last executing test programs: 22.908191674s ago: executing program 1 (id=75): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) 20.613626325s ago: executing program 2 (id=78): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r10, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000000}) 20.255696502s ago: executing program 1 (id=79): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xfdff) 19.175914656s ago: executing program 4 (id=81): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x0, 0xfffffbffffffffff}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x4}}) syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00') 16.774758613s ago: executing program 2 (id=82): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1}, 0x2) 16.551034133s ago: executing program 4 (id=83): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xfdff) 16.549864199s ago: executing program 1 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getegid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b65b0ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 16.280231487s ago: executing program 3 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0xeb) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16.139638891s ago: executing program 2 (id=87): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), &(0x7f0000000200)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000001780), &(0x7f00000017c0)=0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) stat(0x0, &(0x7f0000000540)) r6 = socket$netlink(0x10, 0x3, 0x14) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000240)={&(0x7f00004f3000/0x1000)=nil, &(0x7f0000afb000/0x4000)=nil, 0x1000, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) 15.143333352s ago: executing program 0 (id=88): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 14.939605956s ago: executing program 1 (id=89): io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 14.897687416s ago: executing program 3 (id=90): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/75, 0x4b}, {&(0x7f0000000900)=""/80, 0x50}, {&(0x7f0000000980)=""/86, 0x56}], 0x3, 0x5, 0x5) listen(r6, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)="ea8b1cb74879009e4b954b46ff711d8343bd92be97b4d9b4d10f515c66744ec630e9270667aaca332927132163042160f1fe9550a640e7c8e453c1a95ecacbae8946ebc797be958157f344af36c0abb6d7f4474065d783f276998ab7e875392d8d1559accb62701f77fd", 0x6a}, {0x0}, {&(0x7f0000000580)="9b2edf758b39a7c87d1d7473e6a745c766759f711d4078690d328212ff8961d68f82d9f3fa2dce355db0831fabb9cc6f6e60b18c31ecc0f1cdb08c4876044f95575379d29c456b362d865e0a6151da3b3cbcf1c691d565a10d7823fe4dfeb4a6305de6a9", 0x64}, {&(0x7f0000000600)="e05dde45f184e5303fbaa2ef38ab0e4ded2a0dfa3bac07703161a7c5d30948a655c6992ffc4ae21131cfbefcbeab6e474974960d39ebe4bdfd3d7d7cc4de7862ec82b46eaf848ee97dacea7cf1ea3a8a49af5fe74b8d2d07edd9f080e115c17da20f0bbabaadda52d6f5b83101b75f831cafc528345df6199256571c09d9a72e44709c9fe49488ebd5da590a56fe7abec780cad7d95d482aea6a1c313f7cdfeb9eb1943caa2889fbeaf3ec59e6e76947dae0da8dc682f0fc668e7158ba296a01", 0xc0}, {&(0x7f00000006c0)="7937ab803520e9f0df90ef878c0395ceb588448db9b51bf5cc755f9777b17e49fe49e3f62ce6e1b66c116aeab93ffb506010f91de7275501a8faa4ed14ffcc94cc470730c3e2d3", 0x47}, {&(0x7f0000000740)="699f25cb96b87044f1bdef2b94f77597fe8e061ca46f83c61186c702b2ec8f4b791680ebed3fd708f3660403a7bd60886e0e16934dc1b1f9dcc1066682416272fc55377eeea72c26e4d3b2f26fd0d600e6ec82c86fda1d9f6b125c73a88e955e11bc6d7d8e544bdee1ac256e85d401cd80a30bdd7d2961c744d19fc8522c95ea6564e7e115f8f89a957eb67c844dc0590ee54d357ec15a4f79dd", 0x9a}], 0x6, &(0x7f0000001940)}, 0x4084024) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24, 0xfffffffc}, 0x9c) 13.785568508s ago: executing program 4 (id=91): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 12.334594842s ago: executing program 2 (id=92): mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x20) 9.534929381s ago: executing program 0 (id=93): io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 9.365616565s ago: executing program 4 (id=94): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0x9, 0x1, '?'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.339524523s ago: executing program 2 (id=95): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x0, 0xfffffbffffffffff}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00') 9.105709836s ago: executing program 3 (id=96): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff5, @empty, 0x2}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb000000000000"], 0xfc}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040880) 8.002999187s ago: executing program 0 (id=97): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1}, 0x2) 7.880839664s ago: executing program 3 (id=98): socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 7.420246791s ago: executing program 3 (id=99): r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) fsmount(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308", @ANYRES8=r3, @ANYRES16=r1, @ANYRESDEC=r0], 0x0) 7.243999791s ago: executing program 0 (id=100): io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 7.170215793s ago: executing program 1 (id=101): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)="bf5bf7", 0x3}], 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="eeffffff0000e3ffc497000007000000ee2e33a8939d82646de5b9a17f82e8a186478c92e62f9d06969bc3f970a4f6c30eae64722dd913ea1df384e80ec68003907230a7abebbc44807993b201822af72d13d3"], 0x10}}], 0x1, 0x4008040) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.852982204s ago: executing program 2 (id=102): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020}, 0xffe7) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fanotify_init(0xf00, 0x0) 5.706749464s ago: executing program 0 (id=103): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010102, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x28f, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 4.213533676s ago: executing program 1 (id=104): r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) fsmount(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r3, @ANYRES16=r1, @ANYRESDEC=r0], 0x0) 4.186780584s ago: executing program 4 (id=105): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010102, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x28f, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 2.908570603s ago: executing program 3 (id=106): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010102, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x28f, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 2.669140751s ago: executing program 0 (id=107): io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 0s ago: executing program 4 (id=108): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff5, @empty, 0x2}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb000000000000"], 0xfc}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040880) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 80.086005][ T5788] cgroup: Unknown subsys name 'net' [ 80.327925][ T5788] cgroup: Unknown subsys name 'cpuset' [ 80.402582][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.254486][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.998450][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.004346][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.011452][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.016058][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.017208][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.018833][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.019654][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.073243][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.074504][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.075324][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.090486][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.105573][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.106358][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.111304][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.115605][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.191222][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.200844][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.210738][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.219428][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.226853][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.228509][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.229219][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.230519][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.231451][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.265623][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.928718][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 86.027399][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 86.138164][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 86.536565][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 86.646351][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.647843][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.648193][ T5801] bridge_slave_0: entered allmulticast mode [ 86.649938][ T5801] bridge_slave_0: entered promiscuous mode [ 86.743049][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 86.768338][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.768411][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.768517][ T5801] bridge_slave_1: entered allmulticast mode [ 86.770011][ T5801] bridge_slave_1: entered promiscuous mode [ 86.979961][ T994] cfg80211: failed to load regulatory.db [ 87.054635][ T5120] Bluetooth: hci2: command tx timeout [ 87.056173][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.056249][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.056373][ T5799] bridge_slave_0: entered allmulticast mode [ 87.057908][ T5799] bridge_slave_0: entered promiscuous mode [ 87.132205][ T5120] Bluetooth: hci0: command tx timeout [ 87.212460][ T5120] Bluetooth: hci1: command tx timeout [ 87.215899][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.216050][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.216230][ T5799] bridge_slave_1: entered allmulticast mode [ 87.218989][ T5799] bridge_slave_1: entered promiscuous mode [ 87.292171][ T5120] Bluetooth: hci4: command tx timeout [ 87.342999][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.343148][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.345280][ T5800] bridge_slave_0: entered allmulticast mode [ 87.346776][ T5800] bridge_slave_0: entered promiscuous mode [ 87.369288][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.381994][ T5120] Bluetooth: hci3: command tx timeout [ 87.479877][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.479987][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.480099][ T5800] bridge_slave_1: entered allmulticast mode [ 87.481569][ T5800] bridge_slave_1: entered promiscuous mode [ 87.507116][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.765939][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.985335][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.065821][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.067821][ T5801] team0: Port device team_slave_0 added [ 88.068324][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.068520][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.068698][ T5803] bridge_slave_0: entered allmulticast mode [ 88.070439][ T5803] bridge_slave_0: entered promiscuous mode [ 88.207720][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.209356][ T5801] team0: Port device team_slave_1 added [ 88.209786][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.209892][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.209995][ T5803] bridge_slave_1: entered allmulticast mode [ 88.211558][ T5803] bridge_slave_1: entered promiscuous mode [ 88.633094][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.633217][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.633448][ T5802] bridge_slave_0: entered allmulticast mode [ 88.635269][ T5802] bridge_slave_0: entered promiscuous mode [ 88.834304][ T5799] team0: Port device team_slave_0 added [ 88.834781][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.834941][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.835112][ T5802] bridge_slave_1: entered allmulticast mode [ 88.837075][ T5802] bridge_slave_1: entered promiscuous mode [ 89.035532][ T5799] team0: Port device team_slave_1 added [ 89.115573][ T5800] team0: Port device team_slave_0 added [ 89.117035][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.117046][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.117060][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.121693][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.132067][ T5120] Bluetooth: hci2: command tx timeout [ 89.212126][ T5120] Bluetooth: hci0: command tx timeout [ 89.292205][ T5120] Bluetooth: hci1: command tx timeout [ 89.294950][ T5800] team0: Port device team_slave_1 added [ 89.295805][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.295818][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.295832][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.298450][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.372507][ T5120] Bluetooth: hci4: command tx timeout [ 89.452190][ T5120] Bluetooth: hci3: command tx timeout [ 89.546010][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.683363][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.683378][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.683392][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.687006][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.854517][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.854533][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.854556][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.933366][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.933379][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.933393][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.936519][ T5803] team0: Port device team_slave_0 added [ 90.013710][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.013726][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.013749][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.094575][ T5803] team0: Port device team_slave_1 added [ 90.097558][ T5802] team0: Port device team_slave_0 added [ 90.235400][ T5802] team0: Port device team_slave_1 added [ 90.243096][ T5801] hsr_slave_0: entered promiscuous mode [ 90.245229][ T5801] hsr_slave_1: entered promiscuous mode [ 90.485352][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.485373][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.485386][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.844777][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.844790][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.844806][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.851778][ T5799] hsr_slave_0: entered promiscuous mode [ 90.855528][ T5799] hsr_slave_1: entered promiscuous mode [ 90.856671][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 90.856799][ T5799] Cannot create hsr debugfs directory [ 90.859400][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.859414][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.859436][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.068955][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.068974][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.068998][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.078708][ T5800] hsr_slave_0: entered promiscuous mode [ 91.080116][ T5800] hsr_slave_1: entered promiscuous mode [ 91.081115][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 91.081140][ T5800] Cannot create hsr debugfs directory [ 91.213848][ T5120] Bluetooth: hci2: command tx timeout [ 91.292164][ T5120] Bluetooth: hci0: command tx timeout [ 91.372342][ T5120] Bluetooth: hci1: command tx timeout [ 91.453604][ T5120] Bluetooth: hci4: command tx timeout [ 91.532761][ T5120] Bluetooth: hci3: command tx timeout [ 91.735956][ T5803] hsr_slave_0: entered promiscuous mode [ 91.736829][ T5803] hsr_slave_1: entered promiscuous mode [ 91.737466][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 91.737491][ T5803] Cannot create hsr debugfs directory [ 92.058271][ T5802] hsr_slave_0: entered promiscuous mode [ 92.059319][ T5802] hsr_slave_1: entered promiscuous mode [ 92.059886][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 92.059905][ T5802] Cannot create hsr debugfs directory [ 93.129036][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.160858][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.195881][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.251066][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.292243][ T5120] Bluetooth: hci2: command tx timeout [ 93.369128][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.379539][ T5120] Bluetooth: hci0: command tx timeout [ 93.410567][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.450004][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.452290][ T5120] Bluetooth: hci1: command tx timeout [ 93.501365][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.534565][ T5120] Bluetooth: hci4: command tx timeout [ 93.623742][ T5120] Bluetooth: hci3: command tx timeout [ 93.626066][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.672388][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.708686][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.745048][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.880826][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.927142][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.971500][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.022882][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.100733][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.165058][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.208149][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.245381][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.300435][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.349489][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.391358][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.394817][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.429780][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.429914][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.466992][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.550678][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.577797][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.616024][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.616171][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.650071][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.650213][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.699994][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.736591][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.776696][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.777857][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.837557][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.837794][ T4544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.877632][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.920808][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.938274][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.938465][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.973167][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.973298][ T4544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.040356][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.091503][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.091714][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.128799][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.128935][ T4544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.148967][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.466168][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.481766][ T5801] veth0_vlan: entered promiscuous mode [ 95.531310][ T5801] veth1_vlan: entered promiscuous mode [ 95.629912][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.789633][ T5799] veth0_vlan: entered promiscuous mode [ 95.790585][ T5801] veth0_macvtap: entered promiscuous mode [ 95.810674][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.825476][ T5801] veth1_macvtap: entered promiscuous mode [ 95.856512][ T5799] veth1_vlan: entered promiscuous mode [ 95.908743][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.957642][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.007819][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.014602][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.025010][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.034268][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.047628][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.105971][ T5799] veth0_macvtap: entered promiscuous mode [ 96.167503][ T5799] veth1_macvtap: entered promiscuous mode [ 96.194123][ T5803] veth0_vlan: entered promiscuous mode [ 96.299311][ T5803] veth1_vlan: entered promiscuous mode [ 96.308635][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.352931][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.369038][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.369063][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.401119][ T5800] veth0_vlan: entered promiscuous mode [ 96.410780][ T1181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.435374][ T1181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.455802][ T1181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.457118][ T5802] veth0_vlan: entered promiscuous mode [ 96.467754][ T1181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.517934][ T4560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.517954][ T4560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.521465][ T5800] veth1_vlan: entered promiscuous mode [ 96.548061][ T5802] veth1_vlan: entered promiscuous mode [ 96.688935][ T5803] veth0_macvtap: entered promiscuous mode [ 96.731032][ T5803] veth1_macvtap: entered promiscuous mode [ 96.851522][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.851542][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.924591][ T5800] veth0_macvtap: entered promiscuous mode [ 96.955198][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.995104][ T5800] veth1_macvtap: entered promiscuous mode [ 97.025107][ T5802] veth0_macvtap: entered promiscuous mode [ 97.029801][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.059494][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.059514][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.077264][ T5802] veth1_macvtap: entered promiscuous mode [ 97.099619][ T4560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.124149][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.129266][ T4544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.144074][ T4544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.155263][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.364037][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.392231][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.786521][ T5921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.190469][ T1127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.261792][ T1127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.287181][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.347863][ T1127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.374603][ T1127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.416286][ T1123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.432498][ T1123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.644064][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.649796][ T1123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.657909][ T1123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.485781][ T5814] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 99.485815][ T5814] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 99.490196][ T5814] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 99.490226][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.490247][ T5814] usb 4-1: Product: syz [ 99.490261][ T5814] usb 4-1: Manufacturer: syz [ 99.490276][ T5814] usb 4-1: SerialNumber: syz [ 99.587513][ T5814] usb 4-1: config 0 descriptor?? [ 99.600394][ T5926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.601194][ T5926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.802068][ T4544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.802088][ T4544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.855324][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 99.855605][ T5926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.855738][ T5926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.353821][ T5938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.041355][ T5814] Error reading MAC address [ 101.135631][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 101.244078][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.244098][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.328250][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.328269][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.425157][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.425177][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.678914][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.678932][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.861973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.864229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.864928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.023126][ T5880] usb 4-1: USB disconnect, device number 2 [ 103.031981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.514161][ T4544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.514180][ T4544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.141969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.151991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.161975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.166944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.171947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.181963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.829351][ T5968] syz.3.16 (5968) used greatest stack depth: 17800 bytes left [ 108.264033][ T5983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.234409][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.387259][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 109.387292][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 109.403149][ T5814] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.429748][ T9] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 109.429779][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.429800][ T9] usb 5-1: Product: syz [ 109.429815][ T9] usb 5-1: Manufacturer: syz [ 109.429830][ T9] usb 5-1: SerialNumber: syz [ 109.576228][ T5814] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 109.576261][ T5814] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 109.579463][ T5814] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 109.579490][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.579510][ T5814] usb 3-1: Product: syz [ 109.579524][ T5814] usb 3-1: Manufacturer: syz [ 109.579539][ T5814] usb 3-1: SerialNumber: syz [ 110.836498][ T9] usb 5-1: config 0 descriptor?? [ 110.838453][ T5990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.838732][ T5990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.924124][ T5814] usb 3-1: config 0 descriptor?? [ 110.926476][ T5995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 110.926607][ T5995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.075510][ T5990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.075641][ T5990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.161740][ T5995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.161857][ T5995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.501463][ T9] Error reading MAC address [ 111.572901][ T5814] Error reading MAC address [ 111.842109][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.002751][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 112.005543][ T5887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.005567][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.005587][ T5887] usb 2-1: config 0 has no interface number 0 [ 112.005666][ T5887] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.005693][ T5887] usb 2-1: config 0 interface 1 has no altsetting 0 [ 112.018959][ T5887] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 112.018986][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.019088][ T5887] usb 2-1: Product: syz [ 112.019103][ T5887] usb 2-1: Manufacturer: syz [ 112.019116][ T5887] usb 2-1: SerialNumber: syz [ 112.062516][ T5887] usb 2-1: config 0 descriptor?? [ 112.541651][ T5887] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 112.541683][ T5887] cx231xx 2-1:0.1: Not found matching IAD interface [ 112.573169][ T5887] usb 2-1: USB disconnect, device number 2 [ 112.822107][ T31] usb 5-1: USB disconnect, device number 2 [ 113.097607][ T5887] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.931024][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 114.317565][ T5887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.317592][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.317610][ T5887] usb 2-1: config 0 has no interface number 0 [ 114.317665][ T5887] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.317692][ T5887] usb 2-1: config 0 interface 1 has no altsetting 0 [ 114.423093][ T5887] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 114.423131][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.423151][ T5887] usb 2-1: Product: syz [ 114.423166][ T5887] usb 2-1: Manufacturer: syz [ 114.423180][ T5887] usb 2-1: SerialNumber: syz [ 114.648391][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 114.679990][ T5793] usb 3-1: USB disconnect, device number 2 [ 115.243182][ T5887] usb 2-1: config 0 descriptor?? [ 115.244199][ T5887] usb 2-1: can't set config #0, error -71 [ 115.482066][ T5887] usb 2-1: USB disconnect, device number 3 [ 117.418421][ T6078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.949161][ T6076] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.597437][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 122.887426][ T6098] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.892439][ T6098] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 132.747162][ T6150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.108133][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.108243][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.092861][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.278262][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.395598][ T6183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.858671][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.517570][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.566638][ T6191] lo speed is unknown, defaulting to 1000 [ 138.566835][ T6191] lo speed is unknown, defaulting to 1000 [ 138.570807][ T6191] lo speed is unknown, defaulting to 1000 [ 138.578856][ T6191] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.592351][ T6191] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 138.623291][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.767839][ T6191] lo speed is unknown, defaulting to 1000 [ 138.771442][ T6191] lo speed is unknown, defaulting to 1000 [ 138.774605][ T6191] lo speed is unknown, defaulting to 1000 [ 138.777651][ T6191] lo speed is unknown, defaulting to 1000 [ 138.781751][ T6191] lo speed is unknown, defaulting to 1000 [ 138.942352][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.249322][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.379865][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.223220][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.396036][ T6200] syz.0.68 (6200) used greatest stack depth: 17592 bytes left [ 142.219201][ T6226] siw: device registration error -23 [ 146.693009][ T6254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.984142][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 150.646693][ T6283] siw: device registration error -23 [ 151.519643][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 154.862505][ T6305] overlayfs: failed to resolve './file1': -2 [ 155.820863][ T6310] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.823300][ T6000] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.848208][ T6310] netlink: 68 bytes leftover after parsing attributes in process `syz.3.96'. [ 155.974526][ T6000] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 155.974562][ T6000] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 155.980888][ T6000] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 155.980917][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.980937][ T6000] usb 5-1: Product: syz [ 155.980951][ T6000] usb 5-1: Manufacturer: syz [ 155.980966][ T6000] usb 5-1: SerialNumber: syz [ 156.019658][ T6000] usb 5-1: config 0 descriptor?? [ 156.020854][ T6304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.021131][ T6304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.253980][ T6304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.254110][ T6304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.889140][ T6000] Error reading MAC address [ 157.806192][ T994] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.961973][ T994] usb 4-1: Using ep0 maxpacket: 16 [ 157.996052][ T994] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.996076][ T994] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.002447][ T994] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.002474][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.002494][ T994] usb 4-1: Product: syz [ 158.002508][ T994] usb 4-1: Manufacturer: syz [ 158.002521][ T994] usb 4-1: SerialNumber: syz [ 158.320644][ T994] usb 4-1: 0:2 : does not exist [ 159.433030][ T994] usb 4-1: USB disconnect, device number 3 [ 159.455382][ T31] usb 5-1: USB disconnect, device number 3 [ 162.196042][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.091827][ T5814] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.133833][ C0] ------------[ cut here ]------------ [ 164.133849][ C0] refcount_t: addition on 0; use-after-free. [ 164.134677][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 164.134724][ C0] Modules linked in: [ 164.134759][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.134784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.134800][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 164.134825][ C0] Code: 00 00 e8 59 5c 45 fd 5b 41 5e e9 91 bb 4a 06 cc e8 4b 5c 45 fd c6 05 d6 08 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 2b 5c 45 fd c6 05 b7 08 47 0a 01 90 48 c7 c7 [ 164.134844][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 164.134861][ C0] RAX: 537180fa1622d200 RBX: 0000000000000002 RCX: ffff88801b2f5a00 [ 164.134877][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 164.134891][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 164.134904][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 164.134920][ C0] R13: ffff888029989360 R14: ffff888029988f80 R15: dffffc0000000000 [ 164.134937][ C0] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 164.134954][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.134969][ C0] CR2: 00007f42dd1348c8 CR3: 000000003752e000 CR4: 00000000003526f0 [ 164.134988][ C0] Call Trace: [ 164.135001][ C0] [ 164.135012][ C0] mptcp_schedule_work+0x164/0x1a0 [ 164.135041][ C0] mptcp_tout_timer+0x21/0xa0 [ 164.135070][ C0] call_timer_fn+0x17e/0x5f0 [ 164.135099][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 164.135124][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 164.135148][ C0] ? call_timer_fn+0xbe/0x5f0 [ 164.135176][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 164.135213][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 164.135245][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 164.135274][ C0] __run_timer_base+0x648/0x970 [ 164.135321][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 164.135369][ C0] run_timer_softirq+0xb7/0x180 [ 164.135397][ C0] handle_softirqs+0x22f/0x710 [ 164.135438][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 164.135478][ C0] run_ktimerd+0xcf/0x190 [ 164.135506][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 164.135532][ C0] ? schedule+0x91/0x360 [ 164.135568][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 164.135595][ C0] smpboot_thread_fn+0x542/0xa60 [ 164.135636][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 164.135674][ C0] kthread+0x711/0x8a0 [ 164.135710][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 164.135737][ C0] ? __pfx_kthread+0x10/0x10 [ 164.135764][ C0] ? rt_spin_unlock+0x150/0x200 [ 164.135794][ C0] ? rt_spin_unlock+0x161/0x200 [ 164.135814][ C0] ? __pfx_kthread+0x10/0x10 [ 164.135846][ C0] ret_from_fork+0x4bc/0x870 [ 164.135876][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 164.135911][ C0] ? __switch_to_asm+0x39/0x70 [ 164.135932][ C0] ? __switch_to_asm+0x33/0x70 [ 164.135951][ C0] ? __pfx_kthread+0x10/0x10 [ 164.135984][ C0] ret_from_fork_asm+0x1a/0x30 [ 164.136028][ C0] [ 164.136040][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.136055][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.136078][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.136090][ C0] Call Trace: [ 164.136099][ C0] [ 164.136107][ C0] dump_stack_lvl+0x99/0x250 [ 164.136139][ C0] ? __asan_memcpy+0x40/0x70 [ 164.136165][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.136197][ C0] ? __pfx__printk+0x10/0x10 [ 164.136241][ C0] vpanic+0x237/0x6d0 [ 164.136262][ C0] ? __pfx_vpanic+0x10/0x10 [ 164.136297][ C0] panic+0xb9/0xc0 [ 164.136317][ C0] ? __pfx_panic+0x10/0x10 [ 164.136360][ C0] __warn+0x31b/0x4b0 [ 164.136379][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 164.136405][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 164.136429][ C0] report_bug+0x2be/0x4f0 [ 164.136455][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 164.136479][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 164.136520][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 164.136544][ C0] handle_bug+0x84/0x160 [ 164.136575][ C0] exc_invalid_op+0x1a/0x50 [ 164.136616][ C0] asm_exc_invalid_op+0x1a/0x20 [ 164.136637][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 164.136660][ C0] Code: 00 00 e8 59 5c 45 fd 5b 41 5e e9 91 bb 4a 06 cc e8 4b 5c 45 fd c6 05 d6 08 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 2b 5c 45 fd c6 05 b7 08 47 0a 01 90 48 c7 c7 [ 164.136678][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 164.136696][ C0] RAX: 537180fa1622d200 RBX: 0000000000000002 RCX: ffff88801b2f5a00 [ 164.136711][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 164.136725][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 164.136738][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 164.136754][ C0] R13: ffff888029989360 R14: ffff888029988f80 R15: dffffc0000000000 [ 164.136794][ C0] mptcp_schedule_work+0x164/0x1a0 [ 164.136820][ C0] mptcp_tout_timer+0x21/0xa0 [ 164.136848][ C0] call_timer_fn+0x17e/0x5f0 [ 164.136874][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 164.136900][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 164.136924][ C0] ? call_timer_fn+0xbe/0x5f0 [ 164.136950][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 164.136987][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 164.137017][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 164.137046][ C0] __run_timer_base+0x648/0x970 [ 164.137092][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 164.137140][ C0] run_timer_softirq+0xb7/0x180 [ 164.137167][ C0] handle_softirqs+0x22f/0x710 [ 164.137205][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 164.137245][ C0] run_ktimerd+0xcf/0x190 [ 164.137273][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 164.137298][ C0] ? schedule+0x91/0x360 [ 164.137334][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 164.137358][ C0] smpboot_thread_fn+0x542/0xa60 [ 164.137387][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 164.137425][ C0] kthread+0x711/0x8a0 [ 164.137459][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 164.137485][ C0] ? __pfx_kthread+0x10/0x10 [ 164.137512][ C0] ? rt_spin_unlock+0x150/0x200 [ 164.137541][ C0] ? rt_spin_unlock+0x161/0x200 [ 164.137562][ C0] ? __pfx_kthread+0x10/0x10 [ 164.137593][ C0] ret_from_fork+0x4bc/0x870 [ 164.137628][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 164.137663][ C0] ? __switch_to_asm+0x39/0x70 [ 164.137683][ C0] ? __switch_to_asm+0x33/0x70 [ 164.137703][ C0] ? __pfx_kthread+0x10/0x10 [ 164.137736][ C0] ret_from_fork_asm+0x1a/0x30 [ 164.137780][ C0] [ 164.138048][ C0] Kernel Offset: disabled