last executing test programs: 1m10.874867953s ago: executing program 3 (id=4): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) 1m6.157761868s ago: executing program 3 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}}, 0x10080) 1m4.279154179s ago: executing program 3 (id=8): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x628, 0x140, 0x0, 0x220, 0x4d8, 0x220, 0x618, 0x618, 0x618, 0x618, 0x618, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x100, 0x20}}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x8, 0x5, 0x3, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x32}, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 0x3d, 0x23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x44, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000140), 0x1003, r0, 0x0, 0x2000000}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r0}, 0x38) 1m2.680524332s ago: executing program 3 (id=11): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1m1.032290158s ago: executing program 3 (id=14): r0 = socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x283}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) stat(&(0x7f000000fcc0)='./file0\x00', &(0x7f000000fd00)) getgroups(0x1, &(0x7f000000fd80)=[0xee00]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000010380)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000103c0)={'\x00', 0x2, 0xfffffffe, 0x6, 0x3, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f0000010440)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x3a, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 59.970365641s ago: executing program 4 (id=15): socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, 0x0) write$khugepaged_scan(r3, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000000)={0x4926ad51, 0x1000, {0x0}, {0xee01}, 0xe, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x1, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 56.390037322s ago: executing program 4 (id=17): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 53.241044828s ago: executing program 4 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0xf, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0xa7dc2) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x5, 0x12, 0x1, 0x10, "6972a16387920cfad256559f58af1ac31147a83d9b98f15a744d3c03497fc60c69384e4c90a0ed09e1b7f957fb401fa9e05136d2dd259e85fba5a108da06e82d", "7ae7cae7925fbe121718e6deb2cae3a91e00", [0x0, 0x4]}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 49.358446975s ago: executing program 4 (id=24): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 47.981165247s ago: executing program 4 (id=26): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) 46.42262373s ago: executing program 4 (id=30): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) socket$nl_generic(0x10, 0x3, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x880, 0x0) splice(r2, 0x0, r5, 0x0, 0x4ffe6, 0x0) 44.386498695s ago: executing program 32 (id=14): r0 = socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x283}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) stat(&(0x7f000000fcc0)='./file0\x00', &(0x7f000000fd00)) getgroups(0x1, &(0x7f000000fd80)=[0xee00]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000010380)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000103c0)={'\x00', 0x2, 0xfffffffe, 0x6, 0x3, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f0000010440)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x3a, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 33.3066537s ago: executing program 0 (id=40): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) 32.422457419s ago: executing program 0 (id=41): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="ec", 0x1, 0x200c8004, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x79}, 0x8) 31.533836553s ago: executing program 0 (id=42): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0xfffffffe}) ioctl$sock_bt_hci(r0, 0x400448e2, 0x0) 30.607061332s ago: executing program 33 (id=30): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) socket$nl_generic(0x10, 0x3, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x880, 0x0) splice(r2, 0x0, r5, 0x0, 0x4ffe6, 0x0) 30.516491542s ago: executing program 0 (id=45): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_setup(0xc299, &(0x7f0000000280)={0x0, 0x4a24, 0x80, 0x0, 0x240, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff82113d2b0f05d018dd4681db", @ANYRES32=0x0, @ANYBLOB="0020000042000200200012800b0001006272696467650000100002800c0021000000000000000080"], 0x40}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073790132000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet(r3, 0x0, 0xfffffffffffffe01) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r11, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r11, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) 27.339890354s ago: executing program 0 (id=48): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) eventfd2(0x6a, 0x80800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000001c0)=0xffffffff00000041, 0x8) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 27.027199725s ago: executing program 2 (id=49): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x3b, &(0x7f0000000a80)=[{0x1a, '\x00', @buffer={"64b5b4c85cd0b79de9230a038e185fcc26af00b21cfe704fe7b83e8e9dd36624", 0x20}, 0x9}, {0x16, '\x00', @buffer={"9bff5273ad8f5465b1c4458fc1c3252d98b0fe4375614b5e4535a1e13f5b683b", 0x20}, 0xfffffffb}, {0xa, '\x00', @st={0x4, [{0x3}, {0x1, @svalue=0x287ebc42}, {0x0, @svalue=0x1000}, {0x3, @uvalue=0x8c}]}, 0x2}, {0x37, '\x00', @buffer={"9760e64074e0cd8c1bacc23e520ccb79f4efdcf2d5cbc775879ccda303b4df5e", 0x20}, 0xfffffff7}, {0x31, '\x00', @buffer={"e6fa8862b99262fe5973a918753fb3eb2d5029666d73e0b06904c8c2e3a0ad64", 0x20}, 0x9}, {0xf, '\x00', @data=0x4, 0xa93}]}) 26.11089607s ago: executing program 2 (id=51): openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) 22.587760438s ago: executing program 1 (id=52): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r3, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) 21.581830982s ago: executing program 0 (id=53): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) 21.520302638s ago: executing program 2 (id=54): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x44040) 19.16335885s ago: executing program 1 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r2, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="1bb1b293e5", 0x5}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 18.713404622s ago: executing program 2 (id=56): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 17.970294045s ago: executing program 2 (id=57): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x18}], 0x1}, 0x0) 17.656121055s ago: executing program 1 (id=58): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r0], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 17.400094638s ago: executing program 2 (id=59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x800000080000000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 16.996970763s ago: executing program 1 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x8000400) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x1ddd, &(0x7f0000000200)={0x0, 0x40000000, 0x200, 0x1, 0x8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000004c0)=[{0x2}], 0xaaaaaaaaaaaaac9, 0xbff, 0x1e, 0x28, 0x2e, 0x1}) 12.366716054s ago: executing program 1 (id=61): syz_usb_connect(0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) eventfd2(0x6a, 0x80800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000001c0)=0xffffffff00000041, 0x8) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4.569408927s ago: executing program 34 (id=53): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) 1.227634009s ago: executing program 35 (id=59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x800000080000000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 1 (id=64): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000400)={0x40, 0x12, 0x36, "98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x1, 0x9, 0x2, &(0x7f0000000100)={0xf, "f7b51030c4b7c54bf28facb1ed3ee206000000bc517b5452b3b94bce47509d00"}}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140000001f000103000000000000000001"], 0x114}], 0x1}, 0x0) dup(0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000a40)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x18, 0x9}}}}}}}}, 0x52) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 190.318943][ T5749] cgroup: Unknown subsys name 'net' [ 190.448696][ T5749] cgroup: Unknown subsys name 'cpuset' [ 190.464387][ T5749] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 197.379164][ T5749] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 202.295349][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.311076][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.328604][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.338055][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.345990][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.346890][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.354823][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.362403][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.376743][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.393366][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.393896][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.407673][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.416939][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.418684][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.429734][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.434907][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.447893][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.460077][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.473688][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.498177][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.510125][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.511027][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.538930][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.563767][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.595345][ T5070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.109108][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.115814][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.230979][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 204.357721][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 204.547496][ T5070] Bluetooth: hci0: command tx timeout [ 204.637733][ T5773] Bluetooth: hci4: command tx timeout [ 204.638078][ T5785] Bluetooth: hci2: command tx timeout [ 204.643722][ T5070] Bluetooth: hci3: command tx timeout [ 204.717759][ T5070] Bluetooth: hci1: command tx timeout [ 204.841127][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 205.114865][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 205.276917][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 205.694242][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.702239][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.710505][ T5770] bridge_slave_0: entered allmulticast mode [ 205.719974][ T5770] bridge_slave_0: entered promiscuous mode [ 205.871046][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.890509][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.908676][ T5770] bridge_slave_1: entered allmulticast mode [ 205.929082][ T5770] bridge_slave_1: entered promiscuous mode [ 205.949581][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.957138][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.970537][ T5769] bridge_slave_0: entered allmulticast mode [ 205.980474][ T5769] bridge_slave_0: entered promiscuous mode [ 206.245350][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.261421][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.271117][ T5769] bridge_slave_1: entered allmulticast mode [ 206.288801][ T5769] bridge_slave_1: entered promiscuous mode [ 206.316457][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.334462][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.343960][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.354318][ T5771] bridge_slave_0: entered allmulticast mode [ 206.365306][ T5771] bridge_slave_0: entered promiscuous mode [ 206.470825][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.513667][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.522324][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.530107][ T5771] bridge_slave_1: entered allmulticast mode [ 206.539318][ T5771] bridge_slave_1: entered promiscuous mode [ 206.558225][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.627970][ T5070] Bluetooth: hci0: command tx timeout [ 206.697589][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.707716][ T5070] Bluetooth: hci2: command tx timeout [ 206.707840][ T5785] Bluetooth: hci3: command tx timeout [ 206.713269][ T5070] Bluetooth: hci4: command tx timeout [ 206.748415][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.756498][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.765162][ T5768] bridge_slave_0: entered allmulticast mode [ 206.773945][ T5768] bridge_slave_0: entered promiscuous mode [ 206.787531][ T5070] Bluetooth: hci1: command tx timeout [ 206.882070][ T5770] team0: Port device team_slave_0 added [ 206.888433][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.896071][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.905122][ T5768] bridge_slave_1: entered allmulticast mode [ 206.914279][ T5768] bridge_slave_1: entered promiscuous mode [ 206.924859][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.933249][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.941332][ T5767] bridge_slave_0: entered allmulticast mode [ 206.950309][ T5767] bridge_slave_0: entered promiscuous mode [ 206.971696][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.018994][ T5770] team0: Port device team_slave_1 added [ 207.052336][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.060218][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.068904][ T5767] bridge_slave_1: entered allmulticast mode [ 207.077882][ T5767] bridge_slave_1: entered promiscuous mode [ 207.095878][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.114773][ T5769] team0: Port device team_slave_0 added [ 207.238235][ T5769] team0: Port device team_slave_1 added [ 207.293319][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.390959][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.398738][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.425224][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.448184][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.465861][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.483930][ T5771] team0: Port device team_slave_0 added [ 207.521180][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.528415][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.555054][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.603166][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.621225][ T5771] team0: Port device team_slave_1 added [ 207.629879][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.637038][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.663846][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.773449][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.780759][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.807708][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.851507][ T5768] team0: Port device team_slave_0 added [ 207.966279][ T5768] team0: Port device team_slave_1 added [ 207.980045][ T5767] team0: Port device team_slave_0 added [ 207.989555][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.996687][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.023248][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.086287][ T5770] hsr_slave_0: entered promiscuous mode [ 208.097061][ T5770] hsr_slave_1: entered promiscuous mode [ 208.141803][ T5767] team0: Port device team_slave_1 added [ 208.150415][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.158488][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.184883][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.344405][ T5769] hsr_slave_0: entered promiscuous mode [ 208.353280][ T5769] hsr_slave_1: entered promiscuous mode [ 208.362318][ T5769] debugfs: 'hsr0' already exists in 'hsr' [ 208.368304][ T5769] Cannot create hsr debugfs directory [ 208.377009][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.384419][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.411529][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.500676][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.507904][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.534411][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.549157][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.556752][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.583474][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.601979][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.609728][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.638149][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.707527][ T5070] Bluetooth: hci0: command tx timeout [ 208.787714][ T5785] Bluetooth: hci4: command tx timeout [ 208.793474][ T5773] Bluetooth: hci2: command tx timeout [ 208.800536][ T5070] Bluetooth: hci3: command tx timeout [ 208.869055][ T5070] Bluetooth: hci1: command tx timeout [ 208.871389][ T5771] hsr_slave_0: entered promiscuous mode [ 208.884276][ T5771] hsr_slave_1: entered promiscuous mode [ 208.892795][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 208.898729][ T5771] Cannot create hsr debugfs directory [ 209.127534][ T5768] hsr_slave_0: entered promiscuous mode [ 209.136355][ T5768] hsr_slave_1: entered promiscuous mode [ 209.145010][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 209.150986][ T5768] Cannot create hsr debugfs directory [ 209.273067][ T5767] hsr_slave_0: entered promiscuous mode [ 209.282065][ T5767] hsr_slave_1: entered promiscuous mode [ 209.290612][ T5767] debugfs: 'hsr0' already exists in 'hsr' [ 209.296464][ T5767] Cannot create hsr debugfs directory [ 210.512677][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.533194][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.556754][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.593767][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.727460][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.767576][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.789785][ T5070] Bluetooth: hci0: command tx timeout [ 210.798474][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.826981][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.867763][ T5773] Bluetooth: hci2: command tx timeout [ 210.873957][ T5773] Bluetooth: hci4: command tx timeout [ 210.880166][ T5070] Bluetooth: hci3: command tx timeout [ 210.951435][ T5773] Bluetooth: hci1: command tx timeout [ 211.085435][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.120785][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.173261][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.203503][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.451210][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.519499][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.545434][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.607802][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.932888][ T5767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.971000][ T5767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.000755][ T5767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.050933][ T5767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.251790][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.345449][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.518882][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.570076][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.754862][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.763354][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.783687][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.791122][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.808028][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.815356][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.946242][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.985595][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.993086][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.253939][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.273686][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.363036][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.370924][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.441931][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.449558][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.600918][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.674553][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.682136][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.778685][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.786125][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.961458][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.324783][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.486442][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.494269][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.666186][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.674064][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.116110][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.571427][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.034005][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.145800][ T5770] veth0_vlan: entered promiscuous mode [ 216.405346][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.463912][ T5770] veth1_vlan: entered promiscuous mode [ 216.519518][ T5769] veth0_vlan: entered promiscuous mode [ 216.593857][ T5769] veth1_vlan: entered promiscuous mode [ 216.785389][ T5771] veth0_vlan: entered promiscuous mode [ 216.857895][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.922442][ T5771] veth1_vlan: entered promiscuous mode [ 217.106134][ T5770] veth0_macvtap: entered promiscuous mode [ 217.168614][ T5770] veth1_macvtap: entered promiscuous mode [ 217.254006][ T5769] veth0_macvtap: entered promiscuous mode [ 217.298061][ T5769] veth1_macvtap: entered promiscuous mode [ 217.377128][ T5768] veth0_vlan: entered promiscuous mode [ 217.473615][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.504113][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.552952][ T5768] veth1_vlan: entered promiscuous mode [ 217.622808][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.645765][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.755325][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.812977][ T5771] veth0_macvtap: entered promiscuous mode [ 217.859603][ T151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.870086][ T151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.914956][ T5771] veth1_macvtap: entered promiscuous mode [ 217.949097][ T151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.961409][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.978880][ T151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.043543][ T151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.065324][ T151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.241617][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.343130][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.512718][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.538278][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.568212][ T5768] veth0_macvtap: entered promiscuous mode [ 218.613065][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.639006][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.685204][ T5768] veth1_macvtap: entered promiscuous mode [ 218.992004][ T5767] veth0_vlan: entered promiscuous mode [ 219.192429][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.266996][ T5767] veth1_vlan: entered promiscuous mode [ 219.356208][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.584661][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.611315][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.673283][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.709092][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.024257][ T5767] veth0_macvtap: entered promiscuous mode [ 220.171129][ T5767] veth1_macvtap: entered promiscuous mode [ 220.440487][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.583682][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.770076][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.802825][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.866803][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.925079][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.637011][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.691910][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.927446][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.935592][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.142514][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.182824][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.327647][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.336890][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.745898][ T5770] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 225.892142][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.937698][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.339756][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.388863][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.768491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 227.178122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 227.486253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.486739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.592258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 227.696254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.748095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 227.790397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.792090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.815251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 228.798604][ T5823] kernel write not supported for file /cpu/0/msr (pid: 5823 comm: kworker/0:3) [ 231.857801][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.872063][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.970555][ T5963] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 232.378181][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.386249][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.282484][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.336453][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.713282][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.753716][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.220888][ T5829] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 241.468384][ T5829] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 241.556102][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 241.578859][ T5829] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 241.651286][ T5829] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 241.707488][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.777544][ T5829] usb 5-1: Product: syz [ 241.788322][ T5829] usb 5-1: Manufacturer: syz [ 241.833361][ T5829] usb 5-1: SerialNumber: syz [ 241.944966][ T5829] usb 5-1: config 0 descriptor?? [ 242.014186][ T6020] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.033668][ T6020] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.100083][ T5829] usb 5-1: ucan: probing device on interface #0 [ 242.601902][ T5829] usb 5-1: ucan: device reported invalid device info [ 242.687532][ T5829] usb 5-1: ucan: probe failed; try to update the device firmware [ 242.825733][ T5823] usb 5-1: USB disconnect, device number 2 [ 248.268222][ T6039] bridge0: port 3(vxlan0) entered blocking state [ 248.325565][ T6039] bridge0: port 3(vxlan0) entered disabled state [ 248.362436][ T6039] vxlan0: entered allmulticast mode [ 248.435311][ T6039] vxlan0: entered promiscuous mode [ 256.834052][ T6072] process 'syz.0.34' launched './file0' with NULL argv: empty string added [ 258.909295][ T5070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.929854][ T5070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.978807][ T5070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.034250][ T5070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.051468][ T5070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.187467][ T5773] Bluetooth: hci5: command tx timeout [ 262.039250][ T6080] syzkaller0: entered promiscuous mode [ 262.045127][ T6080] syzkaller0: entered allmulticast mode [ 263.280667][ T5773] Bluetooth: hci5: command tx timeout [ 264.081910][ T6073] chnl_net:caif_netlink_parms(): no params data found [ 264.855423][ T1038] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.336326][ T1038] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.366230][ T5773] Bluetooth: hci5: command tx timeout [ 265.534796][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.557518][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.778990][ T1038] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.243326][ T1038] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.375019][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 267.438126][ T5773] Bluetooth: hci5: command tx timeout [ 268.421879][ T6117] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 268.435416][ T5070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.460597][ T5070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.480069][ T5070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.522518][ T5070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.536815][ T5070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.885017][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.915346][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.989085][ T6073] bridge_slave_0: entered allmulticast mode [ 269.034766][ T6073] bridge_slave_0: entered promiscuous mode [ 269.193754][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.253355][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.298536][ T6073] bridge_slave_1: entered allmulticast mode [ 269.349625][ T6073] bridge_slave_1: entered promiscuous mode [ 269.444831][ T1038] bridge_slave_1: left allmulticast mode [ 269.450873][ T1038] bridge_slave_1: left promiscuous mode [ 269.496641][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.608431][ T1038] bridge_slave_0: left allmulticast mode [ 269.614450][ T1038] bridge_slave_0: left promiscuous mode [ 269.658733][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.644858][ T5773] Bluetooth: hci3: command tx timeout [ 272.798254][ T5773] Bluetooth: hci3: command tx timeout [ 274.867710][ T5773] Bluetooth: hci3: command tx timeout [ 275.388437][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.479119][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.977485][ T5773] Bluetooth: hci3: command tx timeout [ 277.005741][ T1038] bond0 (unregistering): Released all slaves [ 278.753450][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.107689][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.784461][ T6073] team0: Port device team_slave_0 added [ 279.911286][ T1038] hsr_slave_0: left promiscuous mode [ 279.933136][ T1038] hsr_slave_1: left promiscuous mode [ 280.137864][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.145494][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.215360][ T6167] kvm: user requested TSC rate below hardware speed [ 280.250701][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.296198][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.609432][ T1038] veth1_macvtap: left promiscuous mode [ 288.615212][ T1038] veth0_macvtap: left promiscuous mode [ 292.037587][ T1038] veth1_vlan: left promiscuous mode [ 292.043219][ T1038] veth0_vlan: left promiscuous mode [ 294.158960][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.177998][ T5070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.187340][ T5070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.214803][ T5070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.225836][ T5070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.666718][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 294.734085][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 295.554892][ T6073] team0: Port device team_slave_1 added [ 296.374757][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.387845][ T5773] Bluetooth: hci0: command tx timeout [ 296.402554][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.537713][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.584289][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.647727][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.747663][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.347008][ T5070] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.362013][ T5070] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.398333][ T5070] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.450573][ T5070] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.474411][ T5070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.903017][ T5831] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 298.109884][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 298.159442][ T5831] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 298.169736][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.189222][ T5831] usb 2-1: config 0 descriptor?? [ 298.410223][ T5831] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 298.474613][ T5773] Bluetooth: hci0: command tx timeout [ 298.504121][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.519178][ T6073] hsr_slave_0: entered promiscuous mode [ 298.602648][ T6073] hsr_slave_1: entered promiscuous mode [ 298.612493][ T6185] ===================================================== [ 298.620127][ T6185] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 298.627809][ T6185] _copy_to_user+0xcc/0x120 [ 298.632571][ T6185] i2cdev_ioctl_smbus+0x586/0x660 [ 298.638049][ T6185] i2cdev_ioctl+0xa14/0xf40 [ 298.642845][ T6185] __se_sys_ioctl+0x23c/0x400 [ 298.647943][ T6185] __x64_sys_ioctl+0x97/0xe0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 298.658867][ T6185] x64_sys_call+0x1975/0x3ea0 [ 298.665920][ T6185] do_syscall_64+0x134/0xf80 [ 298.671121][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.681790][ T6185] [ 298.684180][ T6185] Uninit was stored to memory at: [ 298.689644][ T6185] __i2c_smbus_xfer+0x25b3/0x3120 [ 298.694896][ T6185] i2c_smbus_xfer+0x2d8/0x480 [ 298.699769][ T6185] i2cdev_ioctl_smbus+0x4a1/0x660 [ 298.705108][ T6185] i2cdev_ioctl+0xa14/0xf40 [ 298.709911][ T6185] __se_sys_ioctl+0x23c/0x400 [ 298.714699][ T6185] __x64_sys_ioctl+0x97/0xe0 [ 298.719483][ T6185] x64_sys_call+0x1975/0x3ea0 [ 298.724338][ T6185] do_syscall_64+0x134/0xf80 [ 298.729137][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.735134][ T6185] [ 298.737599][ T6185] Local variable msgbuf1.i created at: [ 298.743102][ T6185] __i2c_smbus_xfer+0x853/0x3120 [ 298.748219][ T6185] i2c_smbus_xfer+0x2d8/0x480 [ 298.756509][ T6185] [ 298.760073][ T6185] Byte 0 of 1 is uninitialized [ 298.764883][ T6185] Memory access of size 1 starts at ffff888053e1bd06 [ 298.771937][ T6185] Data copied to user address 0000200000000100 [ 298.778229][ T6185] [ 298.780627][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT(full) [ 298.790080][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.800709][ T6185] ===================================================== [ 298.807867][ T6185] Disabling lock debugging due to kernel taint [ 298.818834][ T5831] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 298.826210][ T5831] usb 2-1: media controller created [ 298.913773][ T6185] Kernel panic - not syncing: kmsan.panic set ... [ 298.920385][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: syz.1.64 Tainted: G B syzkaller #0 PREEMPT(full) [ 298.931346][ T6185] Tainted: [B]=BAD_PAGE [ 298.935612][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.945907][ T6185] Call Trace: [ 298.949319][ T6185] [ 298.952368][ T6185] __dump_stack+0x26/0x30 [ 298.956923][ T6185] dump_stack_lvl+0x50/0x1c0 [ 298.961746][ T6185] ? dump_stack+0x12/0x25 [ 298.966338][ T6185] dump_stack+0x1e/0x25 [ 298.970728][ T6185] vpanic+0x7b4/0x1430 [ 298.975062][ T6185] panic+0x15d/0x160 [ 298.979226][ T6185] kmsan_report+0x31a/0x320 [ 298.983957][ T6185] ? kmsan_internal_check_memory+0x1e8/0x240 [ 298.990154][ T6185] ? kmsan_copy_to_user+0xef/0x190 [ 298.995473][ T6185] ? _copy_to_user+0xcc/0x120 [ 299.000385][ T6185] ? i2cdev_ioctl_smbus+0x586/0x660 [ 299.005830][ T6185] ? i2cdev_ioctl+0xa14/0xf40 [ 299.010738][ T6185] ? __se_sys_ioctl+0x23c/0x400 [ 299.015784][ T6185] ? __x64_sys_ioctl+0x97/0xe0 [ 299.020745][ T6185] ? x64_sys_call+0x1975/0x3ea0 [ 299.025816][ T6185] ? do_syscall_64+0x134/0xf80 [ 299.030893][ T6185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.037165][ T6185] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 299.042696][ T6185] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 299.048210][ T6185] ? __i2c_transfer+0x1179/0x3280 [ 299.053473][ T6185] ? kmsan_get_metadata+0xf1/0x160 [ 299.058812][ T6185] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 299.065555][ T6185] ? kmsan_get_metadata+0xf1/0x160 [ 299.070940][ T6185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 299.077090][ T6185] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 299.082496][ T6185] ? kmsan_get_metadata+0xf1/0x160 [ 299.087849][ T6185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 299.093914][ T6185] kmsan_internal_check_memory+0x1e8/0x240 [ 299.100012][ T6185] kmsan_copy_to_user+0xef/0x190 [ 299.105430][ T6185] _copy_to_user+0xcc/0x120 [ 299.110177][ T6185] i2cdev_ioctl_smbus+0x586/0x660 [ 299.115475][ T6185] i2cdev_ioctl+0xa14/0xf40 [ 299.120218][ T6185] ? kmsan_report+0x299/0x320 [ 299.125200][ T6185] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 299.130456][ T6185] __se_sys_ioctl+0x23c/0x400 [ 299.135351][ T6185] __x64_sys_ioctl+0x97/0xe0 [ 299.140242][ T6185] x64_sys_call+0x1975/0x3ea0 [ 299.145594][ T6185] do_syscall_64+0x134/0xf80 [ 299.150534][ T6185] ? clear_bhb_loop+0x50/0xa0 [ 299.155417][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.161602][ T6185] RIP: 0033:0x7fcee9b9c629 [ 299.166164][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.185978][ T6185] RSP: 002b:00007fceea9d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.194592][ T6185] RAX: ffffffffffffffda RBX: 00007fcee9e15fa0 RCX: 00007fcee9b9c629 [ 299.202863][ T6185] RDX: 0000200000000040 RSI: 0000000000000720 RDI: 0000000000000005 [ 299.211007][ T6185] RBP: 00007fcee9c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 299.219207][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.227316][ T6185] R13: 00007fcee9e16038 R14: 00007fcee9e15fa0 R15: 00007fff59f95898 [ 299.235483][ T6185] [ 299.239165][ T6185] Kernel Offset: disabled [ 299.243671][ T6185] Rebooting in 86400 seconds..