last executing test programs: 26.435843814s ago: executing program 3 (id=89): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xd8, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4010}, 0x10000890) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc085}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 26.164793481s ago: executing program 3 (id=90): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) splice(r1, 0x0, r0, &(0x7f00000000c0)=0x1, 0x9, 0x8) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 23.498449606s ago: executing program 3 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000002c0)=0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000190001090800000000000000021800000002fd708fc528aca4853e010000000008000100ac14b38083140008000500ac1e0101100016800c0001000000000000"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000200)='/dev/cec#\x00'}, 0x30) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r3, &(0x7f0000000140)=""/4096, 0x1000) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x3c, r5, 0x1, 0x5, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "113de363005e799174bcab904affb9e4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa000}, 0x4880) fcntl$getflags(r3, 0x401) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x401, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 14.333008205s ago: executing program 3 (id=96): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 14.332315394s ago: executing program 4 (id=97): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x11, 0x5, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x41b69000) 14.293692924s ago: executing program 0 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 13.86001803s ago: executing program 0 (id=100): io_setup(0x10000, &(0x7f0000000800)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000800)={0x0}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x0, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) io_setup(0x9, &(0x7f0000002e40)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x2, 0xfff1}, {0xc, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x20000000}]}, 0x34}}, 0x0) 10.424163096s ago: executing program 1 (id=101): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) 10.36859927s ago: executing program 4 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300fb, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x830200) 8.593288612s ago: executing program 4 (id=104): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e80), 0x0, 0x20000000) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) read(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r3}, 0x18) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0xc) accept(r4, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x400000) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000080)="800009e922", 0x5, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) 8.50884165s ago: executing program 3 (id=105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xff2c}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000600000c"], 0x2c}], 0x1, 0x890) 8.043536558s ago: executing program 2 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0x10000}, 0x9, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.393649878s ago: executing program 4 (id=107): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) 7.160222474s ago: executing program 1 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 6.660610678s ago: executing program 1 (id=109): connect(0xffffffffffffffff, &(0x7f00000001c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7ffe}, 0x80) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 6.554884577s ago: executing program 2 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 6.412367892s ago: executing program 4 (id=111): r0 = socket(0xa, 0x3, 0xf7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r1, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 6.411688029s ago: executing program 2 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) umount2(&(0x7f0000000040)='.\x00', 0x2) 6.111805013s ago: executing program 1 (id=113): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x100000f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mount$binder(0x0, 0x0, &(0x7f0000000400), 0x1000840, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) close(0x3) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x541b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 6.030531558s ago: executing program 2 (id=114): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x8004) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 5.977157453s ago: executing program 0 (id=115): r0 = memfd_secret(0x0) ftruncate(r0, 0x51a9497) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x94, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtaction={0x14, 0x32, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x200000000000000) 3.781084563s ago: executing program 0 (id=116): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0xb) 3.51593137s ago: executing program 4 (id=117): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioprio_set$pid(0x1, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x12, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4050) unlink(0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) 3.367550838s ago: executing program 2 (id=118): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) 1.453213436s ago: executing program 0 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 1.271631251s ago: executing program 1 (id=120): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r2, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x40, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3, @ANYRES32=r3]) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800}}, 0x50) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)={0x6c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x800, 0x0, 0x1, [@typed={0x8, 0x102, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@local}]}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c"]}]}, 0x6c}], 0x1}, 0x40304) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x20, 0x0, 0x7, {0xe3, 0x0, 0xa, 0x80000002}}, 0x0}) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000280)={0x0, 0x804}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x791e42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) setrlimit(0x6, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 899.3774ms ago: executing program 0 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x8, 0xb, {0x0}, {0xee00}, 0x1, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/152, 0x98) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4c, 0x2, [@TCA_FW_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x20000000, 0x7fffffff, 0x101, 0x7, {0x1, 0x1, 0x2, 0xc0, 0x9}, {0xfb, 0x2, 0x7ff, 0x3, 0xfff2, 0x8}, 0x4, 0x1e, 0x8}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x5c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x24}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x83}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x10001}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 852.188799ms ago: executing program 1 (id=122): sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40000) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = gettid() move_pages(r2, 0x8, &(0x7f0000000040)=[&(0x7f0000934000/0x2000)=nil, &(0x7f0000163000/0x3000)=nil, &(0x7f000028a000/0x4000)=nil, &(0x7f000093b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000060a000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f00000000c0)=[0x2, 0x10000], &(0x7f0000000100)=[0x0], 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r3, &(0x7f0000000cc0)='./file0\x00', 0x89901) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x35, 0x2, @thr={&(0x7f0000000400)="85d231ec553d0b310653535a502bd73f12a2e544f8e38062ef506764766df92fa69daf0a340cc0e142f94d1cb6452ae6a24e295bd1e910b9ef68cf4e95135719391c5978ac3c34c239b90345778d81c708b392c6355bdbbcbf442159db0f6926bfbf436f1a121b89271032801fb586db6fe3630afdc5a0c96bd20b7941527e0b3b2db37e2c", &(0x7f00000004c0)="d9c08904fa4c76b8bed16e93f35c5b438a628bc76685e4b4df768e74230db119ed028770fbb34258ba6ec7db1c6b7ce5a952e4c67dd8914e7ff6062701eedb8a50d66540c121cb69"}}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) writev(r4, &(0x7f00000003c0)=[{0x0}], 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 484.297754ms ago: executing program 3 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000400)={0xf04601c4a2f46e46}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 0s ago: executing program 2 (id=124): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 84.399171][ T5823] cgroup: Unknown subsys name 'net' [ 84.697494][ T5823] cgroup: Unknown subsys name 'cpuset' [ 84.732541][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.537157][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.824505][ T1246] cfg80211: failed to load regulatory.db [ 91.011434][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.022616][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.025100][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.026095][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.027171][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.028037][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.029577][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.029717][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.042205][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.048016][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.066227][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.067211][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.071399][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.102853][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.103884][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.108560][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.172198][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.187968][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.189195][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.226913][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.246200][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.246848][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.247715][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.250098][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.251159][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.977305][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 92.093708][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 92.497238][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.528322][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.550229][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 92.977197][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.978152][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.978516][ T5837] bridge_slave_0: entered allmulticast mode [ 92.980343][ T5837] bridge_slave_0: entered promiscuous mode [ 93.133309][ T5848] Bluetooth: hci4: command tx timeout [ 93.212785][ T5848] Bluetooth: hci1: command tx timeout [ 93.255294][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.255438][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.255567][ T5837] bridge_slave_1: entered allmulticast mode [ 93.257202][ T5837] bridge_slave_1: entered promiscuous mode [ 93.259029][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.259153][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.259272][ T5850] bridge_slave_0: entered allmulticast mode [ 93.261012][ T5850] bridge_slave_0: entered promiscuous mode [ 93.301963][ T5848] Bluetooth: hci3: command tx timeout [ 93.302095][ T5855] Bluetooth: hci0: command tx timeout [ 93.302104][ T5848] Bluetooth: hci2: command tx timeout [ 93.423788][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.423922][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.424091][ T5850] bridge_slave_1: entered allmulticast mode [ 93.426734][ T5850] bridge_slave_1: entered promiscuous mode [ 93.704248][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.986262][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.002192][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.104634][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.104844][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.105066][ T5836] bridge_slave_0: entered allmulticast mode [ 94.107927][ T5836] bridge_slave_0: entered promiscuous mode [ 94.257231][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.404377][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.404570][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.404748][ T5835] bridge_slave_0: entered allmulticast mode [ 94.407227][ T5835] bridge_slave_0: entered promiscuous mode [ 94.411283][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.411456][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.411629][ T5836] bridge_slave_1: entered allmulticast mode [ 94.417526][ T5836] bridge_slave_1: entered promiscuous mode [ 94.516007][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.516130][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.516305][ T5838] bridge_slave_0: entered allmulticast mode [ 94.518176][ T5838] bridge_slave_0: entered promiscuous mode [ 94.595015][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.595126][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.595262][ T5835] bridge_slave_1: entered allmulticast mode [ 94.596958][ T5835] bridge_slave_1: entered promiscuous mode [ 94.675532][ T5837] team0: Port device team_slave_0 added [ 94.676051][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.676282][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.676543][ T5838] bridge_slave_1: entered allmulticast mode [ 94.678672][ T5838] bridge_slave_1: entered promiscuous mode [ 94.936453][ T5837] team0: Port device team_slave_1 added [ 94.996935][ T5850] team0: Port device team_slave_0 added [ 95.069056][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.211752][ T5850] team0: Port device team_slave_1 added [ 95.212021][ T5154] Bluetooth: hci4: command tx timeout [ 95.216714][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.220270][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.292205][ T5154] Bluetooth: hci1: command tx timeout [ 95.313598][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.372076][ T5154] Bluetooth: hci0: command tx timeout [ 95.372107][ T5154] Bluetooth: hci2: command tx timeout [ 95.372130][ T5154] Bluetooth: hci3: command tx timeout [ 95.387010][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.685541][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.685559][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.685587][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.690272][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.944899][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.944915][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.944940][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.038244][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.038256][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.038273][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.117807][ T5836] team0: Port device team_slave_0 added [ 96.201603][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.201619][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.201645][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.206802][ T5835] team0: Port device team_slave_0 added [ 96.211398][ T5836] team0: Port device team_slave_1 added [ 96.228234][ T5838] team0: Port device team_slave_0 added [ 96.259492][ T5835] team0: Port device team_slave_1 added [ 96.335275][ T5838] team0: Port device team_slave_1 added [ 96.934832][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.934848][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.934872][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.110383][ T5837] hsr_slave_0: entered promiscuous mode [ 97.111612][ T5837] hsr_slave_1: entered promiscuous mode [ 97.125777][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.125791][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.125818][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.127151][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.127165][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.127192][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.264817][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.264831][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.264848][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.266732][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.266745][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.266769][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.292469][ T5154] Bluetooth: hci4: command tx timeout [ 97.297158][ T5850] hsr_slave_0: entered promiscuous mode [ 97.298527][ T5850] hsr_slave_1: entered promiscuous mode [ 97.299610][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 97.299729][ T5850] Cannot create hsr debugfs directory [ 97.313431][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.313446][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.313478][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.372424][ T5154] Bluetooth: hci1: command tx timeout [ 97.452280][ T5154] Bluetooth: hci3: command tx timeout [ 97.452308][ T5154] Bluetooth: hci0: command tx timeout [ 97.453381][ T5855] Bluetooth: hci2: command tx timeout [ 98.070221][ T5836] hsr_slave_0: entered promiscuous mode [ 98.071254][ T5836] hsr_slave_1: entered promiscuous mode [ 98.072950][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 98.072975][ T5836] Cannot create hsr debugfs directory [ 98.310408][ T5835] hsr_slave_0: entered promiscuous mode [ 98.311433][ T5835] hsr_slave_1: entered promiscuous mode [ 98.313014][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 98.313042][ T5835] Cannot create hsr debugfs directory [ 98.348635][ T5838] hsr_slave_0: entered promiscuous mode [ 98.350054][ T5838] hsr_slave_1: entered promiscuous mode [ 98.350929][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 98.350961][ T5838] Cannot create hsr debugfs directory [ 99.372342][ T5855] Bluetooth: hci4: command tx timeout [ 99.452080][ T5855] Bluetooth: hci1: command tx timeout [ 99.532283][ T5855] Bluetooth: hci2: command tx timeout [ 99.532316][ T5855] Bluetooth: hci0: command tx timeout [ 99.532337][ T5855] Bluetooth: hci3: command tx timeout [ 99.804444][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.832891][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.881321][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.908694][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.008297][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.054351][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.100640][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.159307][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.273872][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.317312][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.366171][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.418720][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.584240][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.649853][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.697768][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.749534][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.937584][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.977845][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.011063][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.031523][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.076304][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.179447][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.239487][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.242753][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.242958][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.292799][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.292943][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.381048][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.415180][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.440345][ T1546] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.440965][ T1546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.488958][ T1923] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.489091][ T1923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.551089][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.595559][ T1546] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.595712][ T1546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.619171][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.660892][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.661088][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.766686][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.772783][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.827170][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.827325][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.889035][ T1923] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.889187][ T1923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.994729][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.094105][ T1923] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.094276][ T1923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.163261][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.163406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.219151][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.438886][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.662338][ T5837] veth0_vlan: entered promiscuous mode [ 102.698563][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.735461][ T5837] veth1_vlan: entered promiscuous mode [ 102.809984][ T5850] veth0_vlan: entered promiscuous mode [ 102.886032][ T5850] veth1_vlan: entered promiscuous mode [ 102.961797][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.005066][ T5837] veth0_macvtap: entered promiscuous mode [ 103.055072][ T5836] veth0_vlan: entered promiscuous mode [ 103.056963][ T5837] veth1_macvtap: entered promiscuous mode [ 103.121234][ T5850] veth0_macvtap: entered promiscuous mode [ 103.136439][ T5836] veth1_vlan: entered promiscuous mode [ 103.159996][ T5850] veth1_macvtap: entered promiscuous mode [ 103.199960][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.210646][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.250156][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.280256][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.280425][ T5835] veth0_vlan: entered promiscuous mode [ 103.326797][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.344365][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.358519][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.358630][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.385172][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.485481][ T5835] veth1_vlan: entered promiscuous mode [ 103.506206][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.530477][ T5836] veth0_macvtap: entered promiscuous mode [ 103.540968][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.554407][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.609394][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.633670][ T5836] veth1_macvtap: entered promiscuous mode [ 103.989913][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.006316][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.006338][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.072637][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.122542][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.122563][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.149543][ T5835] veth0_macvtap: entered promiscuous mode [ 104.201783][ T3612] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.228967][ T3612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.242343][ T5835] veth1_macvtap: entered promiscuous mode [ 104.259177][ T3612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.260189][ T1546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.260208][ T1546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.315572][ T3612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.402250][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.402271][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.508731][ T5838] veth0_vlan: entered promiscuous mode [ 104.595197][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.657695][ T5838] veth1_vlan: entered promiscuous mode [ 104.688587][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.847392][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.851619][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.860071][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.860245][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.860261][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.867416][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.793426][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 105.793956][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 105.794037][ T5962] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3'. [ 106.260991][ T1923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.261011][ T1923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.428584][ T5838] veth0_macvtap: entered promiscuous mode [ 106.513165][ T5838] veth1_macvtap: entered promiscuous mode [ 106.603630][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.603650][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.688929][ T5848] block nbd2: Receive control failed (result -32) [ 107.385221][ T5971] block nbd2: shutting down sockets [ 107.556294][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.664758][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.664778][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.691276][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.802546][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.802594][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.802640][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.802693][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.951949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.075363][ T5995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12'. [ 109.112309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.113038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.114445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.437813][ T5993] Zero length message leads to an empty skb [ 109.983485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.023103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.023275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.043541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.043727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.447618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.566418][ T5991] netlink: 165 bytes leftover after parsing attributes in process `syz.2.10'. [ 110.592168][ T5991] netlink: 277 bytes leftover after parsing attributes in process `syz.2.10'. [ 110.719227][ T1546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.719247][ T1546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.777270][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.909249][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.909266][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.664773][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 112.664797][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 112.664811][ T6005] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15'. [ 113.205021][ T6010] comedi: valid board names for 8255 driver are: [ 113.205038][ T6010] 8255 [ 113.205045][ T6010] comedi: valid board names for vmk80xx driver are: [ 113.205054][ T6010] vmk80xx [ 113.205061][ T6010] comedi: valid board names for usbduxsigma driver are: [ 113.205069][ T6010] usbduxsigma [ 113.205076][ T6010] comedi: valid board names for usbduxfast driver are: [ 113.205085][ T6010] usbduxfast [ 113.205091][ T6010] comedi: valid board names for usbdux driver are: [ 113.205100][ T6010] usbdux [ 113.205106][ T6010] comedi: valid board names for ni6501 driver are: [ 113.205115][ T6010] ni6501 [ 113.205121][ T6010] comedi: valid board names for dt9812 driver are: [ 113.205130][ T6010] dt9812 [ 113.205136][ T6010] comedi: valid board names for ni_labpc_cs driver are: [ 113.205144][ T6010] ni_labpc_cs [ 113.205151][ T6010] comedi: valid board names for ni_daq_700 driver are: [ 113.205160][ T6010] ni_daq_700 [ 113.205167][ T6010] comedi: valid board names for labpc_pci driver are: [ 113.205175][ T6010] labpc_pci [ 113.205181][ T6010] comedi: valid board names for adl_pci9118 driver are: [ 113.205190][ T6010] pci9118dg [ 113.205196][ T6010] pci9118hg [ 113.205202][ T6010] pci9118hr [ 113.205209][ T6010] comedi: valid board names for 8255_pci driver are: [ 113.205217][ T6010] 8255_pci [ 113.205224][ T6010] comedi: valid board names for s526 driver are: [ 113.205233][ T6010] s526 [ 113.205239][ T6010] comedi: valid board names for multiq3 driver are: [ 113.205247][ T6010] multiq3 [ 113.205253][ T6010] comedi: valid board names for pcmuio driver are: [ 113.205262][ T6010] pcmuio48 [ 113.205268][ T6010] pcmuio96 [ 113.205273][ T6010] comedi: valid board names for pcmmio driver are: [ 113.205282][ T6010] pcmmio [ 113.205287][ T6010] comedi: valid board names for pcmda12 driver are: [ 113.205295][ T6010] pcmda12 [ 113.205301][ T6010] comedi: valid board names for pcmad driver are: [ 113.205309][ T6010] pcmad12 [ 113.205315][ T6010] pcmad16 [ 113.205320][ T6010] comedi: valid board names for ni_labpc driver are: [ 113.205328][ T6010] lab-pc-1200 [ 113.205334][ T6010] lab-pc-1200ai [ 113.205340][ T6010] lab-pc+ [ 113.205346][ T6010] comedi: valid board names for atmio16 driver are: [ 113.205354][ T6010] atmio16 [ 113.205360][ T6010] atmio16d [ 113.205366][ T6010] comedi: valid board names for ni_at_ao driver are: [ 113.205375][ T6010] at-ao-6 [ 113.205381][ T6010] at-ao-10 [ 113.205386][ T6010] comedi: valid board names for ni_at_a2150 driver are: [ 113.205394][ T6010] ni_at_a2150 [ 113.205401][ T6010] comedi: valid board names for adq12b driver are: [ 113.205409][ T6010] adq12b [ 113.205414][ T6010] comedi: valid board names for mpc624 driver are: [ 113.205423][ T6010] mpc624 [ 113.205429][ T6010] comedi: valid board names for c6xdigio driver are: [ 113.205437][ T6010] c6xdigio [ 113.205443][ T6010] comedi: valid board names for aio_iiro_16 driver are: [ 113.205451][ T6010] aio_iiro_16 [ 113.205457][ T6010] comedi: valid board names for aio_aio12_8 driver are: [ 113.205465][ T6010] aio_aio12_8 [ 113.205471][ T6010] aio_ai12_8 [ 113.205478][ T6010] aio_ao12_4 [ 113.205483][ T6010] comedi: valid board names for fl512 driver are: [ 113.205491][ T6010] fl512 [ 113.205497][ T6010] comedi: valid board names for dmm32at driver are: [ 113.205505][ T6010] dmm32at [ 113.205511][ T6010] comedi: valid board names for dt282x driver are: [ 113.205519][ T6010] dt2821 [ 113.205525][ T6010] dt2821-f [ 113.205530][ T6010] dt2821-g [ 113.205536][ T6010] dt2823 [ 113.205541][ T6010] dt2824-pgh [ 113.205547][ T6010] dt2824-pgl [ 113.205552][ T6010] dt2825 [ 113.205558][ T6010] dt2827 [ 113.205563][ T6010] dt2828 [ 113.205569][ T6010] dt2829 [ 113.205574][ T6010] dt21-ez [ 113.205580][ T6010] dt23-ez [ 113.205586][ T6010] dt24-ez [ 113.205591][ T6010] dt24-ez-pgl [ 113.205597][ T6010] comedi: valid board names for dt2817 driver are: [ 113.205606][ T6010] dt2817 [ 113.205611][ T6010] comedi: valid board names for dt2815 driver are: [ 113.205619][ T6010] dt2815 [ 113.205625][ T6010] comedi: valid board names for dt2814 driver are: [ 113.205633][ T6010] dt2814 [ 113.205638][ T6010] comedi: valid board names for dt2811 driver are: [ 113.205646][ T6010] dt2811-pgh [ 113.205652][ T6010] dt2811-pgl [ 113.205658][ T6010] comedi: valid board names for dt2801 driver are: [ 113.205666][ T6010] dt2801 [ 113.205672][ T6010] comedi: valid board names for das6402 driver are: [ 113.205681][ T6010] das6402-12 [ 113.205687][ T6010] das6402-16 [ 113.205693][ T6010] comedi: valid board names for das1800 driver are: [ 113.205701][ T6010] das-1701st [ 113.205708][ T6010] das-1701st-da [ 113.205714][ T6010] das-1702st [ 113.205721][ T6010] das-1702st-da [ 113.205727][ T6010] das-1702hr [ 113.205732][ T6010] das-1702hr-da [ 113.205738][ T6010] das-1701ao [ 113.205744][ T6010] das-1702ao [ 113.205750][ T6010] das-1801st [ 113.205756][ T6010] das-1801st-da [ 113.205762][ T6010] das-1802st [ 113.205768][ T6010] das-1802st-da [ 113.205774][ T6010] das-1802hr [ 113.205780][ T6010] das-1802hr-da [ 113.205786][ T6010] das-1801hc [ 113.205792][ T6010] das-1802hc [ 113.205797][ T6010] das-1801ao [ 113.205813][ T6010] das-1802ao [ 113.205819][ T6010] comedi: valid board names for das800 driver are: [ 113.205828][ T6010] das-800 [ 113.205834][ T6010] cio-das800 [ 113.205840][ T6010] das-801 [ 113.205846][ T6010] cio-das801 [ 113.205852][ T6010] das-802 [ 113.205858][ T6010] cio-das802 [ 113.205864][ T6010] cio-das802/16 [ 113.205870][ T6010] comedi: valid board names for isa-das08 driver are: [ 113.205878][ T6010] isa-das08 [ 113.205884][ T6010] das08-pgm [ 113.205891][ T6010] das08-pgh [ 113.205897][ T6010] das08-pgl [ 113.205903][ T6010] das08-aoh [ 113.205908][ T6010] das08-aol [ 113.205914][ T6010] das08-aom [ 113.205920][ T6010] das08/jr-ao [ 113.205926][ T6010] das08jr-16-ao [ 113.205932][ T6010] pc104-das08 [ 113.205938][ T6010] das08jr/16 [ 113.205944][ T6010] comedi: valid board names for das16m1 driver are: [ 113.205952][ T6010] das16m1 [ 113.205958][ T6010] comedi: valid board names for dac02 driver are: [ 113.205966][ T6010] dac02 [ 113.205972][ T6010] comedi: valid board names for rti802 driver are: [ 113.205980][ T6010] rti802 [ 113.205987][ T6010] comedi: valid board names for rti800 driver are: [ 113.205995][ T6010] rti800 [ 113.206001][ T6010] rti815 [ 113.206007][ T6010] comedi: valid board names for pcm3724 driver are: [ 113.206016][ T6010] pcm3724 [ 113.206022][ T6010] comedi: valid board names for pcl818 driver are: [ 113.206030][ T6010] pcl818l [ 113.206036][ T6010] pcl818h [ 113.206042][ T6010] pcl818hd [ 113.206047][ T6010] pcl818hg [ 113.206054][ T6010] pcl818 [ 113.206061][ T6010] pcl718 [ 113.206067][ T6010] pcm3718 [ 113.206074][ T6010] comedi: valid board names for pcl816 driver are: [ 113.206082][ T6010] pcl816 [ 113.206088][ T6010] pcl814b [ 113.206095][ T6010] comedi: valid board names for pcl812 driver are: [ 113.206103][ T6010] pcl812 [ 113.206109][ T6010] pcl812pg [ 113.206115][ T6010] acl8112pg [ 113.206121][ T6010] acl8112dg [ 113.206127][ T6010] acl8112hg [ 113.206133][ T6010] a821pgl [ 113.206139][ T6010] a821pglnda [ 113.206145][ T6010] a821pgh [ 113.206151][ T6010] a822pgl [ 113.206157][ T6010] a822pgh [ 113.206163][ T6010] a823pgl [ 113.206169][ T6010] a823pgh [ 113.206175][ T6010] pcl813 [ 113.206180][ T6010] pcl813b [ 113.206186][ T6010] acl8113 [ 113.206192][ T6010] iso813 [ 113.206198][ T6010] acl8216 [ 113.206203][ T6010] a826pg [ 113.206209][ T6010] comedi: valid board names for pcl730 driver are: [ 113.206217][ T6010] pcl730 [ 113.206224][ T6010] iso730 [ 113.206230][ T6010] acl7130 [ 113.206236][ T6010] pcm3730 [ 113.206242][ T6010] pcl725 [ 113.206247][ T6010] p8r8dio [ 113.206253][ T6010] acl7225b [ 113.206259][ T6010] p16r16dio [ 113.206265][ T6010] pcl733 [ 113.206271][ T6010] pcl734 [ 113.206276][ T6010] opmm-1616-xt [ 113.206283][ T6010] pearl-mm-p [ 113.206288][ T6010] ir104-pbf [ 113.206294][ T6010] comedi: valid board names for pcl726 driver are: [ 113.206303][ T6010] pcl726 [ 113.206309][ T6010] pcl727 [ 113.206315][ T6010] pcl728 [ 113.206321][ T6010] acl6126 [ 113.206327][ T6010] acl6128 [ 113.206333][ T6010] comedi: valid board names for pcl724 driver are: [ 113.206341][ T6010] pcl724 [ 113.206347][ T6010] pcl722 [ 113.206353][ T6010] pcl731 [ 113.206359][ T6010] acl7122 [ 113.206365][ T6010] acl7124 [ 113.206371][ T6010] pet48dio [ 113.206377][ T6010] pcmio48 [ 113.206383][ T6010] onyx-mm-dio [ 113.206389][ T6010] comedi: valid board names for pcl711 driver are: [ 113.206397][ T6010] pcl711 [ 113.206403][ T6010] pcl711b [ 113.206409][ T6010] acl8112hg [ 113.206415][ T6010] acl8112dg [ 113.206422][ T6010] comedi: valid board names for amplc_pc263 driver are: [ 113.206430][ T6010] pc263 [ 113.206436][ T6010] comedi: valid board names for amplc_pc236 driver are: [ 113.206445][ T6010] pc36at [ 113.206451][ T6010] comedi: valid board names for amplc_dio200 driver are: [ 113.206459][ T6010] pc212e [ 113.206465][ T6010] pc214e [ 113.206471][ T6010] pc215e [ 113.206477][ T6010] pc218e [ 113.206483][ T6010] pc272e [ 113.206489][ T6010] comedi: valid board names for comedi_parport driver are: [ 113.206498][ T6010] comedi_parport [ 113.206505][ T6010] comedi: valid board names for comedi_test driver are: [ 113.206513][ T6010] comedi_test [ 113.206520][ T6010] comedi: valid board names for comedi_bond driver are: [ 113.206528][ T6010] comedi_bond [ 113.442772][ T3612] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.447001][ T3612] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.457288][ T3612] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.458013][ T3612] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.702218][ T6028] syz.0.20 (6028) used greatest stack depth: 18104 bytes left [ 117.779602][ T6072] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.192933][ T6080] binder: 6078:6080 ioctl c0306201 200000000080 returned -14 [ 118.559050][ T6083] vlan2: entered promiscuous mode [ 118.559234][ T6083] vlan2: entered allmulticast mode [ 118.559243][ T6083] hsr_slave_1: entered allmulticast mode [ 118.610342][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 121.114310][ T6117] netlink: 3 bytes leftover after parsing attributes in process `syz.2.41'. [ 121.695765][ T6118] input: syz0 as /devices/virtual/input/input5 [ 123.100887][ T6117] batadv1: entered allmulticast mode [ 126.194636][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 126.237220][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.893202][ T1198] Process accounting resumed [ 128.146985][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.358639][ T6196] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 129.207929][ T6211] binder: BINDER_SET_CONTEXT_MGR already set [ 129.207944][ T6211] binder: 6210:6211 ioctl 4018620d 200000004a80 returned -16 [ 132.013094][ T1246] Process accounting resumed [ 132.654490][ T6259] binder: BINDER_SET_CONTEXT_MGR already set [ 132.654504][ T6259] binder: 6228:6259 ioctl 4018620d 200000004a80 returned -16 [ 132.654924][ T6259] binder: 6228:6259 ioctl c0306201 0 returned -14 [ 133.274644][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 135.098749][ T6275] input: syz1 as /devices/virtual/input/input6 [ 135.897755][ T6279] syz_tun: entered allmulticast mode [ 135.903622][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 136.113699][ T6278] syz_tun (unregistering): left allmulticast mode [ 136.307382][ T6283] mkiss: ax0: crc mode is auto. [ 136.416922][ T6283] bond0: entered promiscuous mode [ 136.416944][ T6283] bond_slave_0: entered promiscuous mode [ 136.417183][ T6283] bond_slave_1: entered promiscuous mode [ 136.444598][ T6283] bond0: left promiscuous mode [ 136.444617][ T6283] bond_slave_0: left promiscuous mode [ 136.446634][ T6283] bond_slave_1: left promiscuous mode [ 136.582234][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.786373][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.786430][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.817332][ T5925] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 136.817361][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.817381][ T5925] usb 4-1: Product: syz [ 136.817396][ T5925] usb 4-1: Manufacturer: syz [ 136.817411][ T5925] usb 4-1: SerialNumber: syz [ 137.852174][ T5925] usb 4-1: config 0 descriptor?? [ 138.022822][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.022943][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.160008][ T5925] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 138.200169][ T5925] usb 4-1: USB disconnect, device number 2 [ 138.308500][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.382406][ T6308] tipc: Started in network mode [ 138.382428][ T6308] tipc: Node identity , cluster identity 4711 [ 138.382443][ T6308] tipc: Failed to obtain node identity [ 138.382476][ T6308] tipc: Enabling of bearer rejected, failed to enable media [ 138.502267][ T6306] syzkaller0: entered promiscuous mode [ 138.502297][ T6306] syzkaller0: entered allmulticast mode [ 139.121681][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 140.245110][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 142.138886][ T6356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.92'. [ 157.759897][ T6415] tipc: Started in network mode [ 157.759920][ T6415] tipc: Node identity c6c1c7a0386f, cluster identity 4711 [ 157.784032][ T6415] tipc: Enabled bearer , priority 0 [ 157.974011][ T6415] tipc: Resetting bearer [ 158.440762][ T6414] tipc: Disabling bearer [ 159.184619][ T6429] 9pnet_virtio: no channels available for device syz [ 159.223478][ T6424] netlink: 'syz.1.109': attribute type 5 has an invalid length. [ 164.361121][ T6459] IPVS: Error joining to the multicast group [ 164.404080][ T6459] ======================================================= [ 164.404080][ T6459] WARNING: The mand mount option has been deprecated and [ 164.404080][ T6459] and is ignored by this kernel. Remove the mand [ 164.404080][ T6459] option from the mount to silence this warning. [ 164.404080][ T6459] ======================================================= [ 164.404173][ T6459] fuse: Unknown parameter '00000000000000000004' [ 165.221435][ T6467] dvmrp1: entered allmulticast mode [ 165.241324][ T6468] overlayfs: overlapping lowerdir path [ 166.515378][ C1] ------------[ cut here ]------------ [ 166.515405][ C1] WARNING: CPU: 1 PID: 29 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 166.515458][ C1] Modules linked in: [ 166.515509][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.515537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.515557][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 166.515583][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 166.515604][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 166.515624][ C1] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801c6b1dc0 [ 166.515642][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 166.515657][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 166.515672][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000001 [ 166.515689][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888028c49068 [ 166.515705][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 166.515724][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.515740][ C1] CR2: 00007fd07b5a9e39 CR3: 00000000322d6000 CR4: 00000000003526f0 [ 166.515761][ C1] Call Trace: [ 166.515770][ C1] [ 166.515799][ C1] ? __pfx_est_timer+0x10/0x10 [ 166.515838][ C1] call_timer_fn+0x17b/0x5f0 [ 166.515870][ C1] ? __pfx_est_timer+0x10/0x10 [ 166.515893][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 166.515920][ C1] ? call_timer_fn+0xbe/0x5f0 [ 166.515951][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 166.515992][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 166.516026][ C1] ? __pfx_est_timer+0x10/0x10 [ 166.516054][ C1] __run_timer_base+0x648/0x970 [ 166.516087][ C1] ? rcu_is_watching+0x15/0xb0 [ 166.516143][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 166.516195][ C1] run_timer_softirq+0xb7/0x180 [ 166.516225][ C1] handle_softirqs+0x22c/0x710 [ 166.516269][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 166.516314][ C1] run_ktimerd+0xcf/0x190 [ 166.516346][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 166.516377][ C1] ? schedule+0x91/0x360 [ 166.516415][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 166.516444][ C1] smpboot_thread_fn+0x542/0xa60 [ 166.516476][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 166.516513][ C1] kthread+0x711/0x8a0 [ 166.516554][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 166.516583][ C1] ? __pfx_kthread+0x10/0x10 [ 166.516626][ C1] ? __pfx_kthread+0x10/0x10 [ 166.516664][ C1] ret_from_fork+0x3fc/0x770 [ 166.516699][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 166.516739][ C1] ? __switch_to_asm+0x39/0x70 [ 166.516760][ C1] ? __switch_to_asm+0x33/0x70 [ 166.516781][ C1] ? __pfx_kthread+0x10/0x10 [ 166.516818][ C1] ret_from_fork_asm+0x1a/0x30 [ 166.516864][ C1] [ 166.516875][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.516892][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.516919][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.516932][ C1] Call Trace: [ 166.516941][ C1] [ 166.516950][ C1] dump_stack_lvl+0x99/0x250 [ 166.516985][ C1] ? __asan_memcpy+0x40/0x70 [ 166.517011][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.517046][ C1] ? __pfx__printk+0x10/0x10 [ 166.517097][ C1] vpanic+0x281/0x750 [ 166.517132][ C1] ? __pfx__printk+0x10/0x10 [ 166.517158][ C1] ? __pfx_vpanic+0x10/0x10 [ 166.517193][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 166.517241][ C1] panic+0xb9/0xc0 [ 166.517274][ C1] ? __pfx_panic+0x10/0x10 [ 166.517329][ C1] __warn+0x31b/0x4b0 [ 166.517361][ C1] ? est_timer+0x6dc/0x9f0 [ 166.517389][ C1] ? est_timer+0x6dc/0x9f0 [ 166.517414][ C1] report_bug+0x2be/0x4f0 [ 166.517443][ C1] ? est_timer+0x6dc/0x9f0 [ 166.517469][ C1] ? est_timer+0x6dc/0x9f0 [ 166.517493][ C1] ? est_timer+0x6de/0x9f0 [ 166.517518][ C1] handle_bug+0x84/0x160 [ 166.517554][ C1] exc_invalid_op+0x1a/0x50 [ 166.517589][ C1] asm_exc_invalid_op+0x1a/0x20 [ 166.517611][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 166.517636][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 166.517656][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 166.517675][ C1] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801c6b1dc0 [ 166.517693][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 166.517707][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 166.517723][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000001 [ 166.517740][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888028c49068 [ 166.517766][ C1] ? est_timer+0x6db/0x9f0 [ 166.517818][ C1] ? __pfx_est_timer+0x10/0x10 [ 166.517859][ C1] call_timer_fn+0x17b/0x5f0 [ 166.517889][ C1] ? __pfx_est_timer+0x10/0x10 [ 166.517912][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 166.517939][ C1] ? call_timer_fn+0xbe/0x5f0 [ 166.517969][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 166.518011][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 166.518044][ C1] ? __pfx_est_timer+0x10/0x10 [ 166.518072][ C1] __run_timer_base+0x648/0x970 [ 166.518104][ C1] ? rcu_is_watching+0x15/0xb0 [ 166.518160][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 166.518211][ C1] run_timer_softirq+0xb7/0x180 [ 166.518241][ C1] handle_softirqs+0x22c/0x710 [ 166.518284][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 166.518329][ C1] run_ktimerd+0xcf/0x190 [ 166.518362][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 166.518392][ C1] ? schedule+0x91/0x360 [ 166.518430][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 166.518458][ C1] smpboot_thread_fn+0x542/0xa60 [ 166.518490][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 166.518532][ C1] kthread+0x711/0x8a0 [ 166.518572][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 166.518602][ C1] ? __pfx_kthread+0x10/0x10 [ 166.518645][ C1] ? __pfx_kthread+0x10/0x10 [ 166.518683][ C1] ret_from_fork+0x3fc/0x770 [ 166.518717][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 166.518756][ C1] ? __switch_to_asm+0x39/0x70 [ 166.518778][ C1] ? __switch_to_asm+0x33/0x70 [ 166.518799][ C1] ? __pfx_kthread+0x10/0x10 [ 166.518836][ C1] ret_from_fork_asm+0x1a/0x30 [ 166.518881][ C1] [ 166.519205][ C1] Kernel Offset: disabled