promiscuous mode [ 60.704242][ T6046] veth0_macvtap: entered promiscuous mode [ 60.706535][ T6046] veth1_macvtap: entered promiscuous mode [ 60.712716][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.718590][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.740612][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.741346][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.741650][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.741685][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.761736][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.761833][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.788493][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.788543][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.837145][ T5095] Bluetooth: hci0: command tx timeout [ 60.873065][ T6115] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 61.107500][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.112163][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.117489][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.119092][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.119536][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.449429][ T5734] svc: failed to register nfsdv3 RPC service (errno 111). [ 61.454175][ T5734] svc: failed to register nfsaclv3 RPC service (errno 111). [ 61.454475][ T5734] failed to unregister tcp with rpcbind [ 61.454768][ T5734] svc: failed to register nfsdv3 RPC service (errno 97). [ 61.454778][ T5734] svc: failed to register nfsaclv3 RPC service (errno 97). [ 61.454785][ T5734] failed to unregister tcp with rpcbind [ 61.493731][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.539738][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.539926][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.540043][ T6124] bridge_slave_0: entered allmulticast mode [ 61.541363][ T6124] bridge_slave_0: entered promiscuous mode [ 61.544000][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.544113][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.544208][ T6124] bridge_slave_1: entered allmulticast mode [ 61.545479][ T6124] bridge_slave_1: entered promiscuous mode [ 61.572912][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.585682][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.591734][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.604399][ T6124] team0: Port device team_slave_0 added [ 61.605825][ T6124] team0: Port device team_slave_1 added [ 61.619089][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.619140][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.619162][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.620279][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.620300][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.620321][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.652815][ T6124] hsr_slave_0: entered promiscuous mode [ 61.653261][ T6124] hsr_slave_1: entered promiscuous mode [ 61.665702][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.746161][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.817852][ T6124] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.825036][ T6124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.825694][ T6124] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.831857][ T6124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.832827][ T6124] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.837481][ T6124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.849678][ T6124] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.856355][ T6124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.901579][ T13] bridge_slave_1: left allmulticast mode [ 61.901645][ T13] bridge_slave_1: left promiscuous mode [ 61.901766][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.908020][ T13] bridge_slave_0: left allmulticast mode [ 61.908038][ T13] bridge_slave_0: left promiscuous mode [ 61.908157][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.022818][ T6156] zero sized request [ 62.123617][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.134487][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.139807][ T13] bond0 (unregistering): Released all slaves [ 62.337829][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.363460][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.367861][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.368000][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.373320][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.373366][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.419044][ T6160] input: syz1 as /devices/virtual/input/input6 [ 62.492149][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 62.556877][ T13] hsr_slave_0: left promiscuous mode [ 62.559303][ T13] hsr_slave_1: left promiscuous mode [ 62.560062][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.560078][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.562116][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.562130][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.574411][ T13] veth1_macvtap: left promiscuous mode [ 62.574514][ T13] veth0_macvtap: left promiscuous mode [ 62.574656][ T13] veth1_vlan: left promiscuous mode [ 62.574822][ T13] veth0_vlan: left promiscuous mode [ 62.587554][ T1351] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.739835][ T1351] usb 6-1: Using ep0 maxpacket: 8 [ 62.741789][ T1351] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.745688][ T1351] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.745763][ T1351] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.745802][ T1351] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 62.745842][ T1351] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 62.745885][ T1351] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 62.745922][ T1351] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.745972][ T1351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.872762][ T13] team0 (unregistering): Port device team_slave_1 removed [ 62.880268][ T13] team0 (unregistering): Port device team_slave_0 removed [ 62.917362][ T5095] Bluetooth: hci0: command tx timeout [ 63.011155][ T1351] usb 6-1: usb_control_msg returned -32 [ 63.013614][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.013893][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.014439][ T5095] Bluetooth: hci3: adv larger than maximum supported [ 63.014450][ T5095] Bluetooth: hci3: Unknown advertising packet type: 0x73 [ 63.014460][ T5095] Bluetooth: hci3: Malformed LE Event: 0x0d [ 63.031119][ T1351] usbtmc 6-1:16.0: can't read capabilities [ 63.068517][ T1351] usb 6-1: USB disconnect, device number 2 [ 63.167444][ T5095] Bluetooth: hci4: command tx timeout [ 63.177563][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 63.284512][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.343246][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 63.456795][ T6124] veth0_vlan: entered promiscuous mode [ 63.461374][ T6124] veth1_vlan: entered promiscuous mode [ 63.475925][ T6124] veth0_macvtap: entered promiscuous mode [ 63.486780][ T6124] veth1_macvtap: entered promiscuous mode [ 63.494757][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.499926][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.522477][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.522548][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.522815][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.522849][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.544258][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 63.545461][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.545476][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.570861][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.570910][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.634934][ T6220] Set syz1 is full, maxelem 65536 reached [ 64.731748][ T6236] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 64.997303][ T5095] Bluetooth: hci0: command tx timeout [ 65.237248][ T5095] Bluetooth: hci4: command tx timeout [ 65.336054][ T6256] input: syz1 as /devices/virtual/input/input7 [ 66.005940][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 66.195346][ T6279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.251115][ T6279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.327144][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.507435][ T5884] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 66.508120][ T5884] usb 5-1: Dual-Role OTG device on HNP port [ 66.508496][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.513179][ T5884] gspca_main: spca501-2.14.0 probing 0000:0000 [ 66.518781][ T5884] gspca_spca501: reg write: error -32 [ 66.518793][ T5884] spca501 5-1:1.0: Reg write failed for ** replaying previous printk message ** [ 66.518793][ T5884] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 66.518846][ T5884] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 66.525744][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 66.535227][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 66.538184][ C1] CPU: 1 UID: 0 PID: 5884 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 66.541932][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.545098][ C1] Workqueue: usb_hub_wq hub_event [ 66.546825][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 66.548680][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 66.555543][ C1] RSP: 0018:ffffc900005a09d8 EFLAGS: 00010002 [ 66.557622][ C1] RAX: dffffc0000000000 RBX: ffff888069c1c000 RCX: 0000000000000103 [ 66.560112][ C1] RDX: 00000000000000e6 RSI: ffffffff87f39296 RDI: ffff888069c1c128 [ 66.562697][ C1] RBP: ffff888069c1c128 R08: 0000000000000004 R09: 0000000000000020 [ 66.565189][ C1] R10: 0000000000000020 R11: 000000000000760b R12: ffff888069c1c0f0 [ 66.567628][ C1] R13: ffff888069c1c128 R14: ffff888069c1c740 R15: 0000000000000001 [ 66.570439][ C1] FS: 0000000000000000(0000) GS:ffff888096a63000(0000) knlGS:0000000000000000 [ 66.573172][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.575206][ C1] CR2: 00000000f724ea77 CR3: 000000004bb27000 CR4: 0000000000352ef0 [ 66.578099][ C1] Call Trace: [ 66.579192][ C1] [ 66.580136][ C1] f_midi2_set_alt+0x444/0x5f0 [ 66.581771][ C1] composite_setup+0x16f8/0x9290 [ 66.583331][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 66.584946][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 66.586509][ C1] ? __pfx_composite_setup+0x10/0x10 [ 66.588215][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.589971][ C1] ? do_raw_spin_lock+0x128/0x260 [ 66.591642][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.593347][ C1] ? configfs_composite_setup+0xfb/0x130 [ 66.595211][ C1] configfs_composite_setup+0xfb/0x130 [ 66.597071][ C1] dummy_timer+0x2039/0x3700 [ 66.598637][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.600564][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 66.602365][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 66.604016][ C1] ? mark_held_locks+0x40/0x70 [ 66.605657][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.607618][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 66.609888][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 66.612048][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 66.614064][ C1] handle_softirqs+0x1e6/0x9d0 [ 66.616021][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 66.617857][ C1] ? _raw_spin_unlock+0x28/0x50 [ 66.619663][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 66.621649][ C1] __irq_exit_rcu+0x194/0x210 [ 66.623551][ C1] irq_exit_rcu+0x9/0x30 [ 66.625372][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 66.627750][ C1] [ 66.629011][ C1] [ 66.630235][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.632623][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 66.634689][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 c5 15 f6 48 89 df e8 0e 1c 16 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 22 05 f6 65 48 83 3d e4 f4 ba 08 00 74 16 5b [ 66.641844][ C1] RSP: 0018:ffffc900064b6880 EFLAGS: 00000246 [ 66.644090][ C1] RAX: 0000000000000002 RBX: ffff888024658000 RCX: 0000000000000040 [ 66.646904][ C1] RDX: 0000000000000001 RSI: ffffffff8e3f0890 RDI: ffffffff8c622580 [ 66.650170][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 66.653732][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 66.656423][ C1] R13: ffff8880239ff478 R14: 0000000000000000 R15: ffff8880239ff400 [ 66.659084][ C1] dummy_urb_enqueue+0x56c/0x880 [ 66.660951][ C1] ? __device_attach_driver+0xf1/0x320 [ 66.662851][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 66.665040][ C1] ? bus_for_each_drv+0x159/0x1e0 [ 66.667812][ C1] ? __device_attach+0x1e4/0x4d0 [ 66.670027][ C1] ? device_initial_probe+0xaf/0xd0 [ 66.672194][ C1] ? bus_probe_device+0x64/0x160 [ 66.674346][ C1] ? device_add+0x121d/0x1970 [ 66.676360][ C1] ? usb_new_device.part.0+0xcc2/0x1686 [ 66.678518][ C1] ? hub_event.cold+0x1e3/0xe90 [ 66.680467][ C1] usb_submit_urb+0x827/0x19b0 [ 66.682354][ C1] ? __init_swait_queue_head+0xca/0x150 [ 66.684457][ C1] usb_start_wait_urb+0x10e/0x580 [ 66.686457][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 66.688440][ C1] ? __asan_memset+0x23/0x50 [ 66.690168][ C1] usb_control_msg+0x328/0x4b0 [ 66.691779][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 66.693926][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.695928][ C1] usb_control_msg_send+0xca/0x130 [ 66.697833][ C1] usb_set_interface+0x9b6/0xe20 [ 66.699716][ C1] snd_usb_midi_v2_create+0x629/0x4070 [ 66.701618][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 66.704121][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.706395][ C1] ? snd_info_create_entry+0x6f/0x400 [ 66.708309][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 66.710192][ C1] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 66.712445][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 66.714279][ C1] ? snd_info_create_entry+0x314/0x400 [ 66.715961][ C1] ? usb_ifnum_to_if+0x16f/0x1d0 [ 66.717744][ C1] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 66.720207][ C1] usb_audio_probe+0xf0b/0x3b10 [ 66.722509][ C1] ? __pfx_usb_audio_probe+0x10/0x10 [ 66.724874][ C1] ? do_raw_spin_lock+0x128/0x260 [ 66.726989][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.729094][ C1] ? mark_held_locks+0x40/0x70 [ 66.730752][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 66.732767][ C1] ? find_held_lock+0x2b/0x80 [ 66.734418][ C1] ? mark_held_locks+0x40/0x70 [ 66.736201][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.738396][ C1] usb_probe_interface+0x386/0x9b0 [ 66.740384][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 66.742744][ C1] ? kernfs_put+0x3f/0x60 [ 66.744546][ C1] ? sysfs_create_link+0x68/0xc0 [ 66.746644][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 66.749138][ C1] really_probe+0x241/0xa60 [ 66.750864][ C1] __driver_probe_device+0x210/0x460 [ 66.752721][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.754517][ C1] driver_probe_device+0x4a/0x140 [ 66.756081][ C1] __device_attach_driver+0x1df/0x320 [ 66.757729][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 66.759574][ C1] bus_for_each_drv+0x159/0x1e0 [ 66.761086][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 66.762875][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.764807][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.767400][ C1] __device_attach+0x1e4/0x4d0 [ 66.769583][ C1] ? __pfx___device_attach+0x10/0x10 [ 66.771468][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.773437][ C1] device_initial_probe+0xaf/0xd0 [ 66.775013][ C1] bus_probe_device+0x64/0x160 [ 66.776495][ C1] device_add+0x121d/0x1970 [ 66.777968][ C1] ? __pfx_device_add+0x10/0x10 [ 66.779537][ C1] ? mark_held_locks+0x40/0x70 [ 66.781084][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.782900][ C1] usb_set_configuration+0xd97/0x1c60 [ 66.784623][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 66.786799][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 66.788866][ C1] usb_probe_device+0xef/0x400 [ 66.790690][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 66.792769][ C1] really_probe+0x241/0xa60 [ 66.794416][ C1] __driver_probe_device+0x210/0x460 [ 66.796171][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.797997][ C1] driver_probe_device+0x4a/0x140 [ 66.799626][ C1] __device_attach_driver+0x1df/0x320 [ 66.801414][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 66.803429][ C1] bus_for_each_drv+0x159/0x1e0 [ 66.805284][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 66.807273][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.808984][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.810869][ C1] __device_attach+0x1e4/0x4d0 [ 66.812363][ C1] ? __pfx___device_attach+0x10/0x10 [ 66.814018][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.815779][ C1] device_initial_probe+0xaf/0xd0 [ 66.817667][ C1] bus_probe_device+0x64/0x160 [ 66.819898][ C1] device_add+0x121d/0x1970 [ 66.821383][ C1] ? __pfx_device_add+0x10/0x10 [ 66.823012][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 66.825033][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 66.826856][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 66.828772][ C1] ? mark_held_locks+0x40/0x70 [ 66.830379][ C1] hub_event.cold+0x1e3/0xe90 [ 66.832235][ C1] ? __pfx_hub_event+0x10/0x10 [ 66.834186][ C1] ? percpu_rwsem_wake_function+0x2b0/0x4a0 [ 66.836319][ C1] ? lock_acquire+0x1d1/0x380 [ 66.838003][ C1] ? process_one_work+0xa2c/0x1b10 [ 66.839718][ C1] ? process_one_work+0x906/0x1b10 [ 66.841418][ C1] ? process_one_work+0x906/0x1b10 [ 66.843052][ C1] process_one_work+0xac7/0x1b10 [ 66.844684][ C1] ? __pfx_process_one_work+0x10/0x10 [ 66.846509][ C1] ? lock_acquire+0x1d1/0x380 [ 66.848111][ C1] ? __pfx_hub_event+0x10/0x10 [ 66.849900][ C1] worker_thread+0x5ef/0xe50 [ 66.851606][ C1] ? __pfx_worker_thread+0x10/0x10 [ 66.853819][ C1] ? kthread+0x13a/0x450 [ 66.855426][ C1] ? __pfx_worker_thread+0x10/0x10 [ 66.857084][ C1] kthread+0x373/0x450 [ 66.858402][ C1] ? __pfx_kthread+0x10/0x10 [ 66.859910][ C1] ret_from_fork+0x730/0xd60 [ 66.861527][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 66.863215][ C1] ? __switch_to+0x800/0x10f0 [ 66.865029][ C1] ? __pfx_kthread+0x10/0x10 [ 66.866784][ C1] ret_from_fork_asm+0x1a/0x30 [ 66.868550][ C1] [ 66.869636][ C1] Modules linked in: [ 66.870972][ C1] ---[ end trace 0000000000000000 ]--- [ 66.872857][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 66.872874][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 66.872884][ C1] RSP: 0018:ffffc900005a09d8 EFLAGS: 00010002 [ 66.872893][ C1] RAX: dffffc0000000000 RBX: ffff888069c1c000 RCX: 0000000000000103 [ 66.872900][ C1] RDX: 00000000000000e6 RSI: ffffffff87f39296 RDI: ffff888069c1c128 [ 66.872907][ C1] RBP: ffff888069c1c128 R08: 0000000000000004 R09: 0000000000000020 [ 66.872913][ C1] R10: 0000000000000020 R11: 000000000000760b R12: ffff888069c1c0f0 [ 66.872919][ C1] R13: ffff888069c1c128 R14: ffff888069c1c740 R15: 0000000000000001 [ 66.872926][ C1] FS: 0000000000000000(0000) GS:ffff888096a63000(0000) knlGS:0000000000000000 [ 66.872948][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.872957][ C1] CR2: 00000000f724ea77 CR3: 000000004bb27000 CR4: 0000000000352ef0 [ 66.872965][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 66.907467][ C1] Kernel Offset: disabled [ 66.908895][ C1] Rebooting in 86400 seconds..