last executing test programs: 51.049957836s ago: executing program 2 (id=91): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 46.517659617s ago: executing program 2 (id=97): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) 44.786077467s ago: executing program 2 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x4000, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x664d, 0x1, 0x1}) 36.405874374s ago: executing program 2 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r6, 0x0, 0x2fff, 0x0, 0x0, 0x4}) 31.889955381s ago: executing program 2 (id=112): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 29.886041311s ago: executing program 4 (id=114): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 27.901712891s ago: executing program 2 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 25.026437611s ago: executing program 4 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 22.239410276s ago: executing program 4 (id=124): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x10) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x20}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 18.461280945s ago: executing program 0 (id=131): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x30) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x2}}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) 16.942637355s ago: executing program 4 (id=132): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000680)=0x41) 16.785067981s ago: executing program 1 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x6, @broadcast}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10, 0x1, 0x0, 0x6, 0x0, 0x0, "5dc9ca561a5fbf61048955f6f876b2ff", 0x0, 0x1}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 16.57497347s ago: executing program 3 (id=134): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 15.590198936s ago: executing program 1 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 15.587287281s ago: executing program 0 (id=136): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r4, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000900)={r5}, &(0x7f0000000000)=0xfe47) 14.220381764s ago: executing program 1 (id=137): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x4008840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xd}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13.729239154s ago: executing program 3 (id=138): socket$inet6(0xa, 0x1, 0xfffffff9) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) syslog(0x4, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13.678010374s ago: executing program 0 (id=139): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) fsopen(&(0x7f0000019340)='sysfs\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000019300), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) 13.67753235s ago: executing program 4 (id=140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(0x0, 0x1, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 11.720098637s ago: executing program 32 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 11.688151473s ago: executing program 3 (id=142): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000010a000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326625000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3bf}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.559628927s ago: executing program 0 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0xb0, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0xd, 0x6, "9638ff", 0x7a, 0x6, 0x1, @private2, @empty, {[@srh={0x16, 0x4, 0x4, 0x2, 0x1, 0x40, 0xffff, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty]}], {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x6, {[@mss={0x2, 0x4, 0xb}]}}, {"613cb06ba353358e5d1d42c84ff14774ae1dd2ef1ee80f654ee2b77f3796c63d7e6a2d6c71c82a9698aca25cdc37f8cfddb99bfabf957ec35df8"}}}}}}}, 0x0) r7 = signalfd4(r6, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) io_uring_enter(r7, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 11.304969486s ago: executing program 1 (id=144): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70b52d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x1}, {0x6, 0xf}, {0xc, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84) 10.957641233s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7f, 0xc1, &(0x7f00000001c0)='F', 0x1, 0x1, 0x7f, 0xfffffffe, 0x28, 0x1, 0x0}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 9.451711784s ago: executing program 1 (id=146): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000001a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) close(0x3) 9.241937383s ago: executing program 3 (id=147): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x38011, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 9.229356806s ago: executing program 0 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=""/155, 0x0, 0x9b, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="0524060000000001300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 6.681216408s ago: executing program 0 (id=149): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.613207679s ago: executing program 3 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x890b, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 1.338299359s ago: executing program 3 (id=151): socket$inet6(0xa, 0x1, 0xfffffff9) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) syslog(0x4, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=152): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, &(0x7f00000003c0)) setsockopt$sock_int(r1, 0x1, 0x2d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffc8b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [ 87.236168][ T992] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 90.483329][ T5824] cgroup: Unknown subsys name 'net' [ 90.721903][ T5824] cgroup: Unknown subsys name 'cpuset' [ 90.786499][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.760482][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.727648][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.731048][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.751438][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.764405][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.767254][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.768043][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.771171][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.772080][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.785264][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.790475][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.796209][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.797339][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.799430][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.801015][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.802926][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.803319][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.804128][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.805610][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.820866][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.849607][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.850081][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.851360][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.851792][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.858052][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.867318][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.912835][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 97.002605][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 97.039284][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 97.212503][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 97.438354][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 97.867648][ T5852] Bluetooth: hci1: command tx timeout [ 97.867655][ T5155] Bluetooth: hci3: command tx timeout [ 97.946020][ T5852] Bluetooth: hci2: command tx timeout [ 97.946997][ T5848] Bluetooth: hci0: command tx timeout [ 97.947129][ T5155] Bluetooth: hci4: command tx timeout [ 98.037127][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.038207][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.038593][ T5838] bridge_slave_0: entered allmulticast mode [ 98.040538][ T5838] bridge_slave_0: entered promiscuous mode [ 98.260182][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.260361][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.260677][ T5838] bridge_slave_1: entered allmulticast mode [ 98.263924][ T5838] bridge_slave_1: entered promiscuous mode [ 98.390373][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.390497][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.390817][ T5839] bridge_slave_0: entered allmulticast mode [ 98.392499][ T5839] bridge_slave_0: entered promiscuous mode [ 98.481273][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.481447][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.481566][ T5836] bridge_slave_0: entered allmulticast mode [ 98.483336][ T5836] bridge_slave_0: entered promiscuous mode [ 98.553551][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.553658][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.553777][ T5839] bridge_slave_1: entered allmulticast mode [ 98.555481][ T5839] bridge_slave_1: entered promiscuous mode [ 98.638742][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.638972][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.639173][ T5836] bridge_slave_1: entered allmulticast mode [ 98.642447][ T5836] bridge_slave_1: entered promiscuous mode [ 98.863422][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.936941][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.937080][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.937205][ T5842] bridge_slave_0: entered allmulticast mode [ 98.939113][ T5842] bridge_slave_0: entered promiscuous mode [ 99.132572][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.212086][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.212241][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.212369][ T5842] bridge_slave_1: entered allmulticast mode [ 99.214130][ T5842] bridge_slave_1: entered promiscuous mode [ 99.215279][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.215398][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.215507][ T5837] bridge_slave_0: entered allmulticast mode [ 99.219817][ T5837] bridge_slave_0: entered promiscuous mode [ 99.229213][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.331374][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.413828][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.413992][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.414189][ T5837] bridge_slave_1: entered allmulticast mode [ 99.417840][ T5837] bridge_slave_1: entered promiscuous mode [ 99.422702][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.502877][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.698371][ T5838] team0: Port device team_slave_0 added [ 99.781980][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.921044][ T5838] team0: Port device team_slave_1 added [ 99.946032][ T5155] Bluetooth: hci3: command tx timeout [ 99.946066][ T5155] Bluetooth: hci1: command tx timeout [ 100.026009][ T5155] Bluetooth: hci0: command tx timeout [ 100.026045][ T5155] Bluetooth: hci4: command tx timeout [ 100.026068][ T5155] Bluetooth: hci2: command tx timeout [ 100.062231][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.069092][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.072560][ T5839] team0: Port device team_slave_0 added [ 100.163176][ T5836] team0: Port device team_slave_0 added [ 100.241578][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.244678][ T5839] team0: Port device team_slave_1 added [ 100.578779][ T5836] team0: Port device team_slave_1 added [ 100.829326][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.829346][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.829373][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.949678][ T5842] team0: Port device team_slave_0 added [ 101.089696][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.089714][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.089741][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.210501][ T5842] team0: Port device team_slave_1 added [ 101.212528][ T5837] team0: Port device team_slave_0 added [ 101.213781][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.213796][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.213822][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.230657][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.230675][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.230702][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.325449][ T5837] team0: Port device team_slave_1 added [ 101.326697][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.326712][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.326738][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.344343][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.344359][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.344382][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.666225][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.666244][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.666271][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.840710][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.840729][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.840757][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.842254][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.842268][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.842283][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.980717][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.980735][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.980761][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.026208][ T5848] Bluetooth: hci3: command tx timeout [ 102.026245][ T5848] Bluetooth: hci1: command tx timeout [ 102.082920][ T5838] hsr_slave_0: entered promiscuous mode [ 102.083941][ T5838] hsr_slave_1: entered promiscuous mode [ 102.106217][ T5155] Bluetooth: hci0: command tx timeout [ 102.116044][ T5155] Bluetooth: hci2: command tx timeout [ 102.116074][ T5155] Bluetooth: hci4: command tx timeout [ 102.373365][ T5839] hsr_slave_0: entered promiscuous mode [ 102.374286][ T5839] hsr_slave_1: entered promiscuous mode [ 102.375020][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 102.375093][ T5839] Cannot create hsr debugfs directory [ 102.386608][ T5836] hsr_slave_0: entered promiscuous mode [ 102.389533][ T5836] hsr_slave_1: entered promiscuous mode [ 102.390580][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 102.390605][ T5836] Cannot create hsr debugfs directory [ 102.892858][ T5842] hsr_slave_0: entered promiscuous mode [ 102.894028][ T5842] hsr_slave_1: entered promiscuous mode [ 102.894644][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 102.894664][ T5842] Cannot create hsr debugfs directory [ 103.148725][ T5837] hsr_slave_0: entered promiscuous mode [ 103.150190][ T5837] hsr_slave_1: entered promiscuous mode [ 103.151211][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 103.151236][ T5837] Cannot create hsr debugfs directory [ 104.105964][ T5155] Bluetooth: hci3: command tx timeout [ 104.106017][ T5848] Bluetooth: hci1: command tx timeout [ 104.185981][ T5155] Bluetooth: hci2: command tx timeout [ 104.186013][ T5155] Bluetooth: hci0: command tx timeout [ 104.186058][ T5848] Bluetooth: hci4: command tx timeout [ 104.791546][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.818260][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.853936][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.898843][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.051197][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.096235][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.132862][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.175127][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.354025][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.395035][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.424106][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.482390][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.662534][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.755646][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.810253][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.886316][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.953131][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.065075][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.131421][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.182342][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.233619][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.280355][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.346357][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.346488][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.403208][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.403415][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.414774][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.564864][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.642773][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.644944][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.645089][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.723565][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.723708][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.851969][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.944222][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.969995][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.970913][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.042875][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.043224][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.156948][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.241324][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.245706][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.245985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.319834][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.320033][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.460955][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.541378][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.541685][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.568813][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.601341][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.601564][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.964348][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.111925][ T5838] veth0_vlan: entered promiscuous mode [ 108.187862][ T5838] veth1_vlan: entered promiscuous mode [ 108.334484][ T5839] veth0_vlan: entered promiscuous mode [ 108.409982][ T5839] veth1_vlan: entered promiscuous mode [ 108.489532][ T5838] veth0_macvtap: entered promiscuous mode [ 108.559348][ T5838] veth1_macvtap: entered promiscuous mode [ 108.574123][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.683574][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.710153][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.732399][ T5839] veth0_macvtap: entered promiscuous mode [ 108.768789][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.776865][ T5839] veth1_macvtap: entered promiscuous mode [ 108.820224][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.822743][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.869898][ T87] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.881168][ T87] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.908479][ T87] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.052143][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.057325][ T5836] veth0_vlan: entered promiscuous mode [ 109.182452][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.275520][ T5836] veth1_vlan: entered promiscuous mode [ 109.340010][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.370975][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.392326][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.396300][ T5842] veth0_vlan: entered promiscuous mode [ 109.410592][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.529478][ T5842] veth1_vlan: entered promiscuous mode [ 109.608348][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.608372][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.816306][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.816328][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.821081][ T5836] veth0_macvtap: entered promiscuous mode [ 109.915236][ T5836] veth1_macvtap: entered promiscuous mode [ 109.932763][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.932784][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.934429][ T5837] veth0_vlan: entered promiscuous mode [ 110.011882][ T5842] veth0_macvtap: entered promiscuous mode [ 110.033249][ T5837] veth1_vlan: entered promiscuous mode [ 110.045069][ T5842] veth1_macvtap: entered promiscuous mode [ 110.141265][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.169145][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.169167][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.194265][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.299006][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.335587][ T87] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.347833][ T87] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.357177][ T87] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.363063][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.377122][ T87] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.502987][ T87] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.508963][ T5837] veth0_macvtap: entered promiscuous mode [ 110.510686][ T87] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.538240][ T87] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.605840][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.647441][ T5837] veth1_macvtap: entered promiscuous mode [ 110.706288][ T5957] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 110.706314][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.865921][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 110.871972][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 110.871991][ T10] usb 3-1: config 0 has no interface number 0 [ 110.872071][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 110.874311][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 110.874327][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.874338][ T10] usb 3-1: Product: syz [ 110.874346][ T10] usb 3-1: Manufacturer: syz [ 110.874353][ T10] usb 3-1: SerialNumber: syz [ 110.901497][ T10] usb 3-1: config 0 descriptor?? [ 110.963797][ T10] smsc75xx v1.0.0 [ 111.083649][ T5958] vlan2: entered allmulticast mode [ 111.083672][ T5958] veth1: entered allmulticast mode [ 111.418350][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.439039][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.439070][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.497519][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.577362][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 111.577395][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 111.577819][ T87] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.634637][ T1126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.652387][ T1126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.702506][ T1126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.702747][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.702763][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.941621][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.941643][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.284400][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.284421][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.449769][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 112.449813][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 112.449832][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 112.451279][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 112.592912][ T10] usb 3-1: USB disconnect, device number 2 [ 114.723675][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.723702][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.672872][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.875802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.885795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.888080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.888172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.888265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.972365][ T5986] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.065819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.067473][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 117.167027][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.167062][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.167104][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.167127][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.242483][ T9] usb 1-1: config 0 descriptor?? [ 117.370836][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.370858][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.397998][ T9] hub 1-1:0.0: USB hub found [ 117.865805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.866048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.866245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.866404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.471913][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 118.493021][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 118.493117][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 118.893274][ T9] usb 1-1: USB disconnect, device number 2 [ 122.507933][ T1232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.682159][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.682183][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.682195][ T1232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.682220][ T1232] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.682234][ T1232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.690754][ T1232] usb 4-1: config 0 descriptor?? [ 123.444410][ T1232] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 124.022412][ T6021] tipc: Started in network mode [ 124.023156][ T6021] tipc: Node identity 8a1091980dc5, cluster identity 4711 [ 124.224587][ T6021] tipc: Enabled bearer , priority 0 [ 124.272310][ T6021] +: renamed from syzkaller0 [ 124.411778][ T6021] tipc: Disabling bearer [ 125.524345][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.569796][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.571676][ T992] usb 4-1: USB disconnect, device number 2 [ 125.701158][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.101189][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.237131][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.574420][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 128.642115][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.848965][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.151350][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.345482][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.345591][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.400328][ T6082] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 133.766553][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.894554][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.732314][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.848299][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.888715][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.847369][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.888498][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.264494][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.524441][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.965957][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 150.118521][ T10] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 150.118552][ T10] usb 4-1: config 0 has no interface number 0 [ 150.122135][ T10] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.13 [ 150.122164][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.122184][ T10] usb 4-1: Product: syz [ 150.122199][ T10] usb 4-1: Manufacturer: syz [ 150.122214][ T10] usb 4-1: SerialNumber: syz [ 150.178916][ T10] usb 4-1: config 0 descriptor?? [ 152.779206][ T10] usb 4-1: bad CDC descriptors [ 153.346283][ T6200] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.910492][ T10] usb 4-1: USB disconnect, device number 3 [ 158.897208][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.106476][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.244161][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.998522][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.184084][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.977566][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.009359][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.068404][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.240229][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.406989][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.077855][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.155961][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.376031][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.133231][ T6255] (syz.0.75,6255,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 163.133253][ T6255] (syz.0.75,6255,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 163.560273][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.908158][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 170.848995][ T6307] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.87'. [ 171.866481][ T6313] random: crng reseeded on system resumption [ 172.103565][ T6313] Restarting kernel threads ... [ 172.112505][ T6313] Done restarting kernel threads. [ 178.682384][ T6337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.911770][ T6337] bond0: (slave rose0): Enslaving as an active interface with an up link [ 186.579794][ T6366] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 186.579814][ T6366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.579972][ T6373] vhci_hcd: connection closed [ 186.637013][ T6366] vhci_hcd vhci_hcd.0: Device attached [ 186.680669][ T67] vhci_hcd: stop threads [ 186.682116][ T67] vhci_hcd: release socket [ 186.682196][ T67] vhci_hcd: disconnect device [ 187.899004][ T5959] IPVS: starting estimator thread 0... [ 188.307483][ T6385] IPVS: using max 7 ests per chain, 16800 per kthread [ 188.415780][ T6388] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 188.415838][ T6388] CIFS mount error: No usable UNC path provided in device string! [ 188.415838][ T6388] [ 188.416071][ T6388] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 193.868207][ T5912] IPVS: starting estimator thread 0... [ 193.972082][ T6426] IPVS: using max 6 ests per chain, 14400 per kthread [ 194.825309][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.825395][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.011127][ T6441] qnx6: unable to read the first superblock [ 195.782785][ T6436] bond_slave_0: entered promiscuous mode [ 195.782861][ T6436] bond_slave_1: entered promiscuous mode [ 195.784697][ T6436] vlan2: entered promiscuous mode [ 195.784715][ T6436] bond0: entered promiscuous mode [ 197.893758][ T6455] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 210.173352][ T6549] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.295843][ T6549] syz.1.137 (6549) used greatest stack depth: 17456 bytes left [ 213.471869][ T6586] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 215.762726][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.148'. [ 215.762763][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 216.649593][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 216.822005][ T49] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 216.822038][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.822058][ T49] usb 2-1: Product: syz [ 216.822073][ T49] usb 2-1: Manufacturer: syz [ 216.822205][ T49] usb 2-1: SerialNumber: syz [ 216.865076][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.879828][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.881426][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.883119][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.909004][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.195787][ T49] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 218.195903][ T49] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 218.195973][ T49] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 221.193141][ T49] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 221.238755][ T49] usb 2-1: USB disconnect, device number 2 [ 221.857607][ T6612] overlayfs: missing 'lowerdir' [ 223.439803][ T5852] Bluetooth: hci5: command tx timeout [ 223.855269][ T23] ================================================================== [ 223.855288][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 223.855324][ T23] Read of size 8 at addr ffffc9000ccfc090 by task irq_work/0/23 [ 223.855342][ T23] [ 223.855354][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.855377][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.855389][ T23] Call Trace: [ 223.855397][ T23] [ 223.855406][ T23] dump_stack_lvl+0x189/0x250 [ 223.855436][ T23] ? run_irq_workd+0x116/0x190 [ 223.855462][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.855490][ T23] ? __pfx__printk+0x10/0x10 [ 223.855522][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 223.855551][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 223.855582][ T23] print_report+0xca/0x240 [ 223.855607][ T23] ? run_irq_workd+0x116/0x190 [ 223.855630][ T23] kasan_report+0x118/0x150 [ 223.855658][ T23] ? run_irq_workd+0x116/0x190 [ 223.855689][ T23] run_irq_workd+0x116/0x190 [ 223.855710][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 223.855733][ T23] ? schedule+0x91/0x360 [ 223.855770][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 223.855795][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 223.855818][ T23] smpboot_thread_fn+0x542/0xa60 [ 223.855843][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 223.855871][ T23] kthread+0x711/0x8a0 [ 223.855902][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 223.855926][ T23] ? __pfx_kthread+0x10/0x10 [ 223.855956][ T23] ? __pfx_kthread+0x10/0x10 [ 223.855985][ T23] ret_from_fork+0x3fc/0x770 [ 223.856011][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 223.856039][ T23] ? __switch_to_asm+0x39/0x70 [ 223.856058][ T23] ? __switch_to_asm+0x33/0x70 [ 223.856075][ T23] ? __pfx_kthread+0x10/0x10 [ 223.856104][ T23] ret_from_fork_asm+0x1a/0x30 [ 223.856131][ T23] [ 223.856139][ T23] [ 223.856144][ T23] The buggy address belongs to a vmalloc virtual mapping [ 223.856164][ T23] Memory state around the buggy address: [ 223.856176][ T23] ffffc9000ccfbf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 223.856189][ T23] ffffc9000ccfc000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 223.856202][ T23] >ffffc9000ccfc080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 223.856222][ T23] ^ [ 223.856233][ T23] ffffc9000ccfc100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 223.856245][ T23] ffffc9000ccfc180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 223.856255][ T23] ================================================================== [ 223.856300][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 223.856315][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.856338][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.856349][ T23] Call Trace: [ 223.856356][ T23] [ 223.856364][ T23] dump_stack_lvl+0x99/0x250 [ 223.856392][ T23] ? __asan_memcpy+0x40/0x70 [ 223.856413][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.856441][ T23] ? __pfx__printk+0x10/0x10 [ 223.856468][ T23] vpanic+0x281/0x750 [ 223.856498][ T23] ? __pfx_vpanic+0x10/0x10 [ 223.856523][ T23] ? irqentry_exit+0x74/0x90 [ 223.856553][ T23] panic+0xb9/0xc0 [ 223.856581][ T23] ? __pfx_panic+0x10/0x10 [ 223.856610][ T23] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 223.856636][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 223.856666][ T23] ? run_irq_workd+0x116/0x190 [ 223.856689][ T23] check_panic_on_warn+0x89/0xb0 [ 223.856710][ T23] ? run_irq_workd+0x116/0x190 [ 223.856733][ T23] end_report+0x78/0x160 [ 223.856766][ T23] kasan_report+0x129/0x150 [ 223.856793][ T23] ? run_irq_workd+0x116/0x190 [ 223.856821][ T23] run_irq_workd+0x116/0x190 [ 223.856845][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 223.856869][ T23] ? schedule+0x91/0x360 [ 223.856893][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 223.856917][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 223.856940][ T23] smpboot_thread_fn+0x542/0xa60 [ 223.856966][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 223.856994][ T23] kthread+0x711/0x8a0 [ 223.857024][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 223.857048][ T23] ? __pfx_kthread+0x10/0x10 [ 223.857080][ T23] ? __pfx_kthread+0x10/0x10 [ 223.857109][ T23] ret_from_fork+0x3fc/0x770 [ 223.857136][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 223.857164][ T23] ? __switch_to_asm+0x39/0x70 [ 223.857182][ T23] ? __switch_to_asm+0x33/0x70 [ 223.857200][ T23] ? __pfx_kthread+0x10/0x10 [ 223.857229][ T23] ret_from_fork_asm+0x1a/0x30 [ 223.857256][ T23] [ 223.857549][ T23] Kernel Offset: disabled