last executing test programs: 3.145109038s ago: executing program 0 (id=1): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x8000, 0x0, 0x1e) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000003800)=""/4075, 0xfeb}, {&(0x7f0000000080)=""/7, 0x7}], 0xa}}], 0x1, 0x0, 0x0) 2.915632463s ago: executing program 0 (id=5): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '/^', 0x3a, ']$@K-^{', 0x3a, './file0'}, 0x30) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x3}, {0xffff}, 0xa0, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="bd26e7cc5ee84b628e6102bac04c2cc552129149f67b30c7b9aa86e3f8c57f998b23e37636b3202568cab881b3f31d5a6012c6ea63baa6efa0f78aa8139c52ed00fe672b51bc3ccea8e532196d89a9a31936173cfdb25a0f5e69f7b8", 0x5c, 0x0, &(0x7f0000000300)={0x2, 0x178, {0x0, 0xc, 0xc3, "8df1791e12ee43fc582ca09f9e49f285cc38c727bfc50ec2f76ca7b55d2b2b2878562b411eee7bb788ae6f57a7f2ffbdd6cb12d1ce71c3ef5871284accd56c86266e5070a2bd9a027f230068ad8eac60e36736880907e7173a2c5ce384c5d978bc5e1b99642c1a1f1961938a6d94f379a33b5b7e6db3ed4bad2e7c6aa900597a6e40e9274153548dbbf5112462b414fa555a1168dd3b3e6243e7d81580bc50ace5443a42585dc5c8e89bf2f38d68e545a7ef3141ec8bc4897169b0abb780a63a9e8a4d", 0xa8, "b1c835addae8e2aeec99c7c6729315df49a2c2d9f58ea09ec7e97431616401b4f1470074093a846a90779e876214ddcd59882da8373f3ad31b3263aa582e7ca714e5595b7a7eaf8db4a416dd80f2a45e586e1afb9922e0daf5dce8f5d11d364bd51e876b541e063af11488fc6ac9e7aa05117a2d4cc6178a33115f36f4daa6d6222da8afc5571b5e0f0449c92404b767d9b0397f812d0959e3545b8742fb6a981ff035f793e0d5d9"}, 0xee, "21f9538c5cc9b5dd5d228134c0b607a6f7c0d9edf4c6e210c2d26e57a3abacb9630bcf64895866f6f0dcf1d2555e91c4b8ccb0166ff67c44bfc36fccf871b653714607f1c9af5ab67897fb03ca6afa8f75a701bf68043b716225938cedabc3939b09419eb5d1428ff8d1ffac75bde8e807c37a886bc0c393ce1413fd9ff32a88672c541aa196b3db76bf49583c41917744fd6fae766b2e5b43eef564058de5ac7b5a2689f535519ac95221fa173ab1981b4d91a0170c2810f0cdeeb67c40edbbc64bb0780dd74260c69b08a70b0739583fd9b8a798908f372be8b7f56a30c04b4d5ce94fea054019e52d6f516d6f"}, 0x272}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$video(&(0x7f0000000040), 0x41a4, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000080)={0x0, "6f2699bf988913927a7f60763318f4d49461aa1a41a0d3264519fee88f3c3a8e"}) syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 2.588828253s ago: executing program 3 (id=4): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f01df650fc72b66b852000f00d0c4e1f9def20f38cac90f20e035000100000f22e0fa260fc75e74440f20c0350f000000440f22c0098a00900000", 0x3b}], 0x1, 0x40, &(0x7f0000000180), 0x0) setrlimit(0xf, &(0x7f0000000180)={0x7fff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) prlimit64(r1, 0x8, &(0x7f0000000340)={0xcb2, 0x6}, &(0x7f0000000380)) rmdir(&(0x7f0000000080)='./file0\x00') mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x400408, &(0x7f00000001c0)=ANY=[@ANYBLOB="eff96fe91c9e2788f9c45f70b26d7f1c67e83873954e82bb3d154beedeecb7d1f86369a34966f288edd6cc54f0ee3f4177009095ecc0438bb5264865ee932bee35545eb3d44c3d66c904774c02eaf1bec37529fb14d61794f8effcc03105eeebfa38dd5ec0a64b79d4deb3fde562c94c17bce612deee83ee6f5ecefc50beed1f75eee920a8fb15ad8623b5767bf12793df4e5707ff32beaa65f28522a35d68255996c16cf3e24ed18bbf3a59f6d436391b5d67a47202a25305a76d31337d74f901c8117a7de8c5e34a09957bf457ccb7b81ef3d8f95c7c8b2bc8cbec2a09df7fbe05ea9580771b0a8a0d725bb1eeee"]) 2.441158699s ago: executing program 3 (id=6): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ef}}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200e07000000070f0900000045"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.194709422s ago: executing program 1 (id=2): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x93}]}, 0x2c}}, 0x4) 2.06132974s ago: executing program 1 (id=7): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/240, 0xf0}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0x40, 0x50) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/240, 0xf0}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x3) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0x40, 0x50) (async) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) (async) 2.055983275s ago: executing program 2 (id=8): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x3f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x100}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) 1.837178327s ago: executing program 1 (id=9): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x18, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb75"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 1.78057714s ago: executing program 2 (id=10): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x8000, 0x0, 0x1e) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000003800)=""/4075, 0xfeb}, {&(0x7f0000000080)=""/7, 0x7}], 0xa}}], 0x1, 0x0, 0x0) 1.753658464s ago: executing program 1 (id=11): pread64(0xffffffffffffffff, &(0x7f0000000200)=""/87, 0x57, 0x8000) r0 = syz_io_uring_setup(0x1275, &(0x7f0000000140)={0x0, 0x1eff, 0x2400, 0x2, 0x237}, &(0x7f0000000000), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x4000010, r0, 0x0) r1 = userfaultfd(0x801) mlock2(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0xa02cd152629071) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_usb_connect(0x0, 0x3b, &(0x7f00000040c0)=ANY=[@ANYBLOB="1201a107a171fe103c419b81c9cf010203010902290001fa0900e309045804000206000f0524060000052400f8ff0d240f"], &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x2, 0xfffffffe, 0x6e}, 0x2c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000000c0)={0x18}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x10000000, 0xa, 0x6, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x1, 0x4]}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000280)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) mmap$xdp(&(0x7f0000e81000/0x1000)=nil, 0x1000, 0x2, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000047a000/0x3000)=nil, 0x3000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 1.669071928s ago: executing program 2 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x4, 0x2, 0x84, 0x21, 0x1000000009, 0x4007f, 0x6, 0xfffffffffffffffe, 0x100000000085, 0x9c1, 0x8001, 0x1005, 0xc, 0x9, 0xffffffffffffffff, 0xfffffdfffffffffd], 0x5000, 0xc0300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.437156802s ago: executing program 0 (id=13): r0 = getpid() (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f0000001780)) (async, rerun: 32) r2 = syz_pidfd_open(r0, 0x0) (rerun: 32) setreuid(0xee01, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x6, 0x10000, {{0x7, 0x4, 0x0, 0x33, 0x1c, 0x67, 0x62fc, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) (async) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast2, @in6=@private1, 0x4e23, 0x0, 0x4e21, 0xa, 0x2, 0x80, 0x80, 0x33, r3, r4}, {0x7, 0x100000000, 0xfffffffffffffff9, 0x7ff, 0xb, 0x6c, 0x80000001, 0x1ff}, {0x9, 0x7, 0x2, 0xda}, 0x4, 0x6e6bb3, 0x2, 0x1, 0x3, 0x2}, {{@in=@multicast1, 0x4d4, 0xff}, 0xa, @in=@broadcast, 0x34ff, 0x4, 0x3, 0x57, 0x0, 0x9, 0xb8}}, 0xe8) setns(r2, 0x24020000) (async, rerun: 32) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 625.365732ms ago: executing program 2 (id=14): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x7) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xb) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 572.453362ms ago: executing program 3 (id=15): statx(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1000, 0x244, &(0x7f0000000a00)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000081904010000000000000109022400010000a00009040005010300000066626e78443e8bad0009058103000000000037d81a50371514a273384b0b93a4917ddea50800000000000000a653c6d9a32eb29eae2828b647383c5181f29f1440fdcbc87f0152d7a65e5406bdffe39d07d348947a326abccbd8f6c67fdca9badbe5eb82c6c26ffe70e67198d53d7a6efe9b214063640d9cf8260efb520b2d2f50632e1624941ceac74368a0a8548db8954ca79bdf01e8333d84ee579378a6468ea231f271702b0e98ef097a63c8d125a6915bcbe73f0b6611cee68eb77c64"], 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x5, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_rxfh={0x46, 0xff, 0x4, 0x0, 0xcd, "a5834b", 0x3}}) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x9, 0x8, 0x5, 0x2}, 0x2c, [0x5, 0x5, 0x1, 0x9, 0x3, 0x0, 0x5, 0x0, 0x7, 0xa34, 0x6, 0x7fffffff, 0x8, 0x18, 0xe, 0x7fff, 0x9, 0x7, 0x21a, 0x9, 0x3, 0x7fffffff, 0x1, 0xa, 0x5, 0xfffffffe, 0x9, 0x7, 0x400, 0x0, 0x3, 0x800, 0x5146, 0xffff, 0x2, 0x8, 0x6, 0x7fff, 0x8, 0xfffffffe, 0x0, 0x4, 0x9, 0x49, 0x7, 0x3, 0xfffffeab, 0x0, 0x2, 0x21, 0x6, 0x4, 0x5, 0x7fffffff, 0x8, 0xa, 0xc, 0x6, 0x6ffc, 0x200, 0x1, 0x4, 0x1, 0x1b0f], [0x0, 0x4, 0x20007fff, 0x7, 0x6, 0x6, 0x5, 0x10000, 0xa, 0x10, 0x2, 0x3, 0x8, 0x3, 0x8d8f, 0x8, 0x7, 0xff, 0x1, 0xffffffff, 0x3, 0x10, 0x1, 0x800, 0x2, 0xb, 0xe, 0x401, 0x1, 0x6, 0x401, 0x8000, 0x2, 0x2, 0x1, 0x8, 0x2, 0x100, 0x1, 0x73, 0x8, 0x0, 0xe, 0x4, 0x5, 0x2, 0x1076, 0x3, 0x9, 0x6e37663b, 0x7, 0x7, 0x3, 0x8, 0x0, 0x6, 0x6, 0x8000, 0x0, 0x5, 0x7, 0xa, 0x4, 0x1], [0x7510e92a, 0x80000001, 0x8118, 0x0, 0x2, 0x5344, 0x3, 0x5, 0x4, 0x3, 0x401, 0x4, 0x3, 0x986, 0x0, 0x7f, 0xf, 0x5, 0x9, 0x3, 0x10000, 0x5, 0x0, 0x4, 0x3, 0x75, 0x31fa, 0x4, 0x17, 0x4, 0x4, 0x0, 0x4, 0x5, 0x4, 0x7, 0x7e79, 0xedd1, 0x8, 0x0, 0x3, 0x8, 0xffff, 0x3, 0x200000, 0x6, 0x6, 0xfffffff7, 0x1000, 0x9, 0x1, 0x2, 0x0, 0x3, 0x4, 0xff, 0xc, 0x3ff, 0x6, 0xff, 0x25, 0x81, 0xffff7fff, 0x64], [0x16, 0x1, 0x2, 0x8000, 0x4, 0x5, 0x8, 0xfff, 0x3, 0x9, 0x0, 0x38, 0x4, 0x4, 0x2, 0x101, 0xa80, 0x8, 0x6, 0x6, 0xaf, 0xfffffff9, 0xa1d, 0x1c, 0x0, 0x5, 0x17, 0x40, 0x2, 0x4, 0x7, 0x0, 0x5, 0x10, 0x2, 0x2e6, 0xfff, 0x5, 0x6, 0x400, 0x6, 0x9, 0xa70110d2, 0x9, 0xffffffff, 0x1, 0x80000001, 0x80000001, 0x1, 0x1e, 0x2, 0xff, 0x80, 0x8, 0x2, 0x3168, 0xa, 0x1, 0x7e, 0x8, 0x0, 0x5, 0xc4312da, 0x4]}, 0x45c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00#)'], 0x0, 0x0, 0x0}, 0x0) 349.102027ms ago: executing program 2 (id=16): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x93}]}, 0x2c}}, 0x4) 157.852572ms ago: executing program 1 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d"], 0xec}, 0x1, 0x0, 0x0, 0x40055}, 0x4000) 155.529765ms ago: executing program 2 (id=18): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x2) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r6, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1}, 0x6e) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x41) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1200500200000008ac054a02400001020301090224000101074000090600040103010200094000020404"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r8, 0x2e, 0x9f, &(0x7f0000000040)=""/159) 0s ago: executing program 1 (id=19): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x40, 0x22, 0x5, {0x5, 0x23, "ff7dbd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd}) r3 = socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') sendmmsg$inet(r3, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="f3", 0x1}], 0x1}}], 0x1, 0x0) sendfile(r3, r0, 0x0, 0x2000007ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.223' (ED25519) to the list of known hosts. [ 83.195326][ T5811] cgroup: Unknown subsys name 'net' [ 83.366672][ T5811] cgroup: Unknown subsys name 'cpuset' [ 83.375843][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.985789][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.285170][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.293910][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.301688][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.309017][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.316968][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.317832][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.324936][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.331998][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.347030][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.354909][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.365055][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.378828][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.386650][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.395554][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.406943][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.419814][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.436933][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.445256][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.454204][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.462109][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.934180][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.084747][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 88.110170][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.209141][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.267775][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.275162][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.282580][ T5826] bridge_slave_0: entered allmulticast mode [ 88.291062][ T5826] bridge_slave_0: entered promiscuous mode [ 88.325751][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.333013][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.340168][ T5826] bridge_slave_1: entered allmulticast mode [ 88.347673][ T5826] bridge_slave_1: entered promiscuous mode [ 88.427459][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.435067][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.442235][ T5823] bridge_slave_0: entered allmulticast mode [ 88.449891][ T5823] bridge_slave_0: entered promiscuous mode [ 88.494617][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.501799][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.509249][ T5823] bridge_slave_1: entered allmulticast mode [ 88.517219][ T5823] bridge_slave_1: entered promiscuous mode [ 88.524379][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.531662][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.539065][ T5833] bridge_slave_0: entered allmulticast mode [ 88.546373][ T5833] bridge_slave_0: entered promiscuous mode [ 88.557614][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.592474][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.599794][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.607480][ T5833] bridge_slave_1: entered allmulticast mode [ 88.615338][ T5833] bridge_slave_1: entered promiscuous mode [ 88.625452][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.701697][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.709246][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.716567][ T5827] bridge_slave_0: entered allmulticast mode [ 88.724184][ T5827] bridge_slave_0: entered promiscuous mode [ 88.735082][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.759798][ T5826] team0: Port device team_slave_0 added [ 88.765906][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.773229][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.780384][ T5827] bridge_slave_1: entered allmulticast mode [ 88.787842][ T5827] bridge_slave_1: entered promiscuous mode [ 88.798131][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.823177][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.835705][ T5826] team0: Port device team_slave_1 added [ 88.843923][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.920761][ T5823] team0: Port device team_slave_0 added [ 88.955123][ T5833] team0: Port device team_slave_0 added [ 88.964552][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.976118][ T5823] team0: Port device team_slave_1 added [ 88.984387][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.994511][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.001469][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.027724][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.041506][ T5833] team0: Port device team_slave_1 added [ 89.071045][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.078094][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.104332][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.161828][ T5827] team0: Port device team_slave_0 added [ 89.181539][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.188788][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.215227][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.227851][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.234953][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.261387][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.275809][ T5827] team0: Port device team_slave_1 added [ 89.283519][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.290473][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.316405][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.360543][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.367922][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.394382][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.405364][ T5831] Bluetooth: hci0: command tx timeout [ 89.446941][ T5826] hsr_slave_0: entered promiscuous mode [ 89.453767][ T5826] hsr_slave_1: entered promiscuous mode [ 89.462915][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.469957][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.482932][ T5831] Bluetooth: hci1: command tx timeout [ 89.497185][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.501825][ T5143] Bluetooth: hci2: command tx timeout [ 89.555113][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.562088][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.563021][ T5143] Bluetooth: hci3: command tx timeout [ 89.588765][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.635164][ T5823] hsr_slave_0: entered promiscuous mode [ 89.641812][ T5823] hsr_slave_1: entered promiscuous mode [ 89.648453][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 89.654406][ T5823] Cannot create hsr debugfs directory [ 89.692273][ T5833] hsr_slave_0: entered promiscuous mode [ 89.698878][ T5833] hsr_slave_1: entered promiscuous mode [ 89.705403][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 89.711154][ T5833] Cannot create hsr debugfs directory [ 89.840597][ T5827] hsr_slave_0: entered promiscuous mode [ 89.848011][ T5827] hsr_slave_1: entered promiscuous mode [ 89.854598][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 89.860343][ T5827] Cannot create hsr debugfs directory [ 90.236237][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.249137][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.268381][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.279470][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.342212][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.354462][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.377085][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.387334][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.472058][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.482446][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.494845][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.506779][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.620468][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.631559][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.649323][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.678307][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.685723][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.761914][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.782618][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.802541][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.809901][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.846458][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.860138][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.867444][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.900408][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.929273][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.936479][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.950717][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.979920][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.987079][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.015200][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.022417][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.045021][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.052197][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.110016][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.243937][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.266476][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.273717][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.335523][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.343181][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.483252][ T5143] Bluetooth: hci0: command tx timeout [ 91.512208][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.563129][ T5831] Bluetooth: hci1: command tx timeout [ 91.568749][ T5143] Bluetooth: hci2: command tx timeout [ 91.589419][ T5826] veth0_vlan: entered promiscuous mode [ 91.637201][ T5826] veth1_vlan: entered promiscuous mode [ 91.648347][ T5143] Bluetooth: hci3: command tx timeout [ 91.702451][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.778087][ T5826] veth0_macvtap: entered promiscuous mode [ 91.805252][ T5826] veth1_macvtap: entered promiscuous mode [ 91.826489][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.888905][ T794] cfg80211: failed to load regulatory.db [ 91.896715][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.909552][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.921106][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.942362][ T5833] veth0_vlan: entered promiscuous mode [ 91.959726][ T991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.970142][ T991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.982675][ T5833] veth1_vlan: entered promiscuous mode [ 91.990121][ T991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.000120][ T991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.111691][ T5823] veth0_vlan: entered promiscuous mode [ 92.128984][ T5827] veth0_vlan: entered promiscuous mode [ 92.167518][ T5833] veth0_macvtap: entered promiscuous mode [ 92.174142][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.187877][ T5827] veth1_vlan: entered promiscuous mode [ 92.193893][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.217924][ T5823] veth1_vlan: entered promiscuous mode [ 92.235909][ T5833] veth1_macvtap: entered promiscuous mode [ 92.270985][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.281866][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.317184][ T5827] veth0_macvtap: entered promiscuous mode [ 92.343997][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.354570][ T5827] veth1_macvtap: entered promiscuous mode [ 92.369946][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.369949][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.407388][ T5823] veth0_macvtap: entered promiscuous mode [ 92.427031][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.441852][ T5823] veth1_macvtap: entered promiscuous mode [ 92.456176][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.483454][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.512360][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.525593][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.536107][ T5913] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 92.544878][ T5913] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.570657][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.586351][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.601751][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.625596][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.642917][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.651654][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.701112][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.748078][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.758276][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.785630][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.794803][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.806727][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.815486][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.880748][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.889057][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.938244][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.949525][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.983671][ T5880] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.991299][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.021803][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.134688][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.158921][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.172135][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.185818][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.196187][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.205882][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.214434][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 93.226531][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 93.245900][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 93.258884][ T5880] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 93.271956][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.280700][ T5880] usb 1-1: Product: syz [ 93.286105][ T5880] usb 1-1: Manufacturer: syz [ 93.297240][ T5880] usb 1-1: SerialNumber: syz [ 93.335381][ T5880] usb 1-1: config 0 descriptor?? [ 93.346721][ T5916] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.361298][ C1] usb 1-1: NFC: Urb failure (status -71) [ 93.394696][ T5880] usb 1-1: NFC: Unable to get FW version [ 93.412921][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 93.421828][ T5880] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 93.563481][ T5143] Bluetooth: hci0: command tx timeout [ 93.580532][ T5880] usb 1-1: USB disconnect, device number 2 [ 93.597994][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.618586][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.636462][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 93.649335][ T5143] Bluetooth: hci2: command tx timeout [ 93.655305][ T5831] Bluetooth: hci1: command tx timeout [ 93.657465][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 93.676543][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.714854][ T24] usb 4-1: config 0 descriptor?? [ 93.720921][ T5921] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.728419][ T5831] Bluetooth: hci3: command tx timeout [ 93.868094][ T5935] netlink: 'syz.2.10': attribute type 12 has an invalid length. [ 93.877588][ T5935] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10'. [ 93.938951][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.961587][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.078743][ T5939] kvm: pic: non byte write [ 94.166624][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.197407][ T24] lenovo 0003:17EF:60FE.0001: unknown main item tag 0x0 [ 94.209886][ T24] lenovo 0003:17EF:60FE.0001: item fetching failed at offset 6/7 [ 94.220089][ T24] lenovo 0003:17EF:60FE.0001: hid_parse failed [ 94.226922][ T24] lenovo 0003:17EF:60FE.0001: probe with driver lenovo failed with error -22 [ 94.324273][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 94.346260][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.356160][ T9] usb 2-1: config 250 has an invalid interface number: 88 but max is 0 [ 94.368784][ T9] usb 2-1: config 250 has no interface number 0 [ 94.383498][ T9] usb 2-1: config 250 interface 88 has no altsetting 0 [ 94.394428][ T9] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=cf.c9 [ 94.397403][ T5818] usb 4-1: USB disconnect, device number 2 [ 94.412420][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.453812][ T9] usb 2-1: Product: syz [ 94.458048][ T9] usb 2-1: Manufacturer: syz [ 94.488562][ T9] usb 2-1: SerialNumber: syz [ 94.897438][ T9] qmi_wwan 2-1:250.88: bogus CDC Union: master=0, slave=0 [ 94.912445][ T9] qmi_wwan 2-1:250.88: probe with driver qmi_wwan failed with error -22 [ 94.928019][ T9] usb 2-1: USB disconnect, device number 2 [ 95.352816][ T5818] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.517443][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 95.548695][ T5818] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 95.572142][ T5818] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.612813][ T5818] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.619516][ T5818] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 95.640315][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.648482][ T5831] Bluetooth: hci0: command tx timeout [ 95.666980][ T5818] usb 4-1: config 0 descriptor?? [ 95.693880][ T5818] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 95.724470][ T5831] Bluetooth: hci1: command tx timeout [ 95.733016][ T5831] Bluetooth: hci2: command tx timeout [ 95.803757][ T5831] Bluetooth: hci3: command tx timeout [ 95.852821][ T5873] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.899212][ T5956] input: syz0 as /devices/virtual/input/input5 [ 95.943215][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.982884][ T5873] usb 3-1: device descriptor read/64, error -71 [ 96.083297][ C1] ------------[ cut here ]------------ [ 96.088894][ C1] WARNING: ./include/linux/ns_common.h:255 at put_cred_rcu+0x2c5/0x340, CPU#1: syz.0.13/5943 [ 96.099153][ C1] Modules linked in: [ 96.102802][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 96.103179][ C1] CPU: 1 UID: 0 PID: 5943 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 96.114695][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.117381][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.128627][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 96.138316][ C1] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 96.138364][ C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 78 8c 8d 00 e8 03 8c 32 00 4c 89 e7 be 03 00 00 00 e8 b6 d6 08 03 e9 b8 fe ff ff e8 ec 8b 32 00 90 <0f> 0b 90 eb 9f e8 e1 8b 32 00 4c 89 ff be 03 00 00 00 e8 94 d6 08 [ 96.138381][ C1] RSP: 0018:ffffc90000a08ba8 EFLAGS: 00010246 [ 96.138408][ C1] RAX: ffffffff818ed124 RBX: ffff8880273d88a0 RCX: ffff888031000000 [ 96.138423][ C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 96.138437][ C1] RBP: 0000000000000004 R08: ffff88806bc50193 R09: 1ffff1100d78a032 [ 96.138452][ C1] R10: dffffc0000000000 R11: ffffed100d78a033 R12: dffffc0000000000 [ 96.138485][ C1] R13: ffff8880273d8800 R14: ffff88806bc50000 R15: ffff88806bc50190 [ 96.138501][ C1] FS: 0000000000000000(0000) GS:ffff888125b83000(0000) knlGS:0000000000000000 [ 96.138518][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.138534][ C1] CR2: 00007f0d4c986286 CR3: 0000000079536000 CR4: 00000000003526f0 [ 96.138552][ C1] Call Trace: [ 96.138570][ C1] [ 96.138580][ C1] ? __pfx_put_cred_rcu+0x10/0x10 [ 96.138609][ C1] ? rcu_core+0xc37/0x1770 [ 96.138634][ C1] rcu_core+0xcab/0x1770 [ 96.138679][ C1] ? __pfx_rcu_core+0x10/0x10 [ 96.138708][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 96.138740][ C1] ? sched_clock_cpu+0x74/0x430 [ 96.138767][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 96.138799][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 96.156262][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.172910][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 96.172959][ C1] handle_softirqs+0x286/0x870 [ 96.172990][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 96.173020][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 96.173051][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 96.173087][ C1] __irq_exit_rcu+0xca/0x1f0 [ 96.209870][ T9] usb 2-1: config 0 descriptor?? [ 96.211203][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 96.232821][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.234816][ C1] irq_exit_rcu+0x9/0x30 [ 96.349414][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 96.355122][ C1] [ 96.358083][ C1] [ 96.361040][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.367086][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 96.372406][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb 9b 1b 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 96.373581][ T5873] usb 3-1: device descriptor read/64, error -71 [ 96.392059][ C1] RSP: 0018:ffffc90004607278 EFLAGS: 00000206 [ 96.392087][ C1] RAX: ff5e055e4b63ea00 RBX: 0000000000000000 RCX: ff5e055e4b63ea00 [ 96.392105][ C1] RDX: 0000000000000000 RSI: ffffffff8dc71a48 RDI: ffffffff8be11160 [ 96.392120][ C1] RBP: ffffffff823391ca R08: 0000000000000000 R09: ffffffff823391ca [ 96.392155][ C1] R10: dffffc0000000000 R11: fffff940003354d9 R12: 0000000000000002 [ 96.392173][ C1] R13: ffffffff8e33d920 R14: 0000000000000000 R15: 0000000000000246 [ 96.444652][ C1] ? pfn_valid+0xba/0x490 [ 96.449023][ C1] ? pfn_valid+0xba/0x490 [ 96.453438][ C1] ? pfn_valid+0xba/0x490 [ 96.457802][ C1] pfn_valid+0xd6/0x490 [ 96.461984][ C1] ? pfn_valid+0xba/0x490 [ 96.466373][ C1] page_table_check_clear+0x21/0x700 [ 96.471686][ C1] ? vm_normal_page+0x10d/0x240 [ 96.476623][ C1] unmap_page_range+0x322d/0x4140 [ 96.481723][ C1] ? mas_next_slot+0xc20/0xcf0 [ 96.486561][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 96.492006][ C1] ? mas_find+0xb0e/0xd30 [ 96.496403][ C1] ? unmap_vmas+0x144/0x580 [ 96.500949][ C1] unmap_vmas+0x399/0x580 [ 96.505372][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 96.510504][ C1] exit_mmap+0x240/0xb40 [ 96.514814][ C1] ? uprobe_clear_state+0x20f/0x290 [ 96.520061][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 96.524890][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 96.530570][ C1] ? __pfx_exit_aio+0x10/0x10 [ 96.535337][ C1] ? uprobe_clear_state+0x27c/0x290 [ 96.540593][ C1] __mmput+0x118/0x430 [ 96.544746][ C1] exit_mm+0x1da/0x2c0 [ 96.548858][ C1] ? __pfx_exit_mm+0x10/0x10 [ 96.549117][ T5873] usb usb3-port1: attempt power cycle [ 96.553507][ C1] do_exit+0x650/0x2300 [ 96.553547][ C1] ? do_raw_spin_lock+0x121/0x290 [ 96.553579][ C1] ? __pfx_do_exit+0x10/0x10 [ 96.553623][ C1] do_group_exit+0x21c/0x2d0 [ 96.577372][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.582617][ C1] get_signal+0x1285/0x1340 [ 96.587201][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 96.592834][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.599039][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 96.604619][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 96.609938][ C1] ? rcu_is_watching+0x15/0xb0 [ 96.614760][ C1] do_syscall_64+0x2e9/0xfa0 [ 96.619393][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.625525][ C1] ? clear_bhb_loop+0x60/0xb0 [ 96.630237][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.636213][ C1] RIP: 0033:0x7fe4ac18f6c9 [ 96.640673][ C1] Code: Unable to access opcode bytes at 0x7fe4ac18f69f. [ 96.647748][ C1] RSP: 002b:00007fe4aa3d4fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 96.656245][ C1] RAX: fffffffffffffffc RBX: 00007fe4ac3e6090 RCX: 00007fe4ac18f6c9 [ 96.659276][ T9] kye 0003:0458:5011.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 96.664261][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fdba2080 [ 96.664279][ C1] RBP: 00007fe4ac211f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.664293][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 96.664306][ C1] R13: 00007fe4ac3e6128 R14: 00007fe4ac3e6090 R15: 00007fffda6e0d88 [ 96.664338][ C1] [ 96.664349][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.664365][ C1] CPU: 1 UID: 0 PID: 5943 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 96.664386][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.664398][ C1] Call Trace: [ 96.664408][ C1] [ 96.664417][ C1] dump_stack_lvl+0x99/0x250 [ 96.664459][ C1] ? __asan_memcpy+0x40/0x70 [ 96.664490][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.664518][ C1] ? __pfx__printk+0x10/0x10 [ 96.664558][ C1] vpanic+0x237/0x6d0 [ 96.664578][ C1] ? __pfx_vpanic+0x10/0x10 [ 96.664596][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 96.664627][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 96.664667][ C1] panic+0xb9/0xc0 [ 96.664686][ C1] ? __pfx_panic+0x10/0x10 [ 96.664725][ C1] __warn+0x334/0x4c0 [ 96.664744][ C1] ? put_cred_rcu+0x2c5/0x340 [ 96.664776][ C1] ? put_cred_rcu+0x2c5/0x340 [ 96.664806][ C1] report_bug+0x2be/0x4f0 [ 96.664837][ C1] ? put_cred_rcu+0x2c5/0x340 [ 96.664866][ C1] ? put_cred_rcu+0x2c5/0x340 [ 96.664895][ C1] ? put_cred_rcu+0x2c7/0x340 [ 96.664923][ C1] handle_bug+0x84/0x160 [ 96.664948][ C1] exc_invalid_op+0x1a/0x50 [ 96.664971][ C1] asm_exc_invalid_op+0x1a/0x20 [ 96.664991][ C1] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 96.665021][ C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 78 8c 8d 00 e8 03 8c 32 00 4c 89 e7 be 03 00 00 00 e8 b6 d6 08 03 e9 b8 fe ff ff e8 ec 8b 32 00 90 <0f> 0b 90 eb 9f e8 e1 8b 32 00 4c 89 ff be 03 00 00 00 e8 94 d6 08 [ 96.665039][ C1] RSP: 0018:ffffc90000a08ba8 EFLAGS: 00010246 [ 96.665060][ C1] RAX: ffffffff818ed124 RBX: ffff8880273d88a0 RCX: ffff888031000000 [ 96.665077][ C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 96.665091][ C1] RBP: 0000000000000004 R08: ffff88806bc50193 R09: 1ffff1100d78a032 [ 96.665106][ C1] R10: dffffc0000000000 R11: ffffed100d78a033 R12: dffffc0000000000 [ 96.665122][ C1] R13: ffff8880273d8800 R14: ffff88806bc50000 R15: ffff88806bc50190 [ 96.665147][ C1] ? put_cred_rcu+0x2c4/0x340 [ 96.665182][ C1] ? put_cred_rcu+0x2c4/0x340 [ 96.665222][ C1] ? __pfx_put_cred_rcu+0x10/0x10 [ 96.665247][ C1] ? rcu_core+0xc37/0x1770 [ 96.665270][ C1] rcu_core+0xcab/0x1770 [ 96.665312][ C1] ? __pfx_rcu_core+0x10/0x10 [ 96.665338][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 96.665368][ C1] ? sched_clock_cpu+0x74/0x430 [ 96.665395][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 96.665434][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 96.665457][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 96.665494][ C1] handle_softirqs+0x286/0x870 [ 96.665520][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 96.665549][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 96.665576][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 96.665607][ C1] __irq_exit_rcu+0xca/0x1f0 [ 96.665630][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 96.665661][ C1] irq_exit_rcu+0x9/0x30 [ 96.665682][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 96.665710][ C1] [ 96.665718][ C1] [ 96.665726][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.665748][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 96.665769][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb 9b 1b 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 96.665785][ C1] RSP: 0018:ffffc90004607278 EFLAGS: 00000206 [ 96.665802][ C1] RAX: ff5e055e4b63ea00 RBX: 0000000000000000 RCX: ff5e055e4b63ea00 [ 96.665817][ C1] RDX: 0000000000000000 RSI: ffffffff8dc71a48 RDI: ffffffff8be11160 [ 96.665831][ C1] RBP: ffffffff823391ca R08: 0000000000000000 R09: ffffffff823391ca [ 96.665863][ C1] R10: dffffc0000000000 R11: fffff940003354d9 R12: 0000000000000002 [ 96.665907][ C1] R13: ffffffff8e33d920 R14: 0000000000000000 R15: 0000000000000246 [ 96.665926][ C1] ? pfn_valid+0xba/0x490 [ 96.665949][ C1] ? pfn_valid+0xba/0x490 [ 96.665989][ C1] ? pfn_valid+0xba/0x490 [ 96.666011][ C1] pfn_valid+0xd6/0x490 [ 96.666030][ C1] ? pfn_valid+0xba/0x490 [ 96.666054][ C1] page_table_check_clear+0x21/0x700 [ 96.666074][ C1] ? vm_normal_page+0x10d/0x240 [ 96.666130][ C1] unmap_page_range+0x322d/0x4140 [ 96.666202][ C1] ? mas_next_slot+0xc20/0xcf0 [ 96.666244][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 96.666288][ C1] ? mas_find+0xb0e/0xd30 [ 96.666319][ C1] ? unmap_vmas+0x144/0x580 [ 96.666359][ C1] unmap_vmas+0x399/0x580 [ 96.666403][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 96.666473][ C1] exit_mmap+0x240/0xb40 [ 96.666503][ C1] ? uprobe_clear_state+0x20f/0x290 [ 96.666546][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 96.666590][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 96.666628][ C1] ? __pfx_exit_aio+0x10/0x10 [ 96.666671][ C1] ? uprobe_clear_state+0x27c/0x290 [ 96.666713][ C1] __mmput+0x118/0x430 [ 96.666742][ C1] exit_mm+0x1da/0x2c0 [ 96.666778][ C1] ? __pfx_exit_mm+0x10/0x10 [ 96.666824][ C1] do_exit+0x650/0x2300 [ 96.666866][ C1] ? do_raw_spin_lock+0x121/0x290 [ 96.666903][ C1] ? __pfx_do_exit+0x10/0x10 [ 96.666955][ C1] do_group_exit+0x21c/0x2d0 [ 96.666988][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.667028][ C1] get_signal+0x1285/0x1340 [ 96.667077][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 96.667118][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.667170][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 96.667199][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 96.667225][ C1] ? rcu_is_watching+0x15/0xb0 [ 96.667261][ C1] do_syscall_64+0x2e9/0xfa0 [ 96.667302][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.667327][ C1] ? clear_bhb_loop+0x60/0xb0 [ 96.667357][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.667381][ C1] RIP: 0033:0x7fe4ac18f6c9 [ 96.667401][ C1] Code: Unable to access opcode bytes at 0x7fe4ac18f69f. [ 96.667415][ C1] RSP: 002b:00007fe4aa3d4fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 96.667445][ C1] RAX: fffffffffffffffc RBX: 00007fe4ac3e6090 RCX: 00007fe4ac18f6c9 [ 96.667463][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fdba2080 [ 96.667479][ C1] RBP: 00007fe4ac211f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.667493][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 96.667508][ C1] R13: 00007fe4ac3e6128 R14: 00007fe4ac3e6090 R15: 00007fffda6e0d88 [ 96.667547][ C1] [ 96.675090][ C1] Kernel Offset: disabled