last executing test programs: 5.744576861s ago: executing program 1 (id=52): r0 = epoll_create(0x5) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={[0x1000]}, 0x8) 5.63982104s ago: executing program 2 (id=55): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4044844) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x2, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.752107401s ago: executing program 1 (id=56): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0xffffff99}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000017010000040000000900000000005000000000000000170100000200000038000000ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad000000001800000000000000170100000300000000000000000000004001000000000000170100000200000028010000526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd84430400f736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ccbc39669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d0000000018000000000000001701000004000000ed0e000000000000"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000007000800000000000000000000000000170100000400000001000000000000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d3fda90bbe4fc93ce397e33566a5f1637eabb82231e64719d3529d653ab937022831b3a638704fe05ac900800000000000000000"], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 4.739398488s ago: executing program 3 (id=57): writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) r3 = dup3(r2, r0, 0x80000) write$FUSE_NOTIFY_INVAL_ENTRY(r3, 0x0, 0x1001) 4.628739496s ago: executing program 0 (id=59): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) 4.597999959s ago: executing program 1 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7fe2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() getrlimit(0x2, &(0x7f0000000040)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x20f5) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x192}}, 0x20}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) 4.463337012s ago: executing program 2 (id=61): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x6c4, 0x2, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0x19, 0x2e, 0x2, 0x5, {0x10001, 0x7fff, 0xffffffff, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/188, 0xbc) 3.711737791s ago: executing program 0 (id=62): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r0, &(0x7f00000002c0)="ab", 0x1, 0x4000805, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x44040}, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 3.711593651s ago: executing program 3 (id=63): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0), 0x0) 3.653839679s ago: executing program 0 (id=64): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) unshare(0x28000600) bind$unix(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) 3.639600636s ago: executing program 1 (id=65): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) listen(r0, 0x400000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9, 0x42073, 0xffffffffffffffff, 0x0) 2.731640302s ago: executing program 2 (id=66): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.726943341s ago: executing program 0 (id=67): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0}) io_setup(0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240880c0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x2) 2.726287991s ago: executing program 3 (id=68): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0xffffff99}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000007000800000000000000000000000000170100000400000001000000000000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d3fda90bbe4fc93ce397e33566a5f1637eabb82231e64719d3529d653ab937022831b3a638704fe05ac900800000000000000000"], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 2.294018694s ago: executing program 3 (id=69): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x2, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.807772286s ago: executing program 0 (id=70): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) 1.691990032s ago: executing program 1 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0xfffc, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x2, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x1, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 1.691660292s ago: executing program 2 (id=72): writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) r3 = dup3(r2, r0, 0x80000) write$FUSE_NOTIFY_INVAL_ENTRY(r3, 0x0, 0x1001) 1.607590925s ago: executing program 0 (id=73): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f00000002c0)="28d36689fb2134111f63db24e27edc54") syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 1.058219024s ago: executing program 3 (id=74): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x6c4, 0x2, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0x19, 0x2e, 0x2, 0x5, {0x10001, 0x7fff, 0xffffffff, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/188, 0xbc) 506.454823ms ago: executing program 2 (id=75): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffc, &(0x7f0000000580)="b3"}) 87.699558ms ago: executing program 3 (id=76): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) 87.382198ms ago: executing program 1 (id=77): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0xffffff99}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000007000800000000000000000000000000170100000400000001000000000000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d3fda90bbe4fc93ce397e33566a5f1637eabb82231e64719d3529d653ab937022831b3a638704fe05ac900800000000000000000"], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 0s ago: executing program 2 (id=78): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0}) io_setup(0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240880c0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xc001, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. [ 55.579552][ T5749] cgroup: Unknown subsys name 'net' [ 55.740953][ T5749] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.133611][ T5749] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.581536][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.590256][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.591637][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.599276][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.613269][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.616797][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.622185][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.629578][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.636148][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.642877][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.649786][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.655989][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.665134][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.672888][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.684893][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.685245][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.692562][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.702278][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.714439][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.714482][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.729045][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.741355][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.749202][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.757458][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.143527][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 59.182039][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 59.259758][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 59.313252][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.320646][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.328505][ T5762] bridge_slave_0: entered allmulticast mode [ 59.335448][ T5762] bridge_slave_0: entered promiscuous mode [ 59.351534][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.358738][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.365970][ T5762] bridge_slave_1: entered allmulticast mode [ 59.372973][ T5762] bridge_slave_1: entered promiscuous mode [ 59.394813][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.401947][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.409287][ T5763] bridge_slave_0: entered allmulticast mode [ 59.416770][ T5763] bridge_slave_0: entered promiscuous mode [ 59.433486][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.441012][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.448341][ T5763] bridge_slave_1: entered allmulticast mode [ 59.455446][ T5763] bridge_slave_1: entered promiscuous mode [ 59.521609][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.536226][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.552337][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.581900][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.591787][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 59.622633][ T5762] team0: Port device team_slave_0 added [ 59.660386][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.667608][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.675443][ T5764] bridge_slave_0: entered allmulticast mode [ 59.682120][ T5764] bridge_slave_0: entered promiscuous mode [ 59.690794][ T5762] team0: Port device team_slave_1 added [ 59.708331][ T5763] team0: Port device team_slave_0 added [ 59.728421][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.736242][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.743381][ T5764] bridge_slave_1: entered allmulticast mode [ 59.750285][ T5764] bridge_slave_1: entered promiscuous mode [ 59.783006][ T5763] team0: Port device team_slave_1 added [ 59.803665][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.814782][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.821756][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.850511][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.877490][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.896889][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.903863][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.930436][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.942259][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.949550][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.977090][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.011038][ T5764] team0: Port device team_slave_0 added [ 60.024837][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.031809][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.058596][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.077180][ T5764] team0: Port device team_slave_1 added [ 60.116132][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.123316][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.131108][ T5761] bridge_slave_0: entered allmulticast mode [ 60.137981][ T5761] bridge_slave_0: entered promiscuous mode [ 60.146549][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.153670][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.161129][ T5761] bridge_slave_1: entered allmulticast mode [ 60.167821][ T5761] bridge_slave_1: entered promiscuous mode [ 60.178202][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.185393][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.211352][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.223810][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.230853][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.261782][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.312172][ T5762] hsr_slave_0: entered promiscuous mode [ 60.318635][ T5762] hsr_slave_1: entered promiscuous mode [ 60.363464][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.397220][ T5763] hsr_slave_0: entered promiscuous mode [ 60.403711][ T5763] hsr_slave_1: entered promiscuous mode [ 60.410193][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.418272][ T5763] Cannot create hsr debugfs directory [ 60.425881][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.440638][ T5764] hsr_slave_0: entered promiscuous mode [ 60.447018][ T5764] hsr_slave_1: entered promiscuous mode [ 60.453156][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.460795][ T5764] Cannot create hsr debugfs directory [ 60.538452][ T5761] team0: Port device team_slave_0 added [ 60.547110][ T5761] team0: Port device team_slave_1 added [ 60.617001][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.624608][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.651796][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.689771][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.697135][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.723372][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.735097][ T5082] Bluetooth: hci2: command tx timeout [ 60.814265][ T5776] Bluetooth: hci1: command tx timeout [ 60.814282][ T5774] Bluetooth: hci0: command tx timeout [ 60.826274][ T5082] Bluetooth: hci3: command tx timeout [ 60.838233][ T5761] hsr_slave_0: entered promiscuous mode [ 60.845191][ T5761] hsr_slave_1: entered promiscuous mode [ 60.851497][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.859156][ T5761] Cannot create hsr debugfs directory [ 61.018826][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.032154][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.050793][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.062034][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.158831][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.168099][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.179304][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.194732][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.267357][ T5761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.278334][ T5761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.290962][ T5761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.327953][ T5761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.382880][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.408860][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.427227][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.436728][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.469889][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.529867][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.571722][ T2104] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.579105][ T2104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.589349][ T2104] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.596606][ T2104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.617684][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.639355][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.653475][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.691511][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.712164][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.719328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.746939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.754114][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.763275][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.770466][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.802873][ T5762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.813486][ T5762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.836098][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.843205][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.893383][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.975822][ T5761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.033028][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.100019][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.107203][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.117246][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.124417][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.252676][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.401845][ T5762] veth0_vlan: entered promiscuous mode [ 62.435108][ T5762] veth1_vlan: entered promiscuous mode [ 62.448435][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.504836][ T5762] veth0_macvtap: entered promiscuous mode [ 62.515845][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.547211][ T5762] veth1_macvtap: entered promiscuous mode [ 62.608706][ T5764] veth0_vlan: entered promiscuous mode [ 62.628322][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.638624][ T5764] veth1_vlan: entered promiscuous mode [ 62.656028][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.669127][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.689492][ T5761] veth0_vlan: entered promiscuous mode [ 62.715895][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.726076][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.737736][ T5762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.746721][ T5762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.773689][ T5764] veth0_macvtap: entered promiscuous mode [ 62.803009][ T5764] veth1_macvtap: entered promiscuous mode [ 62.816243][ T5082] Bluetooth: hci2: command tx timeout [ 62.822718][ T5761] veth1_vlan: entered promiscuous mode [ 62.894820][ T5082] Bluetooth: hci3: command tx timeout [ 62.900301][ T5082] Bluetooth: hci1: command tx timeout [ 62.906332][ T5776] Bluetooth: hci0: command tx timeout [ 62.908027][ T5763] veth0_vlan: entered promiscuous mode [ 62.925860][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.936803][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.948147][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.965283][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.977140][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.989523][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.001205][ T5761] veth0_macvtap: entered promiscuous mode [ 63.020752][ T5761] veth1_macvtap: entered promiscuous mode [ 63.027941][ T5763] veth1_vlan: entered promiscuous mode [ 63.041981][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.046893][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.050763][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.068321][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.077163][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.077285][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.152633][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.160485][ T5763] veth0_macvtap: entered promiscuous mode [ 63.165708][ T5763] veth1_macvtap: entered promiscuous mode [ 63.190076][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.203426][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.217780][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.228168][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.239110][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.250844][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.272165][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.292944][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.303812][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.314427][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.328036][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.355614][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.370587][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.386102][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.396958][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.406897][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.417570][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.429285][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.458472][ T5761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.467441][ T5761] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.479784][ T5761] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.490800][ T5761] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.509364][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.526279][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.539049][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.551921][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.563907][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.574750][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.586072][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.604151][ T2104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.611993][ T2104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.968189][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.010457][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.062829][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.110564][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.315062][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.322932][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.478304][ T5829] syz.2.5[5829]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 64.604667][ T2104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.612533][ T2104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.675204][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.698563][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.744275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.895378][ T5082] Bluetooth: hci2: command tx timeout [ 64.974635][ T5082] Bluetooth: hci3: command tx timeout [ 64.986344][ T5776] Bluetooth: hci0: command tx timeout [ 64.993436][ T5082] Bluetooth: hci1: command tx timeout [ 65.035839][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.044703][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.281291][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.300693][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.416066][ T5827] IPVS: starting estimator thread 0... [ 65.533573][ T5834] IPVS: using max 36 ests per chain, 86400 per kthread [ 65.730570][ T5829] loop2: detected capacity change from 0 to 32768 [ 65.747995][ T5841] loop0: detected capacity change from 0 to 512 [ 66.664318][ T5756] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.696780][ T5829] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 66.964325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.976462][ T5082] Bluetooth: hci2: command tx timeout [ 67.440488][ T5082] Bluetooth: hci1: command tx timeout [ 67.446589][ T5776] Bluetooth: hci0: command tx timeout [ 67.452014][ T5776] Bluetooth: hci3: command tx timeout [ 67.689410][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 67.711192][ T5829] XFS (loop2): Ending clean mount [ 67.835093][ T5762] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 67.906552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 68.174205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.268049][ T5900] rtc_cmos 00:00: Alarms can be up to one day in the future [ 70.892690][ T5899] loop2: detected capacity change from 0 to 40427 [ 70.920462][ T5899] F2FS-fs (loop2): invalid crc value [ 70.941600][ T5899] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.950619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 70.974298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.982899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.003227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 71.016500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 71.025979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 71.143129][ T5899] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.352986][ T5899] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 71.379632][ T5899] F2FS-fs (loop2): Stopped filesystem due to reason: 4 [ 71.540323][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.547002][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.375021][ T5768] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 74.632269][ T5768] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.679311][ T5768] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 74.709250][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.743695][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.770881][ T5768] usb 4-1: config 0 descriptor?? [ 74.839272][ T5768] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 74.858064][ T5942] gretap0: entered promiscuous mode [ 75.436253][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.500738][ T5959] batadv_slave_0: entered promiscuous mode [ 76.455911][ T5768] usb 4-1: USB disconnect, device number 2 [ 77.889847][ T5990] netlink: 'syz.2.46': attribute type 10 has an invalid length. [ 78.167523][ T5990] veth0_vlan: left promiscuous mode [ 78.181238][ T5990] veth0_vlan: entered promiscuous mode [ 78.192650][ T5990] team0: Device veth0_vlan failed to register rx_handler [ 78.294802][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.304706][ T5993] batadv_slave_0: entered promiscuous mode [ 78.607168][ T5990] syz.2.46 (5990) used greatest stack depth: 20208 bytes left [ 81.047023][ T6029] Zero length message leads to an empty skb [ 81.784456][ T8] cfg80211: failed to load regulatory.db [ 84.334252][ T5827] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.525522][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.554351][ T5827] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.585938][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.620155][ T5827] usb 1-1: config 0 descriptor?? [ 84.915323][ T5827] usbhid 1-1:0.0: can't add hid device: -71 [ 84.938993][ T5827] usbhid: probe of 1-1:0.0 failed with error -71 [ 85.110992][ T5827] usb 1-1: USB disconnect, device number 2 [ 85.674220][ T5827] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.963053][ C0] ------------[ cut here ]------------ [ 85.968974][ C0] WARNING: CPU: 0 PID: 6136 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 85.979105][ C0] Modules linked in: [ 85.983054][ C0] CPU: 0 PID: 6136 Comm: syz.3.76 Not tainted syzkaller #0 [ 85.990326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.000485][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 86.006877][ C0] Code: 24 4c 89 e7 e8 ce 2c c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 73 84 f7 0f 0b e9 f6 f7 ff ff e8 fd 72 84 f7 <0f> 0b e9 48 fb ff ff e8 f1 72 84 f7 48 c7 c7 60 52 64 8e 4c 89 e6 [ 86.026679][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 86.032806][ C0] RAX: ffffffff8a02a213 RBX: ffffffff8a029016 RCX: ffff8880215c5a00 [ 86.040855][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.048896][ C0] RBP: 0000000000000000 R08: ffff8880215c5a00 R09: 0000000000000003 [ 86.056948][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805cb8e3c0 [ 86.065042][ C0] R13: dffffc0000000000 R14: ffff88805cb8e8b0 R15: ffff88807eb43824 [ 86.073087][ C0] FS: 00007ff5cc60e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 86.082096][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.088752][ C0] CR2: 0000200000005000 CR3: 0000000026dc8000 CR4: 00000000003506f0 [ 86.096842][ C0] Call Trace: [ 86.100161][ C0] [ 86.103025][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 86.108638][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 86.114149][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 86.120977][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 86.126584][ C0] __iterate_interfaces+0x243/0x500 [ 86.131830][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 86.138145][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 86.145430][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 86.151720][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 86.158809][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 86.164085][ C0] __hrtimer_run_queues+0x52a/0xc40 [ 86.169342][ C0] ? hw_scan_work+0xf60/0xf60 [ 86.174099][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 86.179251][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 86.185386][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 86.190538][ C0] handle_softirqs+0x280/0x820 [ 86.195365][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 86.200166][ C0] ? do_softirq+0x1a0/0x1a0 [ 86.204715][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 86.209946][ C0] __irq_exit_rcu+0xd3/0x190 [ 86.214580][ C0] ? irq_exit_rcu+0x20/0x20 [ 86.219125][ C0] irq_exit_rcu+0x9/0x20 [ 86.223401][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 86.229130][ C0] [ 86.232082][ C0] [ 86.235059][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.241081][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 86.246942][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 e9 de 04 00 00 4c 8b 75 d0 4c 89 e7 e8 f0 b3 30 09 e8 fb 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 86.266549][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.272766][ C0] RSP: 0018:ffffc9000599f658 EFLAGS: 00000282 [ 86.278896][ C0] RAX: eaf7f46e840d5200 RBX: 0000000000000000 RCX: eaf7f46e840d5200 [ 86.287029][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 86.295044][ C0] RBP: ffffc9000599f6b0 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 86.303115][ C0] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: ffff8880215c5a00 [ 86.311115][ C0] R13: dffffc0000000000 R14: ffff888018bb8000 R15: ffff8880b8e3cac8 [ 86.319159][ C0] ? finish_task_switch+0x265/0x8f0 [ 86.324382][ C0] __schedule+0x155b/0x45a0 [ 86.328892][ C0] ? asan.module_dtor+0x20/0x20 [ 86.333786][ C0] ? enqueue_timer+0x23d/0x550 [ 86.338569][ C0] ? __mod_timer+0x984/0xdb0 [ 86.343169][ C0] schedule+0xbd/0x170 [ 86.347287][ C0] schedule_timeout+0x188/0x2d0 [ 86.352153][ C0] ? console_conditional_schedule+0x40/0x40 [ 86.358066][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 86.364079][ C0] ? update_process_times+0x1b0/0x1b0 [ 86.369465][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.374679][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 86.379862][ C0] ? snd_rawmidi_write+0x369/0xb90 [ 86.384997][ C0] snd_rawmidi_write+0x3b4/0xb90 [ 86.389933][ C0] ? snd_rawmidi_read+0x6d0/0x6d0 [ 86.394969][ C0] ? do_task_dead+0xd0/0xd0 [ 86.399473][ C0] ? end_current_label_crit_section+0x149/0x170 [ 86.405722][ C0] ? common_file_perm+0x198/0x1f0 [ 86.410731][ C0] ? fsnotify_perm+0x5d/0x5e0 [ 86.415460][ C0] ? security_file_permission+0x79/0xa0 [ 86.421034][ C0] do_iter_write+0x4ea/0xc30 [ 86.425654][ C0] ? snd_rawmidi_read+0x6d0/0x6d0 [ 86.430674][ C0] ? vfs_iter_write+0xa0/0xa0 [ 86.435485][ C0] ? __import_iovec+0x3fa/0x850 [ 86.440333][ C0] ? import_iovec+0x73/0xa0 [ 86.444965][ C0] do_writev+0x27f/0x480 [ 86.449237][ C0] ? do_readv+0x460/0x460 [ 86.453574][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 86.459568][ C0] ? lock_chain_count+0x20/0x20 [ 86.464428][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 86.469658][ C0] do_syscall_64+0x55/0xa0 [ 86.474096][ C0] ? clear_bhb_loop+0x40/0x90 [ 86.478762][ C0] ? clear_bhb_loop+0x40/0x90 [ 86.483446][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.489349][ C0] RIP: 0033:0x7ff5cb79c799 [ 86.493755][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.513393][ C0] RSP: 002b:00007ff5cc60e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 86.521838][ C0] RAX: ffffffffffffffda RBX: 00007ff5cba15fa0 RCX: 00007ff5cb79c799 [ 86.529824][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 86.537813][ C0] RBP: 00007ff5cb832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 86.545792][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.553772][ C0] R13: 00007ff5cba16038 R14: 00007ff5cba15fa0 R15: 00007ffcc8334f68 [ 86.561759][ C0] [ 86.564786][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.572040][ C0] CPU: 0 PID: 6136 Comm: syz.3.76 Not tainted syzkaller #0 [ 86.579220][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.589254][ C0] Call Trace: [ 86.592516][ C0] [ 86.595339][ C0] dump_stack_lvl+0x18c/0x250 [ 86.600001][ C0] ? show_regs_print_info+0x20/0x20 [ 86.605178][ C0] ? load_image+0x400/0x400 [ 86.609668][ C0] panic+0x2dc/0x730 [ 86.613545][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 86.618034][ C0] __warn+0x2e0/0x470 [ 86.621999][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 86.627699][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 86.633397][ C0] report_bug+0x2be/0x4f0 [ 86.637709][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 86.643422][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 86.649124][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 86.654825][ C0] handle_bug+0xcf/0x120 [ 86.659068][ C0] exc_invalid_op+0x1a/0x50 [ 86.663555][ C0] asm_exc_invalid_op+0x1a/0x20 [ 86.668385][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 86.674699][ C0] Code: 24 4c 89 e7 e8 ce 2c c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 73 84 f7 0f 0b e9 f6 f7 ff ff e8 fd 72 84 f7 <0f> 0b e9 48 fb ff ff e8 f1 72 84 f7 48 c7 c7 60 52 64 8e 4c 89 e6 [ 86.694290][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 86.700339][ C0] RAX: ffffffff8a02a213 RBX: ffffffff8a029016 RCX: ffff8880215c5a00 [ 86.708290][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.716239][ C0] RBP: 0000000000000000 R08: ffff8880215c5a00 R09: 0000000000000003 [ 86.724387][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805cb8e3c0 [ 86.732338][ C0] R13: dffffc0000000000 R14: ffff88805cb8e8b0 R15: ffff88807eb43824 [ 86.740295][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 86.745838][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 86.751542][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 86.757239][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 86.762770][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 86.768215][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 86.774962][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 86.780490][ C0] __iterate_interfaces+0x243/0x500 [ 86.785675][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 86.791897][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 86.799079][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 86.805308][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 86.812314][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 86.817505][ C0] __hrtimer_run_queues+0x52a/0xc40 [ 86.822695][ C0] ? hw_scan_work+0xf60/0xf60 [ 86.827357][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 86.832450][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 86.838505][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 86.843600][ C0] handle_softirqs+0x280/0x820 [ 86.848345][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 86.853203][ C0] ? do_softirq+0x1a0/0x1a0 [ 86.857700][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 86.862976][ C0] __irq_exit_rcu+0xd3/0x190 [ 86.867570][ C0] ? irq_exit_rcu+0x20/0x20 [ 86.872064][ C0] irq_exit_rcu+0x9/0x20 [ 86.876299][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 86.881918][ C0] [ 86.884832][ C0] [ 86.887746][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.893707][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 86.899493][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 e9 de 04 00 00 4c 8b 75 d0 4c 89 e7 e8 f0 b3 30 09 e8 fb 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 86.919097][ C0] RSP: 0018:ffffc9000599f658 EFLAGS: 00000282 [ 86.925156][ C0] RAX: eaf7f46e840d5200 RBX: 0000000000000000 RCX: eaf7f46e840d5200 [ 86.933131][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 86.941092][ C0] RBP: ffffc9000599f6b0 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 86.949059][ C0] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: ffff8880215c5a00 [ 86.957015][ C0] R13: dffffc0000000000 R14: ffff888018bb8000 R15: ffff8880b8e3cac8 [ 86.965045][ C0] ? finish_task_switch+0x265/0x8f0 [ 86.970260][ C0] __schedule+0x155b/0x45a0 [ 86.974771][ C0] ? asan.module_dtor+0x20/0x20 [ 86.979610][ C0] ? enqueue_timer+0x23d/0x550 [ 86.984368][ C0] ? __mod_timer+0x984/0xdb0 [ 86.988981][ C0] schedule+0xbd/0x170 [ 86.993055][ C0] schedule_timeout+0x188/0x2d0 [ 86.997887][ C0] ? console_conditional_schedule+0x40/0x40 [ 87.003768][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 87.009732][ C0] ? update_process_times+0x1b0/0x1b0 [ 87.015201][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.020429][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 87.025639][ C0] ? snd_rawmidi_write+0x369/0xb90 [ 87.030751][ C0] snd_rawmidi_write+0x3b4/0xb90 [ 87.035843][ C0] ? snd_rawmidi_read+0x6d0/0x6d0 [ 87.040865][ C0] ? do_task_dead+0xd0/0xd0 [ 87.045388][ C0] ? end_current_label_crit_section+0x149/0x170 [ 87.051620][ C0] ? common_file_perm+0x198/0x1f0 [ 87.056640][ C0] ? fsnotify_perm+0x5d/0x5e0 [ 87.061310][ C0] ? security_file_permission+0x79/0xa0 [ 87.066838][ C0] do_iter_write+0x4ea/0xc30 [ 87.071418][ C0] ? snd_rawmidi_read+0x6d0/0x6d0 [ 87.076427][ C0] ? vfs_iter_write+0xa0/0xa0 [ 87.081090][ C0] ? __import_iovec+0x3fa/0x850 [ 87.085936][ C0] ? import_iovec+0x73/0xa0 [ 87.090431][ C0] do_writev+0x27f/0x480 [ 87.094695][ C0] ? do_readv+0x460/0x460 [ 87.099022][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 87.104991][ C0] ? lock_chain_count+0x20/0x20 [ 87.109831][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 87.115011][ C0] do_syscall_64+0x55/0xa0 [ 87.119416][ C0] ? clear_bhb_loop+0x40/0x90 [ 87.124076][ C0] ? clear_bhb_loop+0x40/0x90 [ 87.128733][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.134621][ C0] RIP: 0033:0x7ff5cb79c799 [ 87.139030][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.158645][ C0] RSP: 002b:00007ff5cc60e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 87.167045][ C0] RAX: ffffffffffffffda RBX: 00007ff5cba15fa0 RCX: 00007ff5cb79c799 [ 87.175020][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 87.182997][ C0] RBP: 00007ff5cb832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 87.190952][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.198908][ C0] R13: 00007ff5cba16038 R14: 00007ff5cba15fa0 R15: 00007ffcc8334f68 [ 87.206882][ C0] [ 87.210093][ C0] Kernel Offset: disabled [ 87.214474][ C0] Rebooting in 86400 seconds..