last executing test programs: 1m41.531526753s ago: executing program 0 (id=1): socket(0xa, 0x3, 0x87) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r4, 0x0, 0x2a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "ae37a5fee7f817d0e7c80c5e531c83ef941fd0e94c6071d4265aeea524c7baf5", "0c7829aeda9446f0e8cf944fbac5a72f154a5c2529c572cceeee9c61aaded410", "0c65a946e6cd2bea44adc1d1ab71e142d0111c20ce139373e647e119edbb66a3", "fec3f28745c3a8a5d6ddb195c8e8ca612bf943471cf9c6af9e075ad4d09d59ea", "a0f17d77c0d227f7ee532514c328d9b827496ff8f10f3356079dfa3457ecfb14", "fbf7d34f9695832c057dfaf6", 0xa4d, 0xffff, 0x0, 0xffffffff, 0xfffffffa}}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_usbip_server_init(0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 1m25.499195847s ago: executing program 32 (id=1): socket(0xa, 0x3, 0x87) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r4, 0x0, 0x2a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "ae37a5fee7f817d0e7c80c5e531c83ef941fd0e94c6071d4265aeea524c7baf5", "0c7829aeda9446f0e8cf944fbac5a72f154a5c2529c572cceeee9c61aaded410", "0c65a946e6cd2bea44adc1d1ab71e142d0111c20ce139373e647e119edbb66a3", "fec3f28745c3a8a5d6ddb195c8e8ca612bf943471cf9c6af9e075ad4d09d59ea", "a0f17d77c0d227f7ee532514c328d9b827496ff8f10f3356079dfa3457ecfb14", "fbf7d34f9695832c057dfaf6", 0xa4d, 0xffff, 0x0, 0xffffffff, 0xfffffffa}}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_usbip_server_init(0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 56.685567493s ago: executing program 1 (id=77): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x95) r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f00000018c0)=ANY=[@ANYBLOB="20ff0300f10000000100000000000000000000000000000005010000f8ffffff3d0000000000d9085370e929719bbdff239cd183f7f71df61a60bfc5844f6630d08f3bd32fd92c5defead90f3bf164b78f87a04abb0c3b2cedceaee99003090c77f6426d0436b4733a77d7c1f414a29b2b19852d39c4d42e40968f3030c4250d07b46ead8569536898b9acd685255ab1f6a681f0d2b9"], 0x10040) r2 = fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x3) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000f9ffffffffffffff00000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2f8dcc2925066ea23542bad2eda7e00000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001d80)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000008c0)={{}, 0x0, 0x2, @inherit={0x68, 0x0}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={r6, 0x6, 0x8}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r8 = syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0x0, 0x284}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x7, 0x0, 0x3c, 0x2, 0x1}) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) io_uring_enter(r8, 0x3516, 0x0, 0x4, 0x0, 0x0) 54.314240561s ago: executing program 4 (id=82): syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 54.225936988s ago: executing program 4 (id=83): socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 54.11402524s ago: executing program 1 (id=84): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d903"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 52.815035086s ago: executing program 4 (id=86): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write(r1, &(0x7f0000000140)="39b6", 0x2) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 52.790282461s ago: executing program 1 (id=87): syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 50.128603881s ago: executing program 1 (id=89): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) 50.096679729s ago: executing program 4 (id=90): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) 49.664380006s ago: executing program 4 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) poll(0x0, 0x0, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r3}}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000", 0xf) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x1c) 47.962400037s ago: executing program 4 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="00000000033a01003c0012800b0001006272"], 0x5c}}, 0x0) 47.603873102s ago: executing program 1 (id=94): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7, 0x1ff, 0x10, 0x1, 0xe, "2d0000000005040000003c00ff9404c005e0ff"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x0, 0x0, 0x7, 0xe, 0x0, 0x3, 0x7, 0x0, 0x7, 0x9}, {0x6000, 0x60000, 0x9, 0x1, 0x3, 0xff, 0xfd, 0x0, 0x87, 0xff, 0x1}, {0x2000, 0x8080000, 0xa, 0x0, 0x7, 0xc8, 0x0, 0x0, 0x88, 0x3, 0x40, 0x3}, {0xeeee8000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x0, 0xeeee0000, 0xb, 0x3, 0xfd, 0x4, 0x47, 0x0, 0x0, 0x3e}, {0x100000, 0x0, 0x9, 0x2, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x2}, {0x0, 0xeeee0000, 0xa, 0x4, 0x3, 0x0, 0xa1, 0x6}, {0x0, 0x6000, 0x9, 0x0, 0x0, 0x7, 0x1, 0x40, 0x26, 0x0, 0x0, 0xfb}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x30000, 0x110, 0x0, 0xf001, 0x0, [0x80000003, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 46.489700438s ago: executing program 1 (id=95): socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 32.495549561s ago: executing program 33 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="00000000033a01003c0012800b0001006272"], 0x5c}}, 0x0) 28.233946037s ago: executing program 34 (id=95): socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 13.660384455s ago: executing program 2 (id=131): syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) 10.789805423s ago: executing program 2 (id=134): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1}, 0x20}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101, 0x6000, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) 7.923416465s ago: executing program 3 (id=136): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x80, 0xfffc}, 0x7, [0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x9], [0x0, 0x401, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8f1, 0x1, 0xffffffee, 0x1c3}, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff03, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10003, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffe, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x0, 0x6, 0x61b4fd67, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x7, 0x2, 0x4, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x5, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x2120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x28], [0x9, 0xbb33, 0x1ff, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce6, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x8, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001340)=""/104, 0x68}], 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) 7.8310649s ago: executing program 2 (id=137): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x34}}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffffffffffffffe2, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010003904feeffffffeffffff00000000493d1b449be31d0f072d59006cd337f0e519e5aa9bea88790d5fd13c3783527ae510b9a88252db461d89e628a1318908b5fd9f4be227feb4e93ac193730a6faafa7105c9a6af17a4f6c95a09f4cc81413b81", @ANYRES32=r3, @ANYBLOB="21610000000000001400140076657468315f6d6163767461700000001c0016801800018014000b00060000000300000000000000"], 0x50}}, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@newtaction={0x1e0, 0x30, 0x1, 0x0, 0x0, {}, [{0x1cc, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x184, 0x6, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x38, 0x7, 0x6, 0x5}, @rand_addr=0x64010101, @private=0xa010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa14200, 0x7, 0x20000000, 0x6e, 0x8}, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2000001, 0x20000000, 0x5, 0x2967}, @multicast1, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2, 0x6, 0x7ff, 0x4}, @multicast1, @broadcast, 0xffffff00, 0x1}}]}, {0xbb, 0x6, "1cb82dd99be6e8a5f43b55731e1bd7bde534e73f036f9e42c19172e97817e5347ef1ac0c3295d6886440cde5b34c6c11704595340663bb856ae80bbfe7f6a23b58d180c1cf8ffd2c4bb6395c7b32d6de2b2eeeff1d0770cb608e1981d901ac6926bb87c3d3060ac980aa7f60e9f8c46acf06348b4c810afa19c4ffda8b786328bebb18bbb1027c0a7def3981104e6335e75bd4b5d296ab6df0db72f02b53b4fe7c9797a07be1386f0f21e93d5664c2a50df907cd044bfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) close(r1) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, &(0x7f00000001c0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000d9"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.120465278s ago: executing program 2 (id=141): syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) 3.055441671s ago: executing program 3 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) poll(0x0, 0x0, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r3}}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000", 0xf) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x1c) 1.719464409s ago: executing program 3 (id=143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 16.290344ms ago: executing program 3 (id=144): socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) close(r0) 0s ago: executing program 2 (id=145): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x80, 0xfffc}, 0x7, [0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x9], [0x0, 0x401, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8f1, 0x1, 0xffffffee, 0x1c3}, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff03, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10003, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffe, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x0, 0x6, 0x61b4fd67, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x7, 0x2, 0x4, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x5, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x2120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x28], [0x9, 0xbb33, 0x1ff, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce6, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x8, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001340)=""/104, 0x68}], 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 81.452996][ T5785] cgroup: Unknown subsys name 'net' [ 81.693953][ T5785] cgroup: Unknown subsys name 'cpuset' [ 81.749381][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.642597][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.922218][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.925053][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.935873][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.939447][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.940512][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.944900][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.945221][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.946302][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.947153][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.950005][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.951461][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.953637][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.959874][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.962695][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.963744][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.965904][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.976170][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.988976][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.008882][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.018867][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.177399][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.187871][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.199897][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.201328][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.203919][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.064876][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 87.166540][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 87.189071][ T43] cfg80211: failed to load regulatory.db [ 87.377637][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 87.395221][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 87.412516][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 87.895621][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.896735][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.897289][ T5795] bridge_slave_0: entered allmulticast mode [ 87.899842][ T5795] bridge_slave_0: entered promiscuous mode [ 88.000941][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.001058][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.001191][ T5795] bridge_slave_1: entered allmulticast mode [ 88.002839][ T5795] bridge_slave_1: entered promiscuous mode [ 88.020163][ T5801] Bluetooth: hci1: command tx timeout [ 88.020171][ T5813] Bluetooth: hci3: command tx timeout [ 88.098885][ T5801] Bluetooth: hci2: command tx timeout [ 88.100090][ T5801] Bluetooth: hci0: command tx timeout [ 88.232186][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.232266][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.232391][ T5798] bridge_slave_0: entered allmulticast mode [ 88.233970][ T5798] bridge_slave_0: entered promiscuous mode [ 88.258756][ T5801] Bluetooth: hci4: command tx timeout [ 88.559680][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.559792][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.559905][ T5798] bridge_slave_1: entered allmulticast mode [ 88.561484][ T5798] bridge_slave_1: entered promiscuous mode [ 88.567335][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.812050][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.812332][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.812485][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.812607][ T5796] bridge_slave_0: entered allmulticast mode [ 88.814176][ T5796] bridge_slave_0: entered promiscuous mode [ 88.816884][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.817024][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.817227][ T5816] bridge_slave_0: entered allmulticast mode [ 88.876585][ T5816] bridge_slave_0: entered promiscuous mode [ 88.878385][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.878537][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.879068][ T5802] bridge_slave_0: entered allmulticast mode [ 88.881576][ T5802] bridge_slave_0: entered promiscuous mode [ 89.010538][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.010830][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.010956][ T5796] bridge_slave_1: entered allmulticast mode [ 89.012633][ T5796] bridge_slave_1: entered promiscuous mode [ 89.013648][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.014064][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.014224][ T5816] bridge_slave_1: entered allmulticast mode [ 89.016021][ T5816] bridge_slave_1: entered promiscuous mode [ 89.018502][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.019974][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.020487][ T5802] bridge_slave_1: entered allmulticast mode [ 89.023028][ T5802] bridge_slave_1: entered promiscuous mode [ 89.031388][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.322327][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.413014][ T5795] team0: Port device team_slave_0 added [ 89.691761][ T5795] team0: Port device team_slave_1 added [ 89.695003][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.698271][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.793118][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.872181][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.874839][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.877049][ T5798] team0: Port device team_slave_0 added [ 89.880666][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.071627][ T5798] team0: Port device team_slave_1 added [ 90.098882][ T5813] Bluetooth: hci3: command tx timeout [ 90.098992][ T5801] Bluetooth: hci1: command tx timeout [ 90.161049][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.161064][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.161081][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.178863][ T5813] Bluetooth: hci2: command tx timeout [ 90.178976][ T5801] Bluetooth: hci0: command tx timeout [ 90.348802][ T5801] Bluetooth: hci4: command tx timeout [ 90.790415][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.790443][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.790471][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.792599][ T5796] team0: Port device team_slave_0 added [ 90.794687][ T5802] team0: Port device team_slave_0 added [ 90.902535][ T5816] team0: Port device team_slave_0 added [ 90.921006][ T5796] team0: Port device team_slave_1 added [ 90.922721][ T5802] team0: Port device team_slave_1 added [ 90.933076][ T5816] team0: Port device team_slave_1 added [ 90.933908][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.933921][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.933946][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.151051][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.151064][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.151082][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.436532][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.436546][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.436562][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.437783][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.437797][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.437819][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.449272][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.449284][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.449300][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.622452][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.622469][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.622489][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.623394][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.623403][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.623419][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.624349][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.624358][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.624373][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.785631][ T5795] hsr_slave_0: entered promiscuous mode [ 91.786692][ T5795] hsr_slave_1: entered promiscuous mode [ 92.036840][ T5798] hsr_slave_0: entered promiscuous mode [ 92.037795][ T5798] hsr_slave_1: entered promiscuous mode [ 92.038505][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 92.039660][ T5798] Cannot create hsr debugfs directory [ 92.178950][ T5801] Bluetooth: hci1: command tx timeout [ 92.178964][ T5813] Bluetooth: hci3: command tx timeout [ 92.258999][ T5801] Bluetooth: hci0: command tx timeout [ 92.259039][ T5801] Bluetooth: hci2: command tx timeout [ 92.428801][ T5801] Bluetooth: hci4: command tx timeout [ 92.575976][ T5796] hsr_slave_0: entered promiscuous mode [ 92.576903][ T5796] hsr_slave_1: entered promiscuous mode [ 92.577589][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 92.577615][ T5796] Cannot create hsr debugfs directory [ 92.624382][ T5802] hsr_slave_0: entered promiscuous mode [ 92.625879][ T5802] hsr_slave_1: entered promiscuous mode [ 92.626877][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 92.626901][ T5802] Cannot create hsr debugfs directory [ 92.648476][ T5816] hsr_slave_0: entered promiscuous mode [ 92.650284][ T5816] hsr_slave_1: entered promiscuous mode [ 92.651240][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 92.651263][ T5816] Cannot create hsr debugfs directory [ 94.183772][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.218149][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.253386][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.260207][ T5801] Bluetooth: hci3: command tx timeout [ 94.260243][ T5801] Bluetooth: hci1: command tx timeout [ 94.318021][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.338882][ T5813] Bluetooth: hci0: command tx timeout [ 94.338936][ T5801] Bluetooth: hci2: command tx timeout [ 94.441552][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.485763][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.498950][ T5801] Bluetooth: hci4: command tx timeout [ 94.530103][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.589629][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.730447][ T5798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.781990][ T5798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.815223][ T5798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.858500][ T5798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.999615][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.032125][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.068129][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.125274][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.170599][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.279952][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.324247][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.367666][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.367939][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.420099][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.481963][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.482960][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.533538][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.534552][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.600244][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.681038][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.724807][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.732425][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.745290][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.793500][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.794172][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.839728][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.891571][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.899437][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.950585][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.956382][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.956543][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.071221][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.111965][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.155370][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.155649][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.195926][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.196058][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.204015][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.260855][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.261085][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.305126][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.305465][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.374541][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.765660][ T5795] veth0_vlan: entered promiscuous mode [ 96.787596][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.844692][ T5795] veth1_vlan: entered promiscuous mode [ 96.903364][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.114257][ T5795] veth0_macvtap: entered promiscuous mode [ 97.117638][ T5796] veth0_vlan: entered promiscuous mode [ 97.183002][ T5795] veth1_macvtap: entered promiscuous mode [ 97.212397][ T5796] veth1_vlan: entered promiscuous mode [ 97.287936][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.315613][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.344705][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.358140][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.441282][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.448480][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.478706][ T1165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.487130][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.518133][ T5796] veth0_macvtap: entered promiscuous mode [ 97.594178][ T5796] veth1_macvtap: entered promiscuous mode [ 97.773617][ T5802] veth0_vlan: entered promiscuous mode [ 97.814225][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.862693][ T5816] veth0_vlan: entered promiscuous mode [ 97.877052][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.884776][ T5802] veth1_vlan: entered promiscuous mode [ 97.893662][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.893685][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.935892][ T5798] veth0_vlan: entered promiscuous mode [ 97.949860][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.962966][ T5816] veth1_vlan: entered promiscuous mode [ 97.988408][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.995231][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.009446][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.034894][ T5798] veth1_vlan: entered promiscuous mode [ 98.114252][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.114275][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.283350][ T5802] veth0_macvtap: entered promiscuous mode [ 98.307963][ T5802] veth1_macvtap: entered promiscuous mode [ 98.366946][ T5816] veth0_macvtap: entered promiscuous mode [ 98.420330][ T5798] veth0_macvtap: entered promiscuous mode [ 98.424045][ T5816] veth1_macvtap: entered promiscuous mode [ 98.443911][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.443934][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.473609][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.483162][ T5798] veth1_macvtap: entered promiscuous mode [ 98.566601][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.614190][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.614213][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.678660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.688645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.698621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.708617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.718615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.728614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.738618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.748615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.758613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.798657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.887913][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.903776][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.903861][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.911822][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.955850][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.004218][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.101912][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.311706][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.432569][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.700792][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.916704][ T5923] vxcan1: tx drop: invalid da for name 0xffffffffffffffff [ 100.052345][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.098027][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.144482][ T5919] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 100.144511][ T5919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 100.165090][ T5919] vhci_hcd vhci_hcd.0: Device attached [ 100.176965][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.550885][ T5927] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 100.550982][ T5927] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.553005][ T5927] vhci_hcd vhci_hcd.0: Device attached [ 100.671259][ T5925] vhci_hcd: connection closed [ 100.732347][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.733923][ T13] vhci_hcd vhci_hcd.2: stop threads [ 100.734522][ T13] vhci_hcd vhci_hcd.2: release socket [ 100.734755][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 100.957449][ T5887] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 101.099805][ T5887] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 101.264064][ T5928] vhci_hcd: connection reset by peer [ 101.324279][ T1178] vhci_hcd vhci_hcd.0: stop threads [ 101.331079][ T1178] vhci_hcd vhci_hcd.0: release socket [ 101.350176][ T1178] vhci_hcd vhci_hcd.0: disconnect device [ 101.416533][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.554655][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.660891][ T1392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.660916][ T1392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.272707][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.272731][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.495492][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.495509][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.873111][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.873134][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.228027][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.228050][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.249436][ T5887] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 107.775895][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.775919][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.519780][ T5953] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.540560][ T5942] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.739588][ T5953] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 108.826434][ T5942] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.826456][ T5942] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.826468][ T5942] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.826522][ T5942] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.876480][ T5942] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.876511][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.876526][ T5942] usb 4-1: Product: syz [ 108.876535][ T5942] usb 4-1: Manufacturer: syz [ 109.658503][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.830635][ T5953] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.867004][ T5948] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.236780][ T5942] cdc_wdm 4-1:1.0: skipping garbage [ 112.236830][ T5942] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 112.343248][ T5942] usb 4-1: USB disconnect, device number 2 [ 112.395855][ T5966] process 'syz.1.8' launched './file0' with NULL argv: empty string added [ 114.182365][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 114.262392][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 114.345076][ T5981] bond0: entered promiscuous mode [ 114.372426][ T5981] bond_slave_0: entered promiscuous mode [ 114.372616][ T5981] bond_slave_1: entered promiscuous mode [ 114.372767][ T5981] bond0: entered allmulticast mode [ 114.372776][ T5981] bond_slave_0: entered allmulticast mode [ 114.372786][ T5981] bond_slave_1: entered allmulticast mode [ 115.726232][ T5988] fuse: Bad value for 'group_id' [ 115.726256][ T5988] fuse: Bad value for 'group_id' [ 119.767860][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.853888][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.886665][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.908892][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.909984][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.614336][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 121.467957][ T6030] fuse: Bad value for 'group_id' [ 121.467990][ T6030] fuse: Bad value for 'group_id' [ 122.018677][ T5813] Bluetooth: hci5: command tx timeout [ 124.102075][ T5813] Bluetooth: hci5: command tx timeout [ 124.235406][ T6044] warning: `syz.2.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.636680][ T6058] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.023833][ T6058] mmap: syz.3.33 (6058) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.081073][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.203092][ T5813] Bluetooth: hci5: command tx timeout [ 126.281744][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.411785][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.886539][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.269210][ T5813] Bluetooth: hci5: command tx timeout [ 129.607779][ T6006] chnl_net:caif_netlink_parms(): no params data found [ 133.963529][ T148] bridge_slave_1: left allmulticast mode [ 133.966439][ T148] bridge_slave_1: left promiscuous mode [ 134.095597][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.723125][ T148] bridge_slave_0: left allmulticast mode [ 134.723156][ T148] bridge_slave_0: left promiscuous mode [ 134.723422][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.165777][ T6171] netlink: 48 bytes leftover after parsing attributes in process `syz.4.68'. [ 138.549449][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.549551][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.609594][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 139.617251][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 139.661845][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 139.662067][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 139.748684][ T6177] ceph: No mds server is up or the cluster is laggy [ 141.319690][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.399581][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.452439][ T148] bond0 (unregistering): Released all slaves [ 141.742205][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.742377][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.742625][ T6006] bridge_slave_0: entered allmulticast mode [ 141.745593][ T6006] bridge_slave_0: entered promiscuous mode [ 143.246615][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.247004][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.247255][ T6006] bridge_slave_1: entered allmulticast mode [ 143.270832][ T6006] bridge_slave_1: entered promiscuous mode [ 147.142370][ T6232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.80'. [ 147.872982][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 151.154620][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.243576][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.161636][ T6271] netlink: 44 bytes leftover after parsing attributes in process `syz.4.93'. [ 153.889603][ T148] hsr_slave_0: left promiscuous mode [ 154.143618][ T148] hsr_slave_1: left promiscuous mode [ 154.145336][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.145468][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.213143][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.213171][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.389780][ T148] veth1_macvtap: left promiscuous mode [ 154.390066][ T148] veth0_macvtap: left promiscuous mode [ 154.390387][ T148] veth1_vlan: left promiscuous mode [ 154.392124][ T148] veth0_vlan: left promiscuous mode [ 156.495125][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 158.644553][ T6294] syz.3.97 (6294) used greatest stack depth: 16952 bytes left [ 162.062402][ T6322] input: syz0 as /devices/virtual/input/input6 [ 162.462002][ T6321] vivid-000: kernel_thread() failed [ 162.795052][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 167.149391][ T148] team0 (unregistering): Port device team_slave_1 removed [ 167.369477][ T148] team0 (unregistering): Port device team_slave_0 removed [ 169.464356][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.468324][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.489718][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.491213][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.492728][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.141022][ T5801] Bluetooth: hci1: command tx timeout [ 173.906018][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.928433][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.930389][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.941879][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.942768][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.218597][ T5813] Bluetooth: hci1: command tx timeout [ 176.171880][ T5801] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.183680][ T5801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.190195][ T5801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.191682][ T5801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.193039][ T5801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.987971][ T5801] Bluetooth: hci6: command tx timeout [ 177.298950][ T5801] Bluetooth: hci1: command tx timeout [ 178.259189][ T5801] Bluetooth: hci7: command tx timeout [ 179.059912][ T5801] Bluetooth: hci6: command tx timeout [ 179.378990][ T5801] Bluetooth: hci1: command tx timeout [ 180.370889][ T5801] Bluetooth: hci7: command tx timeout [ 181.140464][ T5801] Bluetooth: hci6: command tx timeout [ 182.418632][ T5801] Bluetooth: hci7: command tx timeout [ 182.516872][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.125'. [ 182.521072][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.125'. [ 183.828678][ T5801] Bluetooth: hci6: command tx timeout [ 184.502076][ T5801] Bluetooth: hci7: command tx timeout [ 184.936161][ T6006] team0: Port device team_slave_0 added [ 184.993797][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.028436][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.741248][ T6477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.135'. [ 191.741966][ T6477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.135'. [ 193.378340][ T6492] netlink: 48 bytes leftover after parsing attributes in process `syz.2.137'. [ 193.562997][ T6499] input: syz0 as /devices/virtual/input/input7 [ 193.870716][ T6498] vivid-000: kernel_thread() failed [ 199.596722][ T6531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.143'. [ 199.597112][ T6531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.143'. [ 200.598144][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.598224][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.048468][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 306.048492][ C0] rcu: 1-...!: (0 ticks this GP) idle=fc14/1/0x4000000000000000 softirq=0/0 fqs=6 rcuc=10489 jiffies(starved) [ 306.048518][ C0] rcu: (detected by 0, t=10502 jiffies, g=14073, q=81 ncpus=2) [ 306.048534][ C0] Sending NMI from CPU 0 to CPUs 1: [ 306.048561][ C1] NMI backtrace for cpu 1 [ 306.048578][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 306.048597][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.048608][ C1] RIP: 0010:mm_get_cid+0xab/0x130 [ 306.048634][ C1] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 c7 c5 c8 74 01 8d 49 c1 ed 03 bd 00 00 00 80 eb 07 44 89 f0 f7 d8 71 d4 f3 90 <43> 0f b6 44 25 00 84 c0 75 41 44 8b 3d 9c 7b 6f 0b 48 89 df 4c 89 [ 306.048647][ C1] RSP: 0018:ffffc900001d7be8 EFLAGS: 00000887 [ 306.048664][ C1] RAX: 0000000080000000 RBX: ffff888034643f10 RCX: 1ffff110050d2a44 [ 306.048677][ C1] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffff888034643f10 [ 306.048688][ C1] RBP: 0000000080000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.048698][ C1] R10: dffffc0000000000 R11: ffffed10068c87b3 R12: dffffc0000000000 [ 306.048710][ C1] R13: 1ffffffff1a02e99 R14: 0000000080000000 R15: 0000000000000002 [ 306.048721][ C1] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 306.048735][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.048746][ C1] CR2: 000000110c34826d CR3: 0000000037ac6000 CR4: 00000000003526f0 [ 306.048763][ C1] Call Trace: [ 306.048773][ C1] [ 306.048783][ C1] __schedule+0x212a/0x5070 [ 306.048818][ C1] ? tick_nohz_idle_exit+0x2c7/0x3b0 [ 306.048845][ C1] ? __pfx___schedule+0x10/0x10 [ 306.048869][ C1] ? tick_nohz_stop_idle+0x285/0x370 [ 306.048890][ C1] ? tick_nohz_idle_exit+0x2e1/0x3b0 [ 306.048912][ C1] schedule_idle+0x52/0x90 [ 306.048944][ C1] do_idle+0x472/0x4d0 [ 306.048959][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 306.048985][ C1] ? __pfx_do_idle+0x10/0x10 [ 306.049004][ C1] cpu_startup_entry+0x44/0x60 [ 306.049019][ C1] start_secondary+0x101/0x110 [ 306.049035][ C1] common_startup_64+0x13e/0x147 [ 306.049064][ C1] [ 306.049555][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10489 jiffies! g14073 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 306.049573][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=8023 [ 306.049582][ C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g14073 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 306.049599][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 306.049607][ C0] rcu: RCU grace-period kthread stack dump: [ 306.049613][ C0] task:rcu_preempt state:I stack:27168 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 306.049665][ C0] Call Trace: [ 306.049671][ C0] [ 306.049681][ C0] __schedule+0x145f/0x5070 [ 306.049705][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 306.049745][ C0] ? __pfx___schedule+0x10/0x10 [ 306.049785][ C0] ? schedule+0x91/0x360 [ 306.049810][ C0] schedule+0x165/0x360 [ 306.049833][ C0] schedule_timeout+0x12b/0x270 [ 306.049856][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 306.049879][ C0] ? __pfx_process_timeout+0x10/0x10 [ 306.049900][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 306.049915][ C0] ? prepare_to_swait_event+0x341/0x380 [ 306.049939][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 306.049971][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 306.049993][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 306.050012][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 306.050031][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 306.050049][ C0] rcu_gp_kthread+0x99/0x390 [ 306.050072][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 306.050094][ C0] ? __kthread_parkme+0x7b/0x200 [ 306.050113][ C0] ? __kthread_parkme+0x1a1/0x200 [ 306.050136][ C0] kthread+0x711/0x8a0 [ 306.050160][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 306.050180][ C0] ? __pfx_kthread+0x10/0x10 [ 306.050199][ C0] ? rt_spin_unlock+0x150/0x200 [ 306.050222][ C0] ? rt_spin_unlock+0x161/0x200 [ 306.050240][ C0] ? __pfx_kthread+0x10/0x10 [ 306.050262][ C0] ret_from_fork+0x510/0xa50 [ 306.050283][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 306.050298][ C0] ? __switch_to+0xc9e/0x1480 [ 306.050323][ C0] ? __pfx_kthread+0x10/0x10 [ 306.050345][ C0] ret_from_fork_asm+0x1a/0x30 [ 306.050382][ C0] [ 306.050388][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 306.050397][ C0] CPU: 0 UID: 0 PID: 4248 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 306.050415][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.050424][ C0] Workqueue: events_unbound toggle_allocation_gate [ 306.050448][ C0] RIP: 0010:smp_call_function_many_cond+0xe80/0x1250 [ 306.050468][ C0] Code: 01 31 ff e8 12 9a 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 4d 95 0b 00 eb 38 f3 90 42 0f b6 04 2b 84 c0 75 11 <41> f7 04 24 01 00 00 00 74 1e e8 31 95 0b 00 eb e4 44 89 e1 80 e1 [ 306.050480][ C0] RSP: 0018:ffffc9000d8e76a0 EFLAGS: 00000246 [ 306.050493][ C0] RAX: 0000000000000000 RBX: 1ffff1101712854d RCX: ffff888032769e40 [ 306.050503][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.050512][ C0] RBP: ffffc9000d8e77e0 R08: 0000000000000000 R09: 0000000000000000 [ 306.050522][ C0] R10: dffffc0000000000 R11: fffffbfff1db666f R12: ffff8880b8942a68 [ 306.050534][ C0] R13: dffffc0000000000 R14: ffff8880b883c8c0 R15: 0000000000000001 [ 306.050544][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 306.050556][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.050567][ C0] CR2: 00007f2369505d58 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 306.050582][ C0] Call Trace: [ 306.050587][ C0] [ 306.050598][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 306.050625][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 306.050645][ C0] ? kmem_cache_alloc_bulk_noprof+0xa4/0x720 [ 306.050669][ C0] ? __pfx___text_poke+0x10/0x10 [ 306.050692][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 306.050711][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 306.050732][ C0] smp_text_poke_batch_finish+0x5f9/0x1130 [ 306.050761][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 306.050792][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 306.050813][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 306.050828][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 306.050842][ C0] ? mutex_lock_nested+0x154/0x1d0 [ 306.050861][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 306.050879][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 306.050893][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 306.050913][ C0] static_key_enable+0x1a/0x20 [ 306.050929][ C0] toggle_allocation_gate+0xad/0x240 [ 306.050951][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 306.050974][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 306.050997][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 306.051013][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 306.051031][ C0] process_scheduled_works+0xad1/0x1770 [ 306.051068][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.051083][ C0] ? do_raw_spin_lock+0x121/0x290 [ 306.051112][ C0] worker_thread+0x8a0/0xda0 [ 306.051139][ C0] ? __kthread_parkme+0x7b/0x200 [ 306.051164][ C0] kthread+0x711/0x8a0 [ 306.051187][ C0] ? __pfx_worker_thread+0x10/0x10 [ 306.051204][ C0] ? __pfx_kthread+0x10/0x10 [ 306.051222][ C0] ? rt_spin_unlock+0x150/0x200 [ 306.051245][ C0] ? rt_spin_unlock+0x161/0x200 [ 306.051262][ C0] ? __pfx_kthread+0x10/0x10 [ 306.051283][ C0] ret_from_fork+0x510/0xa50 [ 306.051301][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 306.051316][ C0] ? __switch_to+0xc9e/0x1480 [ 306.051340][ C0] ? __pfx_kthread+0x10/0x10 [ 306.051361][ C0] ret_from_fork_asm+0x1a/0x30 [ 306.051395][ C0] [ 442.916202][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [kworker/u8:16:4248] [ 442.916228][ C0] Modules linked in: [ 442.916239][ C0] irq event stamp: 1071446 [ 442.916246][ C0] hardirqs last enabled at (1071445): [] irqentry_exit+0x5dd/0x660 [ 442.916271][ C0] hardirqs last disabled at (1071446): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 442.916297][ C0] softirqs last enabled at (1022818): [] __local_bh_enable_ip+0x1a1/0x2c0 [ 442.916318][ C0] softirqs last disabled at (1022812): [] nsim_dev_trap_report_work+0x72e/0xbc0 [ 442.916352][ C0] CPU: 0 UID: 0 PID: 4248 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 442.916370][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.916381][ C0] Workqueue: events_unbound toggle_allocation_gate [ 442.916404][ C0] RIP: 0010:smp_call_function_many_cond+0xe77/0x1250 [ 442.916426][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 12 9a 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 4d 95 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 31 95 [ 442.916438][ C0] RSP: 0018:ffffc9000d8e76a0 EFLAGS: 00000293 [ 442.916450][ C0] RAX: ffffffff81b415af RBX: 1ffff1101712854d RCX: ffff888032769e40 [ 442.916462][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.916471][ C0] RBP: ffffc9000d8e77e0 R08: 0000000000000000 R09: 0000000000000000 [ 442.916481][ C0] R10: dffffc0000000000 R11: fffffbfff1db666f R12: ffff8880b8942a68 [ 442.916492][ C0] R13: dffffc0000000000 R14: ffff8880b883c8c0 R15: 0000000000000001 [ 442.916502][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 442.916514][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.916525][ C0] CR2: 00007f2369505d58 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 442.916541][ C0] Call Trace: [ 442.916551][ C0] [ 442.916564][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 442.916593][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 442.916613][ C0] ? kmem_cache_alloc_bulk_noprof+0xa4/0x720 [ 442.916637][ C0] ? __pfx___text_poke+0x10/0x10 [ 442.916660][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 442.916680][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 442.916700][ C0] smp_text_poke_batch_finish+0x5f9/0x1130 [ 442.916730][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 442.916754][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 442.916769][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 442.916784][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 442.916798][ C0] ? mutex_lock_nested+0x154/0x1d0 [ 442.916825][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 442.916843][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 442.916858][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 442.916878][ C0] static_key_enable+0x1a/0x20 [ 442.916893][ C0] toggle_allocation_gate+0xad/0x240 [ 442.916916][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 442.916939][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 442.916962][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 442.916978][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 442.916995][ C0] process_scheduled_works+0xad1/0x1770 [ 442.917032][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 442.917047][ C0] ? do_raw_spin_lock+0x121/0x290 [ 442.917076][ C0] worker_thread+0x8a0/0xda0 [ 442.917103][ C0] ? __kthread_parkme+0x7b/0x200 [ 442.917128][ C0] kthread+0x711/0x8a0 [ 442.917151][ C0] ? __pfx_worker_thread+0x10/0x10 [ 442.917168][ C0] ? __pfx_kthread+0x10/0x10 [ 442.917186][ C0] ? rt_spin_unlock+0x150/0x200 [ 442.917209][ C0] ? rt_spin_unlock+0x161/0x200 [ 442.917227][ C0] ? __pfx_kthread+0x10/0x10 [ 442.917248][ C0] ret_from_fork+0x510/0xa50 [ 442.917266][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 442.917281][ C0] ? __switch_to+0xc9e/0x1480 [ 442.917307][ C0] ? __pfx_kthread+0x10/0x10 [ 442.917328][ C0] ret_from_fork_asm+0x1a/0x30 [ 442.917363][ C0] [ 442.917370][ C0] Sending NMI from CPU 0 to CPUs 1: [ 442.917395][ C1] NMI backtrace for cpu 1 [ 442.917408][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 442.917425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.917434][ C1] RIP: 0010:_find_first_zero_bit+0x5d/0xb0 [ 442.917454][ C1] Code: e8 78 81 a5 fd 49 8b 06 48 83 f8 ff 74 2b 45 31 ed 48 f7 d0 f3 48 0f bc c0 4c 01 e8 48 39 d8 48 0f 43 c3 eb 05 31 db 48 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f e9 95 ef 58 06 cc 49 83 c6 08 45 31 ed [ 442.917466][ C1] RSP: 0018:ffffc900001d7bb8 EFLAGS: 00000046 [ 442.917480][ C1] RAX: 0000000000000002 RBX: 0000000000000002 RCX: 1ffff110050d2a44 [ 442.917491][ C1] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffff888034643f10 [ 442.917501][ C1] RBP: 0000000080000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.917511][ C1] R10: dffffc0000000000 R11: ffffed10068c87b3 R12: dffffc0000000000 [ 442.917522][ C1] R13: 0000000000000000 R14: ffff888034643f10 R15: 0000000000000002 [ 442.917533][ C1] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 442.917546][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.917557][ C1] CR2: 000000110c34826d CR3: 0000000037ac6000 CR4: 00000000003526f0 [ 442.917580][ C1] Call Trace: [ 442.917587][ C1] [ 442.917594][ C1] mm_get_cid+0xc7/0x130 [ 442.917614][ C1] __schedule+0x212a/0x5070 [ 442.917645][ C1] ? tick_nohz_idle_exit+0x2c7/0x3b0 [ 442.917671][ C1] ? __pfx___schedule+0x10/0x10 [ 442.917695][ C1] ? tick_nohz_stop_idle+0x285/0x370 [ 442.917716][ C1] ? tick_nohz_idle_exit+0x2e1/0x3b0 [ 442.917738][ C1] schedule_idle+0x52/0x90 [ 442.917761][ C1] do_idle+0x472/0x4d0 [ 442.917775][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 442.917792][ C1] ? __pfx_do_idle+0x10/0x10 [ 442.917811][ C1] cpu_startup_entry+0x44/0x60 [ 442.917826][ C1] start_secondary+0x101/0x110 [ 442.917843][ C1] common_startup_64+0x13e/0x147 [ 442.917871][ C1] [ 442.918391][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 442.918404][ C0] CPU: 0 UID: 0 PID: 4248 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 442.918425][ C0] Tainted: [L]=SOFTLOCKUP [ 442.918430][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.918439][ C0] Workqueue: events_unbound toggle_allocation_gate [ 442.918462][ C0] Call Trace: [ 442.918468][ C0] [ 442.918475][ C0] vpanic+0x1e0/0x670 [ 442.918498][ C0] panic+0xb9/0xc0 [ 442.918518][ C0] ? __pfx_panic+0x10/0x10 [ 442.918537][ C0] ? printk_trigger_flush+0x111/0x170 [ 442.918567][ C0] watchdog_timer_fn+0x75f/0x760 [ 442.918590][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 442.918608][ C0] __hrtimer_run_queues+0x4f6/0xd00 [ 442.918638][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 442.918653][ C0] ? read_tsc+0x9/0x20 [ 442.918673][ C0] hrtimer_interrupt+0x45d/0xa90 [ 442.918710][ C0] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 442.918731][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 442.918755][ C0] [ 442.918760][ C0] [ 442.918767][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 442.918783][ C0] RIP: 0010:smp_call_function_many_cond+0xe77/0x1250 [ 442.918802][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 12 9a 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 4d 95 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 31 95 [ 442.918821][ C0] RSP: 0018:ffffc9000d8e76a0 EFLAGS: 00000293 [ 442.918833][ C0] RAX: ffffffff81b415af RBX: 1ffff1101712854d RCX: ffff888032769e40 [ 442.918844][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.918853][ C0] RBP: ffffc9000d8e77e0 R08: 0000000000000000 R09: 0000000000000000 [ 442.918862][ C0] R10: dffffc0000000000 R11: fffffbfff1db666f R12: ffff8880b8942a68 [ 442.918873][ C0] R13: dffffc0000000000 R14: ffff8880b883c8c0 R15: 0000000000000001 [ 442.918890][ C0] ? smp_call_function_many_cond+0xe8f/0x1250 [ 442.918918][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 442.918945][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 442.918965][ C0] ? kmem_cache_alloc_bulk_noprof+0xa4/0x720 [ 442.918988][ C0] ? __pfx___text_poke+0x10/0x10 [ 442.919012][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 442.919032][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 442.919052][ C0] smp_text_poke_batch_finish+0x5f9/0x1130 [ 442.919081][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 442.919105][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 442.919120][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 442.919135][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 442.919149][ C0] ? mutex_lock_nested+0x154/0x1d0 [ 442.919168][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 442.919186][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 442.919201][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 442.919219][ C0] static_key_enable+0x1a/0x20 [ 442.919235][ C0] toggle_allocation_gate+0xad/0x240 [ 442.919258][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 442.919281][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 442.919304][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 442.919320][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 442.919338][ C0] process_scheduled_works+0xad1/0x1770 [ 442.919375][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 442.919390][ C0] ? do_raw_spin_lock+0x121/0x290 [ 442.919419][ C0] worker_thread+0x8a0/0xda0 [ 442.919446][ C0] ? __kthread_parkme+0x7b/0x200 [ 442.919472][ C0] kthread+0x711/0x8a0 [ 442.919494][ C0] ? __pfx_worker_thread+0x10/0x10 [ 442.919511][ C0] ? __pfx_kthread+0x10/0x10 [ 442.919530][ C0] ? rt_spin_unlock+0x150/0x200 [ 442.919553][ C0] ? rt_spin_unlock+0x161/0x200 [ 442.919571][ C0] ? __pfx_kthread+0x10/0x10 [ 442.919593][ C0] ret_from_fork+0x510/0xa50 [ 442.919611][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 442.919626][ C0] ? __switch_to+0xc9e/0x1480 [ 442.919652][ C0] ? __pfx_kthread+0x10/0x10 [ 442.919674][ C0] ret_from_fork_asm+0x1a/0x30 [ 442.919708][ C0] [ 444.080045][ C0] Shutting down cpus with NMI [ 444.080222][ C0] Kernel Offset: disabled