last executing test programs: 13.056256525s ago: executing program 0 (id=9): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x80c, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r2, 0x0, 0x0, 0x0, 0x80800}) listen(r2, 0x5) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 12.600459427s ago: executing program 1 (id=11): r0 = open(0x0, 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0xf, 0x0, 0x8000000000000001, 0x48f, 0x5, 0xb, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x8, 0x3, 0x8001000000081, 0x5, 0x2, 0x3, 0x2, 0x9220000000000000, 0x3, 0x1, 0x80000001, 0x0, 0x7, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1000002, 0x13, 0xffffffffffffffff, 0x20000) socket$netlink(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000799000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x40000) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) close_range(r0, 0xffffffffffffffff, 0x0) 11.952779936s ago: executing program 4 (id=5): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40085}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000003c0), 0x4000) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) 10.641280514s ago: executing program 2 (id=3): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) 10.148223555s ago: executing program 4 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x4, {0x0, 0xf0}}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 10.00131869s ago: executing program 3 (id=4): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 9.591489564s ago: executing program 1 (id=13): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4bfa, &(0x7f00000000c0)=""/239) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) 9.092189231s ago: executing program 4 (id=14): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) socket$unix(0x1, 0x2, 0x0) close(0x3) socket$can_bcm(0x1d, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26004411}, 0x800) 8.70981893s ago: executing program 0 (id=15): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a060}}, 0xee) 6.254472796s ago: executing program 3 (id=16): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002e00)=[{&(0x7f0000001980)=""/128, 0x80}], 0x1, 0x372, 0x0) io_setup(0x7e, &(0x7f0000000080)=0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000340)='p', 0x300, 0xeffdffffffffffff}]) 5.946884881s ago: executing program 4 (id=17): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x30e1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000380)={@dev}, 0x14) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x48}}, 0x20000000) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 5.859739086s ago: executing program 2 (id=18): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$sock(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="441065", 0x3}], 0x1, &(0x7f0000000480)=[@timestamping={{0xffffffffffffff81, 0x1, 0x25, 0x8000000}}], 0x18}}], 0x1, 0x24000080) 5.858273688s ago: executing program 3 (id=19): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r4, &(0x7f00000016c0)={0x2020}, 0xfffffce3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) 5.759931467s ago: executing program 1 (id=20): landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) write$binfmt_elf32(r1, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000240)=0x24) write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 5.44787578s ago: executing program 0 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='btrfs\x00', 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000058000701fefffffffcffffff017c0000040042801000018006000600800a00000400008004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x100}, &(0x7f0000000040), &(0x7f0000000000)) 5.035704917s ago: executing program 2 (id=22): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) poll(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r5, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000000c0)=0x20) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 3.885386286s ago: executing program 0 (id=23): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0xf, 0x0, 0x8000000000000001, 0x48f, 0x5, 0xb, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x8, 0x3, 0x8001000000081, 0x5, 0x2, 0x3, 0x2, 0x9220000000000000, 0x3, 0x1, 0x80000001, 0x0, 0x7, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1000002, 0x13, 0xffffffffffffffff, 0x20000) socket$netlink(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000799000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x40000) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) close_range(r0, 0xffffffffffffffff, 0x0) 2.493477487s ago: executing program 1 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x4, {0x0, 0xf0}}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.568187042s ago: executing program 1 (id=25): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd4", 0xaf}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e", 0x4f9}], 0x2}}], 0x1, 0x0) 1.469555029s ago: executing program 1 (id=26): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x151000, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000003d80)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='\nT', 0x2}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r7, &(0x7f0000001400)=""/4076, 0xfffffeea) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) 856.309856ms ago: executing program 3 (id=27): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) socket$unix(0x1, 0x2, 0x0) close(0x3) socket$can_bcm(0x1d, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26004411}, 0x800) 660.201937ms ago: executing program 2 (id=28): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 632.353238ms ago: executing program 0 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000008}, @TCA_RATE={0x6, 0x5, {0x0, 0x10}}]}, 0x40}}, 0x0) 225.550099ms ago: executing program 3 (id=30): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x151000, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000003d80)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='\nT', 0x2}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(r8, &(0x7f0000000000)=[{0x0}], 0x1) read(r8, &(0x7f0000001400)=""/4076, 0xfffffeea) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) 224.206785ms ago: executing program 4 (id=31): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xd, 0x4e23, 0x2, 0x2, 0x20, 0x0, 0x21}, {0x6, 0x794, 0x6, 0x80000000, 0xfffffffffffffffc, 0x1c000000, 0xfdcc, 0x5}, {0x16, 0x1ff, 0x0, 0x278}, 0x65, 0x6e6bc0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x3c}, 0x2, @in=@local, 0x34ff, 0x2, 0x3, 0x40, 0x2, 0x9, 0x4}}, 0xe8) syz_emit_ethernet(0x42, &(0x7f0000001480)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a600", 0xc, 0x11, 0xff, @local, @mcast2, {[], {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xa, 0x0, @void}}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES32=r4, @ANYRES16=r5], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=32): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r3) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x88, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 83.331774][ T5825] cgroup: Unknown subsys name 'net' [ 83.568199][ T5825] cgroup: Unknown subsys name 'cpuset' [ 83.604033][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.310757][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.987839][ T979] cfg80211: failed to load regulatory.db [ 89.654360][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.659424][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.661513][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.662159][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.662763][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.666168][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.667918][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.669801][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.670110][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.671543][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.715412][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.720057][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.720840][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.727984][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.737179][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.747431][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.800564][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.800745][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.806830][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.823428][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.859852][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.871173][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.874103][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.893580][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.896660][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.859903][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.868535][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.945978][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.980349][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 91.267160][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 91.715246][ T5846] Bluetooth: hci0: command tx timeout [ 91.771333][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.772502][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.772906][ T5838] bridge_slave_0: entered allmulticast mode [ 91.777439][ T5838] bridge_slave_0: entered promiscuous mode [ 91.784294][ T5846] Bluetooth: hci1: command tx timeout [ 91.854630][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.854812][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.855237][ T5845] bridge_slave_0: entered allmulticast mode [ 91.856880][ T5845] bridge_slave_0: entered promiscuous mode [ 91.863512][ T5846] Bluetooth: hci3: command tx timeout [ 91.863696][ T5846] Bluetooth: hci2: command tx timeout [ 91.943895][ T5157] Bluetooth: hci4: command tx timeout [ 91.966312][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.966724][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.966939][ T5838] bridge_slave_1: entered allmulticast mode [ 91.969690][ T5838] bridge_slave_1: entered promiscuous mode [ 92.045803][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.045942][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.046132][ T5845] bridge_slave_1: entered allmulticast mode [ 92.048626][ T5845] bridge_slave_1: entered promiscuous mode [ 92.195734][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.195827][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.195942][ T5839] bridge_slave_0: entered allmulticast mode [ 92.197515][ T5839] bridge_slave_0: entered promiscuous mode [ 92.306514][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.306618][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.306751][ T5847] bridge_slave_0: entered allmulticast mode [ 92.308272][ T5847] bridge_slave_0: entered promiscuous mode [ 92.399803][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.399934][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.400104][ T5839] bridge_slave_1: entered allmulticast mode [ 92.401910][ T5839] bridge_slave_1: entered promiscuous mode [ 92.534847][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.535009][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.535193][ T5847] bridge_slave_1: entered allmulticast mode [ 92.536984][ T5847] bridge_slave_1: entered promiscuous mode [ 92.541103][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.627872][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.756184][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.846829][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.847071][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.847225][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.847516][ T5850] bridge_slave_0: entered allmulticast mode [ 92.849023][ T5850] bridge_slave_0: entered promiscuous mode [ 92.997747][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.081959][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.082093][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.082326][ T5850] bridge_slave_1: entered allmulticast mode [ 93.086125][ T5850] bridge_slave_1: entered promiscuous mode [ 93.250874][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.370611][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.509378][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.511749][ T5838] team0: Port device team_slave_0 added [ 93.597030][ T5845] team0: Port device team_slave_0 added [ 93.737030][ T5838] team0: Port device team_slave_1 added [ 93.783401][ T5157] Bluetooth: hci0: command tx timeout [ 93.807102][ T5845] team0: Port device team_slave_1 added [ 93.816740][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.863460][ T5157] Bluetooth: hci1: command tx timeout [ 93.943305][ T5846] Bluetooth: hci3: command tx timeout [ 93.943400][ T5157] Bluetooth: hci2: command tx timeout [ 93.997317][ T5839] team0: Port device team_slave_0 added [ 94.023383][ T5157] Bluetooth: hci4: command tx timeout [ 94.067602][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.069217][ T5847] team0: Port device team_slave_0 added [ 94.158629][ T5839] team0: Port device team_slave_1 added [ 94.306855][ T5847] team0: Port device team_slave_1 added [ 94.554218][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.554236][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.554259][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.637558][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.637569][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.637582][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.775953][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.775974][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.775998][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.856761][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.856777][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.856800][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.859156][ T5850] team0: Port device team_slave_0 added [ 94.947985][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.947998][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.948011][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.959407][ T5850] team0: Port device team_slave_1 added [ 94.961330][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.961344][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.961366][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.970737][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.970752][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.970776][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.050324][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.050341][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.050365][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.328944][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.328955][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.328968][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.496139][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.496151][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.496164][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.574642][ T5838] hsr_slave_0: entered promiscuous mode [ 95.576405][ T5838] hsr_slave_1: entered promiscuous mode [ 95.582974][ T5845] hsr_slave_0: entered promiscuous mode [ 95.585276][ T5845] hsr_slave_1: entered promiscuous mode [ 95.586227][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 95.586348][ T5845] Cannot create hsr debugfs directory [ 95.863484][ T5157] Bluetooth: hci0: command tx timeout [ 95.902055][ T5839] hsr_slave_0: entered promiscuous mode [ 95.902887][ T5839] hsr_slave_1: entered promiscuous mode [ 95.904513][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 95.904537][ T5839] Cannot create hsr debugfs directory [ 95.915770][ T5847] hsr_slave_0: entered promiscuous mode [ 95.917127][ T5847] hsr_slave_1: entered promiscuous mode [ 95.917952][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 95.917974][ T5847] Cannot create hsr debugfs directory [ 95.944302][ T5157] Bluetooth: hci1: command tx timeout [ 96.023538][ T5846] Bluetooth: hci3: command tx timeout [ 96.023749][ T5157] Bluetooth: hci2: command tx timeout [ 96.103570][ T5157] Bluetooth: hci4: command tx timeout [ 96.524882][ T5850] hsr_slave_0: entered promiscuous mode [ 96.528088][ T5850] hsr_slave_1: entered promiscuous mode [ 96.528717][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 96.528737][ T5850] Cannot create hsr debugfs directory [ 97.832188][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.882471][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.901819][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.940887][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.943363][ T5157] Bluetooth: hci0: command tx timeout [ 98.024153][ T5157] Bluetooth: hci1: command tx timeout [ 98.081770][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.103369][ T5846] Bluetooth: hci3: command tx timeout [ 98.103414][ T5157] Bluetooth: hci2: command tx timeout [ 98.141562][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.174658][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.183490][ T5157] Bluetooth: hci4: command tx timeout [ 98.240095][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.372740][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.433634][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.476619][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.555293][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.717943][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.755458][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.782934][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.849633][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.010625][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.057179][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.062567][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.114503][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.158065][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.257264][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.314207][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.337427][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.338045][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.383795][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.384392][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.461663][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.491409][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.534410][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.534623][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.604266][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.604416][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.669264][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.706737][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.725629][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.725891][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.813820][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.813972][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.896363][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.979905][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.980666][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.036021][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.054045][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.054209][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.251629][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.340887][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.341109][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.369927][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.410900][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.411589][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.619959][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.803647][ T5838] veth0_vlan: entered promiscuous mode [ 100.887232][ T5838] veth1_vlan: entered promiscuous mode [ 100.911369][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.225156][ T5838] veth0_macvtap: entered promiscuous mode [ 101.260107][ T5838] veth1_macvtap: entered promiscuous mode [ 101.313542][ T5847] veth0_vlan: entered promiscuous mode [ 101.411170][ T5847] veth1_vlan: entered promiscuous mode [ 101.426415][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.455996][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.477801][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.540219][ T3600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.561715][ T3600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.572424][ T3600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.585807][ T3600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.675487][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.810369][ T5839] veth0_vlan: entered promiscuous mode [ 101.820818][ T5847] veth0_macvtap: entered promiscuous mode [ 101.934101][ T5847] veth1_macvtap: entered promiscuous mode [ 101.968020][ T5839] veth1_vlan: entered promiscuous mode [ 102.057957][ T5845] veth0_vlan: entered promiscuous mode [ 102.070532][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.070557][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.117706][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.150970][ T5845] veth1_vlan: entered promiscuous mode [ 102.169475][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.238363][ T5850] veth0_vlan: entered promiscuous mode [ 102.239608][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.239627][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.241119][ T153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.262454][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.291341][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.316426][ T2951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.390638][ T5850] veth1_vlan: entered promiscuous mode [ 102.410963][ T5839] veth0_macvtap: entered promiscuous mode [ 102.515464][ T5839] veth1_macvtap: entered promiscuous mode [ 102.640103][ T5845] veth0_macvtap: entered promiscuous mode [ 102.759837][ T5845] veth1_macvtap: entered promiscuous mode [ 102.817953][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.818161][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.818180][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.927299][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.944231][ T5850] veth0_macvtap: entered promiscuous mode [ 102.997283][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.997369][ T3600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.009796][ T3600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.032595][ T5850] veth1_macvtap: entered promiscuous mode [ 103.046097][ T3600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.053067][ T3600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.091879][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.091898][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.100567][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.261443][ T3600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.275036][ T3600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.278228][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.288549][ T3600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.313377][ T3600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.426938][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.632096][ T1017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.636432][ T1017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.659551][ T1017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.747907][ T1017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.797811][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.797827][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.995970][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.995991][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.151502][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.151521][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.692969][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.692987][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.899232][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.899251][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.943165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.953214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.963232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.973236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.173157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.173607][ T5975] mmap: syz.1.11 (5975) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.353159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.563775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.813190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.813225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.813446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.466779][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.466800][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.281865][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d555800: rx timeout, send abort [ 107.439305][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.830757][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d555c00: rx timeout, send abort [ 107.830985][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d555800: abort rx timeout. Force session deactivation [ 108.331096][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d555c00: abort rx timeout. Force session deactivation [ 111.468295][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a12c400: rx timeout, send abort [ 111.646364][ T6016] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[6016] [ 111.969073][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a12c400: abort rx timeout. Force session deactivation [ 112.099193][ T6021] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 112.158377][ T6021] cramfs: wrong magic [ 112.861753][ T6023] capability: warning: `syz.1.20' uses deprecated v2 capabilities in a way that may be insecure [ 114.552885][ T6043] Zero length message leads to an empty skb [ 114.802618][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abce800: rx timeout, send abort [ 115.302690][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abce800: abort rx timeout. Force session deactivation [ 115.302793][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abce000: rx timeout, send abort [ 115.802874][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805abce000: abort rx timeout. Force session deactivation [ 117.783812][ C1] ------------[ cut here ]------------ [ 117.783828][ C1] WARNING: CPU: 1 PID: 29 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 117.783856][ C1] Modules linked in: [ 117.783882][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.783894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.783904][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 117.783916][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 117.783925][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 117.783934][ C1] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801c6b1dc0 [ 117.783942][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 117.783948][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 117.783955][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000010 [ 117.783962][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888033b9b268 [ 117.783968][ C1] FS: 0000000000000000(0000) GS:ffff8881269c1000(0000) knlGS:0000000000000000 [ 117.783977][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.783984][ C1] CR2: 000020000009a030 CR3: 000000003a496000 CR4: 00000000003526f0 [ 117.783993][ C1] Call Trace: [ 117.783998][ C1] [ 117.784012][ C1] ? __pfx_est_timer+0x10/0x10 [ 117.784030][ C1] call_timer_fn+0x17e/0x5f0 [ 117.784044][ C1] ? __pfx_est_timer+0x10/0x10 [ 117.784054][ C1] ? call_timer_fn+0xbe/0x5f0 [ 117.784066][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 117.784087][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.784101][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.784112][ C1] ? __pfx_est_timer+0x10/0x10 [ 117.784124][ C1] __run_timer_base+0x648/0x970 [ 117.784145][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 117.784166][ C1] run_timer_softirq+0xb7/0x180 [ 117.784179][ C1] handle_softirqs+0x22f/0x710 [ 117.784204][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 117.784222][ C1] run_ktimerd+0xcf/0x190 [ 117.784235][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 117.784247][ C1] ? schedule+0x91/0x360 [ 117.784264][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 117.784276][ C1] smpboot_thread_fn+0x53f/0xa60 [ 117.784288][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 117.784305][ C1] kthread+0x70e/0x8a0 [ 117.784328][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 117.784340][ C1] ? __pfx_kthread+0x10/0x10 [ 117.784357][ C1] ? __pfx_kthread+0x10/0x10 [ 117.784372][ C1] ret_from_fork+0x3f9/0x770 [ 117.784386][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 117.784402][ C1] ? __switch_to_asm+0x39/0x70 [ 117.784412][ C1] ? __switch_to_asm+0x33/0x70 [ 117.784421][ C1] ? __pfx_kthread+0x10/0x10 [ 117.784435][ C1] ret_from_fork_asm+0x1a/0x30 [ 117.784454][ C1] [ 117.784460][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.784467][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.784478][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.784484][ C1] Call Trace: [ 117.784488][ C1] [ 117.784492][ C1] dump_stack_lvl+0x99/0x250 [ 117.784507][ C1] ? __asan_memcpy+0x40/0x70 [ 117.784519][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.784533][ C1] ? __pfx__printk+0x10/0x10 [ 117.784552][ C1] vpanic+0x281/0x750 [ 117.784566][ C1] ? __pfx__printk+0x10/0x10 [ 117.784576][ C1] ? __pfx_vpanic+0x10/0x10 [ 117.784590][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 117.784610][ C1] panic+0xb9/0xc0 [ 117.784623][ C1] ? __pfx_panic+0x10/0x10 [ 117.784645][ C1] __warn+0x31b/0x4b0 [ 117.784658][ C1] ? est_timer+0x6dc/0x9f0 [ 117.784670][ C1] ? est_timer+0x6dc/0x9f0 [ 117.784681][ C1] report_bug+0x2be/0x4f0 [ 117.784693][ C1] ? est_timer+0x6dc/0x9f0 [ 117.784704][ C1] ? est_timer+0x6dc/0x9f0 [ 117.784714][ C1] ? est_timer+0x6de/0x9f0 [ 117.784725][ C1] handle_bug+0x84/0x160 [ 117.784740][ C1] exc_invalid_op+0x1a/0x50 [ 117.784754][ C1] asm_exc_invalid_op+0x1a/0x20 [ 117.784764][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 117.784774][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 117.784782][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 117.784791][ C1] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801c6b1dc0 [ 117.784798][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 117.784804][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 117.784811][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000010 [ 117.784818][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888033b9b268 [ 117.784829][ C1] ? est_timer+0x6db/0x9f0 [ 117.784851][ C1] ? __pfx_est_timer+0x10/0x10 [ 117.784867][ C1] call_timer_fn+0x17e/0x5f0 [ 117.784880][ C1] ? __pfx_est_timer+0x10/0x10 [ 117.784890][ C1] ? call_timer_fn+0xbe/0x5f0 [ 117.784902][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 117.784920][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.784932][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.784943][ C1] ? __pfx_est_timer+0x10/0x10 [ 117.784955][ C1] __run_timer_base+0x648/0x970 [ 117.784975][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 117.784996][ C1] run_timer_softirq+0xb7/0x180 [ 117.785009][ C1] handle_softirqs+0x22f/0x710 [ 117.785026][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 117.785044][ C1] run_ktimerd+0xcf/0x190 [ 117.785057][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 117.785070][ C1] ? schedule+0x91/0x360 [ 117.785087][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 117.785098][ C1] smpboot_thread_fn+0x53f/0xa60 [ 117.785115][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 117.785132][ C1] kthread+0x70e/0x8a0 [ 117.785148][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 117.785160][ C1] ? __pfx_kthread+0x10/0x10 [ 117.785177][ C1] ? __pfx_kthread+0x10/0x10 [ 117.785192][ C1] ret_from_fork+0x3f9/0x770 [ 117.785206][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 117.785222][ C1] ? __switch_to_asm+0x39/0x70 [ 117.785230][ C1] ? __switch_to_asm+0x33/0x70 [ 117.785239][ C1] ? __pfx_kthread+0x10/0x10 [ 117.785254][ C1] ret_from_fork_asm+0x1a/0x30 [ 117.785276][ C1] [ 117.785655][ C1] Kernel Offset: disabled