last executing test programs: 9.254569382s ago: executing program 0 (id=12): r0 = epoll_create1(0x80000) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0xfff, 0x2}) 9.127199931s ago: executing program 1 (id=13): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000003300), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 9.080423712s ago: executing program 3 (id=4): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x5, 0x1, 0x3, 0x4, {0x6, 0x0, 0x1, 0xf6, 0x2}, {0xfe, 0x1, 0x4, 0x5, 0xfffc, 0x9}, 0x8, 0x3ff, 0x8}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 9.012252425s ago: executing program 0 (id=14): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4048000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setuid(0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) fcntl$dupfd(r6, 0x406, r3) close_range(r2, 0xffffffffffffffff, 0x0) 8.737254328s ago: executing program 1 (id=15): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x24}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 7.15685904s ago: executing program 1 (id=16): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6287, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x40c0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xf0, 0x2}) 7.0317133s ago: executing program 0 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0xb001}) write(r0, &(0x7f00000001c0)='SO', 0x2) 7.003330908s ago: executing program 3 (id=18): r0 = msgget$private(0x0, 0x12) msgrcv(r0, 0x0, 0x0, 0x0, 0x1000) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) 6.732876422s ago: executing program 0 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x4001, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/168) 6.000935608s ago: executing program 0 (id=20): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x2}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f00000004c0), &(0x7f0000000780)=@udp6=r1, 0x1}, 0x20) 5.998044116s ago: executing program 1 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 5.89640195s ago: executing program 3 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), 0x0, 0x0, 0x1) 5.878982421s ago: executing program 4 (id=5): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x40004334}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.686858332s ago: executing program 3 (id=23): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.906646522s ago: executing program 2 (id=3): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="474510684230", 0x6}], 0x1}}], 0x2, 0x28048005) writev(r0, &(0x7f00000037c0)=[{&(0x7f0000000780)="7d29b533bf4be9", 0x7}], 0x1) 4.858387672s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC]) 4.53761436s ago: executing program 1 (id=25): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4048000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) setuid(0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) 4.418875192s ago: executing program 2 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) getgroups(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc7d4aa1ceeb24a179d98717000056d0d5275b447ff247a3ce6c0330a71790a6588df89ef60940e61c7a8045959b679a007a789c44531d57c32f0c37d875434d965148eefe62b764b9ba29b9132d1e3b2b8b1f9de391c03197e26562199c7666a09399b9d14e835c211f133220863e7ec141c63cdb47c21f929dd15e04000f70848ed48495c13e45ab19069a45917069697f7d01c3a3f30e1c035ca9e84afd2793e986eb33f9d8ac9865ff8f273a2538384b5c9d2732e43d5b0ee181df9de9394cc33b8b3f2d7f5d63003dce4d39b7461751b040756a9b49", 0xd9, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r2) 4.359716422s ago: executing program 4 (id=27): recvmsg(0xffffffffffffffff, 0x0, 0x2) 3.738822263s ago: executing program 2 (id=28): syz_clone(0x100000, &(0x7f0000000000)="6f87a69cc0c277513020ca8c0c1870f37b", 0x11, &(0x7f0000000100), 0x0, 0x0) 2.280682793s ago: executing program 4 (id=29): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x7}, 0x8) 2.013271254s ago: executing program 0 (id=30): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0x5}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.994526257s ago: executing program 4 (id=31): pipe2(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.78844917s ago: executing program 2 (id=32): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) dup(r0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 1.665123088s ago: executing program 4 (id=33): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x1, 0x0) getdents64(r0, &(0x7f0000003440)=""/92, 0x5c) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x40400) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2f1201a695b95928bcdfa61556755d50ce7a4db02bb403bd5eaaa10cf9f76e2c994bfb3931ea97ac648e27d72a4a80e5024a4c6db8877e2fa0ac02d047ff659e48e34307510454c6c69a45670931ffef3b", @ANYRES16=r4, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200892, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0xfffe, 0x0, @remote}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r7, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 1.559024147s ago: executing program 2 (id=34): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 404.612998ms ago: executing program 3 (id=35): r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="e92c3e5b5fea72d36d0f1ce0c1e16a89594759fe6816116aea0f6829fb0e01d753fdfda29b9fe80d5489652869b6b3eeef2e97fe4757", 0x36}, {&(0x7f0000000180)}, {&(0x7f00000002c0)="cad2985019f4e01a8f2249dfe45549d98fcd6a3a35f684075f51d7aaccbef8ac16ca395bf2bd16c28eb1461b3e1805515fb57ab53cd8474d379cd3449625c6a5e4e5ef158235d43abbaf354d3e9b6faa62ab7a4a4c06d2e27df772b9719fade7a0cc5e33b9144ee2200d99f4b9060c3d83ac8c0f924df255448d33cfd5e0514fbbea2e0f344bf523cc4ccec5f559768a98de1eef0af76e511ffc9b561f0a0fb1707a2e27f80201d011dd", 0xaa}, {&(0x7f00000001c0)}, {&(0x7f00000007c0)="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", 0x3ef}, {0x0}, {&(0x7f0000000480)="83d763683f984bc11e2488e619ecec7e77667e5032d2412f70cb9cba1a19cf906fed30192629187789f9e15ffd100c9f93e01f614ce40f365be740e3b999a3a6f3db24561582956cc55786315d9a34678472eda3", 0x54}], 0x7, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}], 0x30, 0x4000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x2, 0x4000) 0s ago: executing program 2 (id=36): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r0, 0x2, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 72.845267][ T5786] cgroup: Unknown subsys name 'net' [ 73.106210][ T5786] cgroup: Unknown subsys name 'cpuset' [ 73.172198][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.757338][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.415421][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.422415][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.423778][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.459208][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.471886][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.669876][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.684802][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.699807][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.717687][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.718527][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.722240][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.722618][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.727968][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.737481][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.739201][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.740578][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.740609][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.740967][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.746917][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.750278][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.755875][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.757012][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.768182][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.807169][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.807932][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.223729][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 79.445257][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.446306][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.446629][ T5799] bridge_slave_0: entered allmulticast mode [ 79.448158][ T5799] bridge_slave_0: entered promiscuous mode [ 79.507926][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.508024][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.508293][ T5799] bridge_slave_1: entered allmulticast mode [ 79.509665][ T5799] bridge_slave_1: entered promiscuous mode [ 79.641170][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.677131][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.727579][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 79.796158][ T5799] team0: Port device team_slave_0 added [ 79.822608][ T5799] team0: Port device team_slave_1 added [ 79.822924][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 79.850099][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 79.880962][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 79.943207][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.943217][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.943230][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.015351][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.015368][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.015382][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.119728][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.119919][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.120136][ T5806] bridge_slave_0: entered allmulticast mode [ 80.122299][ T5806] bridge_slave_0: entered promiscuous mode [ 80.166039][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.166166][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.166412][ T5806] bridge_slave_1: entered allmulticast mode [ 80.167764][ T5806] bridge_slave_1: entered promiscuous mode [ 80.468290][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.468527][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.468974][ T5805] bridge_slave_0: entered allmulticast mode [ 80.470412][ T5805] bridge_slave_0: entered promiscuous mode [ 80.500215][ T5799] hsr_slave_0: entered promiscuous mode [ 80.501191][ T5799] hsr_slave_1: entered promiscuous mode [ 80.504487][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.504600][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.504758][ T5807] bridge_slave_0: entered allmulticast mode [ 80.507091][ T5807] bridge_slave_0: entered promiscuous mode [ 80.515253][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.515457][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.515637][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.515779][ T5805] bridge_slave_1: entered allmulticast mode [ 80.518092][ T5805] bridge_slave_1: entered promiscuous mode [ 80.521146][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.521257][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.521544][ T5808] bridge_slave_0: entered allmulticast mode [ 80.523815][ T5808] bridge_slave_0: entered promiscuous mode [ 80.531643][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.531773][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.532239][ T5807] bridge_slave_1: entered allmulticast mode [ 80.534493][ T5807] bridge_slave_1: entered promiscuous mode [ 80.539652][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.543938][ T5800] Bluetooth: hci0: command tx timeout [ 80.564032][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.564164][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.564312][ T5808] bridge_slave_1: entered allmulticast mode [ 80.566886][ T5808] bridge_slave_1: entered promiscuous mode [ 80.685314][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.716381][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.718493][ T5806] team0: Port device team_slave_0 added [ 80.720451][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.757337][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.760240][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.780871][ T5806] team0: Port device team_slave_1 added [ 80.791581][ T5800] Bluetooth: hci2: command tx timeout [ 80.791588][ T5117] Bluetooth: hci1: command tx timeout [ 80.798601][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.871479][ T5117] Bluetooth: hci3: command tx timeout [ 80.871490][ T5800] Bluetooth: hci4: command tx timeout [ 80.873276][ T5805] team0: Port device team_slave_0 added [ 80.911860][ T5807] team0: Port device team_slave_0 added [ 80.913726][ T5805] team0: Port device team_slave_1 added [ 80.914364][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.914373][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.914386][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.924410][ T5808] team0: Port device team_slave_0 added [ 80.927860][ T5807] team0: Port device team_slave_1 added [ 80.947474][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.947502][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.947534][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.951056][ T5808] team0: Port device team_slave_1 added [ 81.040951][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.040968][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.040992][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.078260][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.078276][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.078300][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.080806][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.080820][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.080844][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.124759][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.124776][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.124800][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.126960][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.126973][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.126996][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.178849][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.178866][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.178889][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.665758][ T31] cfg80211: failed to load regulatory.db [ 81.800957][ T5806] hsr_slave_0: entered promiscuous mode [ 81.808467][ T5806] hsr_slave_1: entered promiscuous mode [ 81.809514][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 81.809632][ T5806] Cannot create hsr debugfs directory [ 81.935087][ T5805] hsr_slave_0: entered promiscuous mode [ 81.936016][ T5805] hsr_slave_1: entered promiscuous mode [ 81.936551][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 81.936570][ T5805] Cannot create hsr debugfs directory [ 81.980325][ T5807] hsr_slave_0: entered promiscuous mode [ 81.981126][ T5807] hsr_slave_1: entered promiscuous mode [ 81.993163][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 81.993180][ T5807] Cannot create hsr debugfs directory [ 82.017534][ T5808] hsr_slave_0: entered promiscuous mode [ 82.018528][ T5808] hsr_slave_1: entered promiscuous mode [ 82.019031][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 82.019050][ T5808] Cannot create hsr debugfs directory [ 82.536240][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.593106][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.621574][ T5800] Bluetooth: hci0: command tx timeout [ 82.666663][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.753854][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.862891][ T5800] Bluetooth: hci2: command tx timeout [ 82.862922][ T5800] Bluetooth: hci1: command tx timeout [ 82.942385][ T5117] Bluetooth: hci4: command tx timeout [ 82.952029][ T5117] Bluetooth: hci3: command tx timeout [ 82.965569][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.987749][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.028479][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.059259][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.174761][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.222257][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.257760][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.293358][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.430600][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.463325][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.498975][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.545463][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.614386][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.671994][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.714258][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.753227][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.797537][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.835252][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.869849][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.870153][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.900531][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.917802][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.918343][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.006749][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.047548][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.049360][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.049477][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.094288][ T2212] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.094416][ T2212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.153948][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.190244][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.190331][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.246736][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.269975][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.281455][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.367314][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.399415][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.430972][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.431101][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.469971][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.474086][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.517284][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.566945][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.567172][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.626305][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.626574][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.688591][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.704086][ T5117] Bluetooth: hci0: command tx timeout [ 84.926195][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.943059][ T5117] Bluetooth: hci1: command tx timeout [ 84.943089][ T5117] Bluetooth: hci2: command tx timeout [ 85.030610][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.032617][ T5800] Bluetooth: hci3: command tx timeout [ 85.032647][ T5800] Bluetooth: hci4: command tx timeout [ 85.092500][ T5799] veth0_vlan: entered promiscuous mode [ 85.145366][ T5799] veth1_vlan: entered promiscuous mode [ 85.294081][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.320723][ T5805] veth0_vlan: entered promiscuous mode [ 85.355144][ T5799] veth0_macvtap: entered promiscuous mode [ 85.375244][ T5799] veth1_macvtap: entered promiscuous mode [ 85.380039][ T5805] veth1_vlan: entered promiscuous mode [ 85.466159][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.494359][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.528448][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.546454][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.560308][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.568623][ T5807] veth0_vlan: entered promiscuous mode [ 85.581055][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.608944][ T5805] veth0_macvtap: entered promiscuous mode [ 85.655989][ T5805] veth1_macvtap: entered promiscuous mode [ 85.659444][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.719737][ T5807] veth1_vlan: entered promiscuous mode [ 85.835855][ T5806] veth0_vlan: entered promiscuous mode [ 85.838046][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.870369][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.903287][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.903311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.935321][ T5806] veth1_vlan: entered promiscuous mode [ 85.937451][ T2212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.959703][ T2212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.985175][ T2212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.005901][ T2212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.026794][ T5807] veth0_macvtap: entered promiscuous mode [ 86.030693][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.030710][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.096701][ T5807] veth1_macvtap: entered promiscuous mode [ 86.142903][ T5808] veth0_vlan: entered promiscuous mode [ 86.252488][ T5808] veth1_vlan: entered promiscuous mode [ 86.261005][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.344886][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.346941][ T5806] veth0_macvtap: entered promiscuous mode [ 86.365701][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.365719][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.415534][ T5806] veth1_macvtap: entered promiscuous mode [ 86.419621][ T2212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.442200][ T2212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.444066][ T2212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.447737][ T2212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.577162][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.577183][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.645127][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.663894][ T5808] veth0_macvtap: entered promiscuous mode [ 86.737621][ T5808] veth1_macvtap: entered promiscuous mode [ 86.753980][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.782229][ T5117] Bluetooth: hci0: command tx timeout [ 86.854393][ T1160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.870557][ T1160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.646498][ T5811] Bluetooth: hci1: command tx timeout [ 87.646714][ T5813] Bluetooth: hci2: command tx timeout [ 87.648499][ T5800] Bluetooth: hci3: command tx timeout [ 87.649721][ T5117] Bluetooth: hci4: command tx timeout [ 87.908793][ T1160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.914924][ T1160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.116502][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.116524][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.153528][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.369440][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.091383][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.091410][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.123289][ T4217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.128713][ T4217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.194091][ T4217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.239169][ T4217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.701352][ T2212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.701373][ T2212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.762452][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.762472][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.078844][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.078865][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.205819][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.205838][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.881851][ T1867] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.122211][ T1867] usb 4-1: Using ep0 maxpacket: 8 [ 96.168570][ T1867] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 96.168597][ T1867] usb 4-1: config 0 has no interface number 0 [ 96.168641][ T1867] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 96.168662][ T1867] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 96.168685][ T1867] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.168707][ T1867] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.168746][ T1867] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 96.168767][ T1867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.176217][ T5998] No control pipe specified [ 96.332788][ T1867] usb 4-1: config 0 descriptor?? [ 96.480075][ T1867] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 96.597292][ T831] usb 4-1: USB disconnect, device number 2 [ 97.092582][ T831] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 97.511318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.561318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.571323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.611317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.621321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.631325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.641328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.651324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.661326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.671320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.176522][ T6019] syz.2.32 (6019): attempted to duplicate a private mapping with mremap. This is not supported. [ 100.261420][ T5872] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.431393][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 100.478744][ T5872] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.478778][ T5872] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.478799][ T5872] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 100.478824][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.478855][ T5872] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 100.478877][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.510262][ T5872] usb 5-1: config 0 descriptor?? [ 100.738169][ T6021] kernel profiling enabled (shift: 63) [ 100.738220][ T6021] profiling shift: 63 too large [ 101.271450][ T5872] usbhid 5-1:0.0: can't add hid device: -71 [ 101.271541][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 101.273454][ T5872] ================================================================== [ 101.273463][ T5872] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 101.273490][ T5872] Read of size 8 at addr ffffc9000e8cb008 by task kworker/1:5/5872 [ 101.273499][ T5872] [ 101.273517][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.273528][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 101.273535][ T5872] Workqueue: usb_hub_wq hub_event [ 101.273552][ T5872] Call Trace: [ 101.273556][ T5872] [ 101.273564][ T5872] dump_stack_lvl+0xe8/0x150 [ 101.273580][ T5872] print_report+0xba/0x230 [ 101.273592][ T5872] ? __list_add_valid_or_report+0x4e/0x130 [ 101.273607][ T5872] kasan_report+0x117/0x150 [ 101.273621][ T5872] ? __list_add_valid_or_report+0x4e/0x130 [ 101.273637][ T5872] __list_add_valid_or_report+0x4e/0x130 [ 101.273652][ T5872] kcov_remote_stop+0x457/0x680 [ 101.273667][ T5872] hub_event+0x49d8/0x4f60 [ 101.273685][ T5872] ? __pfx_hub_event+0x10/0x10 [ 101.273693][ T5872] ? process_scheduled_works+0xa0f/0x17a0 [ 101.273710][ T5872] ? process_scheduled_works+0xa0f/0x17a0 [ 101.273724][ T5872] ? process_scheduled_works+0xa0f/0x17a0 [ 101.273738][ T5872] process_scheduled_works+0xaec/0x17a0 [ 101.273757][ T5872] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.273771][ T5872] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.273786][ T5872] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.273799][ T5872] ? schedule+0x90/0x360 [ 101.273812][ T5872] worker_thread+0xda6/0x1360 [ 101.273825][ T5872] ? __kthread_parkme+0x19c/0x1f0 [ 101.273836][ T5872] kthread+0x726/0x8b0 [ 101.273848][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 101.273857][ T5872] ? __pfx_kthread+0x10/0x10 [ 101.273867][ T5872] ? rt_spin_unlock+0x14f/0x200 [ 101.273877][ T5872] ? rt_spin_unlock+0x160/0x200 [ 101.273886][ T5872] ? __pfx_kthread+0x10/0x10 [ 101.273896][ T5872] ret_from_fork+0x51b/0xa40 [ 101.273907][ T5872] ? __pfx_ret_from_fork+0x10/0x10 [ 101.273916][ T5872] ? __switch_to+0xc82/0x1410 [ 101.273930][ T5872] ? __pfx_kthread+0x10/0x10 [ 101.273941][ T5872] ret_from_fork_asm+0x1a/0x30 [ 101.273958][ T5872] [ 101.273961][ T5872] [ 101.273964][ T5872] The buggy address belongs to a vmalloc virtual mapping [ 101.273973][ T5872] Memory state around the buggy address: [ 101.273980][ T5872] ffffc9000e8caf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.273986][ T5872] ffffc9000e8caf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.273992][ T5872] >ffffc9000e8cb000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.274000][ T5872] ^ [ 101.274006][ T5872] ffffc9000e8cb080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.274012][ T5872] ffffc9000e8cb100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 101.274017][ T5872] ================================================================== [ 101.274023][ T5872] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.274033][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.274043][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 101.274049][ T5872] Workqueue: usb_hub_wq hub_event [ 101.274058][ T5872] Call Trace: [ 101.274061][ T5872] [ 101.274065][ T5872] vpanic+0x1e0/0x670 [ 101.274078][ T5872] panic+0xc5/0xd0 [ 101.274090][ T5872] ? __pfx_panic+0x10/0x10 [ 101.274103][ T5872] ? __list_add_valid_or_report+0x4e/0x130 [ 101.274119][ T5872] ? __list_add_valid_or_report+0x4e/0x130 [ 101.274133][ T5872] check_panic_on_warn+0x89/0xb0 [ 101.274146][ T5872] ? __list_add_valid_or_report+0x4e/0x130 [ 101.274160][ T5872] end_report+0x6f/0x140 [ 101.274173][ T5872] kasan_report+0x128/0x150 [ 101.274186][ T5872] ? __list_add_valid_or_report+0x4e/0x130 [ 101.274202][ T5872] __list_add_valid_or_report+0x4e/0x130 [ 101.274216][ T5872] kcov_remote_stop+0x457/0x680 [ 101.274229][ T5872] hub_event+0x49d8/0x4f60 [ 101.274247][ T5872] ? __pfx_hub_event+0x10/0x10 [ 101.274256][ T5872] ? process_scheduled_works+0xa0f/0x17a0 [ 101.274271][ T5872] ? process_scheduled_works+0xa0f/0x17a0 [ 101.274285][ T5872] ? process_scheduled_works+0xa0f/0x17a0 [ 101.274310][ T5872] process_scheduled_works+0xaec/0x17a0 [ 101.274330][ T5872] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.274344][ T5872] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.274358][ T5872] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.274378][ T5872] ? schedule+0x90/0x360 [ 101.274390][ T5872] worker_thread+0xda6/0x1360 [ 101.274402][ T5872] ? __kthread_parkme+0x19c/0x1f0 [ 101.274413][ T5872] kthread+0x726/0x8b0 [ 101.274424][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 101.274433][ T5872] ? __pfx_kthread+0x10/0x10 [ 101.274443][ T5872] ? rt_spin_unlock+0x14f/0x200 [ 101.274453][ T5872] ? rt_spin_unlock+0x160/0x200 [ 101.274462][ T5872] ? __pfx_kthread+0x10/0x10 [ 101.274473][ T5872] ret_from_fork+0x51b/0xa40 [ 101.274483][ T5872] ? __pfx_ret_from_fork+0x10/0x10 [ 101.274492][ T5872] ? __switch_to+0xc82/0x1410 [ 101.274505][ T5872] ? __pfx_kthread+0x10/0x10 [ 101.274516][ T5872] ret_from_fork_asm+0x1a/0x30 [ 101.274532][ T5872] [ 101.274899][ T5872] Kernel Offset: disabled