last executing test programs: 20.675630445s ago: executing program 2 (id=639): pipe(&(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xe1b4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r1, 0xffffffffffffffff, 0xf3a, 0x4) r2 = fsopen(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1d, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x2) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) setpgid(0x0, 0x0) unshare(0x6020400) 17.468266604s ago: executing program 0 (id=643): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/145, 0x91}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000540)={0x0, 0x0, r4, 0x0, 0x2, 0x4, 0x7fffffff, 0x7fffffff, {0x5, 0x7, 0xff, 0xf859, 0x4, 0xffff, 0x7d, 0x2, 0x7, 0x9, 0x1, 0x8, 0x503, 0x2, "2573d259098f7f06722c851067287ed0b795cc996c46347ee6aeae634e0b4180"}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, 0x0, 0x0) 17.454702212s ago: executing program 2 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000073110800"/22], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="fc0000004a000700ab092500090007000aab80ff020000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07326ade01720e6cd5ed6e4e9bfcd772c74fb32c56ce1f0f156272f5b00000005defd5a32e3082038f4f8b29d3e2a73325c6d167c7594978f7bc711fdf3d92c8334b2ccd243f295ed94e0ad91bd073457d43d3f00000000", 0xb6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}, {&(0x7f00000005c0)="7194b2515749095a629b93d09b8ea6bd6d3cfa278b68225d789622ad00ce773888b1c423d447ec11edab2a4b9ad4990ca99da75b6992c194289222e317e047a25bd5591018e7c257afa4572b52c27eb6e84e8348aea7840133ca5769f339d4a2f1d12cfee67ef1433078524c5ae7a6e222051cd64cc752538b3ae38eab02f5cf10f0b651675fc7618218e977891cba22d126fdd04b172c83061718194fd38f5cd38db5ff313daf53", 0xa8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x4, 0x2400c0a2) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x1}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) 17.424845581s ago: executing program 4 (id=645): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00'], 0x50}}, 0x40000010) r1 = openat$cgroup_int(r0, &(0x7f0000001380)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x8) 15.110140939s ago: executing program 2 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000001140)={r1, &(0x7f0000001040)='aegis128\x00', 0x204202, 0x0, 0x4, &(0x7f00000010c0), &(0x7f0000001100)=0x1}) ioctl$FITHAW(r4, 0xc0045878) 14.615031911s ago: executing program 4 (id=647): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/145, 0x91}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000540)={0x0, 0x0, r3, r4, 0x2, 0x4, 0x7fffffff, 0x7fffffff, {0x5, 0x7, 0xff, 0xf859, 0x4, 0xffff, 0x7d, 0x2, 0x7, 0x9, 0x1, 0x8, 0x503, 0x2, "2573d259098f7f06722c851067287ed0b795cc996c46347ee6aeae634e0b4180"}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0xcf, &(0x7f0000000100)=0xd, 0x4) 13.228007145s ago: executing program 3 (id=650): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) 11.769027655s ago: executing program 3 (id=651): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6003000000182c00fe800000000000000000000000000004008000000000000000000000000000aa0202000100000000fc01000000000000"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x29, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000340)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2, 0xf, 0x0, 0x7, 0x2}, 0x10}}, 0x0) sendmsg$inet(r4, 0x0, 0xc000) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) keyctl$set_timeout(0xf, r3, 0xa0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) 11.110486244s ago: executing program 4 (id=653): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0xb, 0x8, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, &(0x7f0000000040)) 9.652751604s ago: executing program 4 (id=654): pipe(&(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xe1b4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r1, 0xffffffffffffffff, 0xf3a, 0x4) r2 = fsopen(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1d, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) setpgid(0x0, r4) unshare(0x6020400) fchdir(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0) 8.768507282s ago: executing program 2 (id=655): syz_open_dev$vbi(0x0, 0x0, 0x2) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000000001c140000fe0000010000000004001300000000"], 0x24}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 8.549119544s ago: executing program 3 (id=656): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000c40)={[{@quota}, {@errors_remount}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) 8.444028344s ago: executing program 2 (id=657): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00'], 0x50}}, 0x40000010) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x8) 8.092727429s ago: executing program 2 (id=658): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923"}}) 7.915245382s ago: executing program 3 (id=659): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/145, 0x91}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r4}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0xcf, &(0x7f0000000100)=0xd, 0x4) 7.764846462s ago: executing program 1 (id=660): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 6.471789733s ago: executing program 1 (id=661): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) 6.294042336s ago: executing program 0 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xf}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x69}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x4, 0x9, 0x2800000}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x401}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x3c000001}, 0x4040800) 6.06848995s ago: executing program 3 (id=663): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c60a, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 5.139941457s ago: executing program 1 (id=664): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) landlock_restrict_self(0xffffffffffffffff, 0x8) 4.801064916s ago: executing program 0 (id=665): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$eJzs3E9sVNUeAODfnba0/Hv08Xi8B6IW0dhIbKGgsDAxGE1caGLERF02bSFIoYaWRAjqkBhcGhL3xqVbF27VDTGsTNzi0sSQEMMGMCGOuTP3dqbDzJRppx1Lvy+Z9px7595zzj333Dn3nLkTwLo1lP5JKuEbEbEtIgr1bxiq/Lt7+9LEvduXJqJYKh3/IylvdieNZ7LdxOYsMlyIKHyWVFfUmL1w8fT49PTUuSw+Onfmw9HZCxefPzWQLTl69PChg0deHHuh/UI1SC8t153dn8zs2fX6+1ffnOjNl+ep1ZajU4ZiqFFWyp7pdGJdtrUmnPR2MSO0JT3/0+rqK7f/bdETrSqvuIo5A1ZaqVQq9TdfXSzVu/zAEmDNioFu5wDojvyDPr3/zV+NOgIbVqb70XW3jlVugNJy381eEU+WF+bjIH1197edNBQR7xX//Cp9RbNxiJ4VShwAWJd+OJb3BOv6f4OVmZH756+9nP7/VzaHMhgR/46I7RHxn4jYERH/jYidEfG/iPh/3f7TrkupRfpDdfH59OcnoQo3O1TUhtL+30vZ3Fa1/7cgA4M9WWxrRN5hnjqQHZPh6Os/cWp66mCLNH589Zcvmq2r7f+lrzT9vC+Y5eNmb90A3eT43PiSC1zn1uWI3b315U96I5L5mYAkInZFxO429jtYEz713Dd75iN9C9+3ePnLSg3n0Towz1T6OuLZSO7fvX2pGAvqv5pismB+8sz4yamTU2fH5ucnRwdieurAaHoWHGiYxvWfr7zVLP1Fy//db/WbvHbk++MduylI639Tzfkf+fxttfyDSUQyP187234aV379vOnc6lLP/w3JO+Vwfl/60fjc3LmDERuSNx5cPlbdNo+n/6NYKf/wvsbtf3u2TXokHouI9CR+PCKeiModYpr3vRHxVETsa1H+n155+oO2y19oscMOSss/WXf9q9T8gvqvztc3CyTZ3GCDVT2n99641+Ti8XD1f7gcGs6WNL7+JQsuEc1ymn/apUv+WvbRAwAAgLWhEBFbasaStkShMDJSGQPaEZsK0zOzc/tPzJw/O5muixiMvkI+0lUZD+5L8vHPwZr4WF38UDZu/GXPxnJ8ZGJmerKrJQc2l9t8UhiJeLenpv2nfve9E3j0eV4L1q9W7T/txO+8uoqZAVbVw3/+X/t4RTMCrLqa9t/sCf/iEr73BawB7v+BqsV/6Mc1A9a+krYM61pb7X+/HwGER0lvvD0fXqXnDoF/iKX2/z/tcD6AVbXoc/3LCpT6G68aiAffHAOtd9gTS8vGxgZpdSWQ9qy6kvrGpWyV/5pC0/dEob0d9kdn6vTEMo9G8dzsyZ0dP/lL2XflO12D3zZvp9f7W9TO8gNduRwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03N8BAAD//6Yc4S8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000c40)={[{@quota}, {@errors_remount}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) 4.286956489s ago: executing program 4 (id=666): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6003000000182c00fe800000000000000000000000000004008000000000000000000000000000aa0202000100000000fc01000000000000"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x29, 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000340)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2, 0xf, 0x0, 0x7, 0x2}, 0x10}}, 0x0) sendmsg$inet(r3, 0x0, 0xc000) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 4.113588107s ago: executing program 1 (id=667): syz_open_dev$vbi(0x0, 0x0, 0x2) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000000001c140000fe0000010000000004001300000000"], 0x24}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 3.140071283s ago: executing program 0 (id=668): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00'], 0x50}}, 0x40000010) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x8) 2.988242225s ago: executing program 1 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6003000000182c00fe800000000000000000000000000004008000000000000000000000000000aa0202000100000000fc01000000000000"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x29, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000340)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2, 0xf, 0x0, 0x7, 0x2}, 0x10}}, 0x0) sendmsg$inet(r4, 0x0, 0xc000) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) keyctl$set_timeout(0xf, r3, 0xa0) socket(0x2, 0x80805, 0x0) 2.182420073s ago: executing program 3 (id=670): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r4, 0x8) 1.899266653s ago: executing program 0 (id=671): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee6fffebf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295c700000000000000000000000000000000fe31e1e02dd54ac3c7af2b3d76a63b79ca6f9a20b26761254aee1352ad08118a58802cc8f107852b8f5382f0871255ce5c0b31e39637850330f520d03ed2aa076efa8401613537585d45bd27454beccdc32645cfe67921df3f2bbf88cacc83f82e916f0ee19ad20cdf5ce3b2ee147f78c1caf8b8024bac9809015b2210d7c2471dfd73"], &(0x7f0000000100)='GPL\x00'}, 0x94) 1.339016688s ago: executing program 4 (id=672): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/145, 0x91}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000540)={0x0, 0x0, r4, 0x0, 0x2, 0x4, 0x7fffffff, 0x7fffffff, {0x5, 0x7, 0xff, 0xf859, 0x4, 0xffff, 0x7d, 0x2, 0x7, 0x9, 0x1, 0x8, 0x503, 0x2, "2573d259098f7f06722c851067287ed0b795cc996c46347ee6aeae634e0b4180"}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, 0x0, 0x0) 443.718749ms ago: executing program 1 (id=673): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/145, 0x91}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000540)={0x0, 0x0, r3, r4, 0x2, 0x4, 0x7fffffff, 0x7fffffff, {0x5, 0x7, 0xff, 0xf859, 0x4, 0xffff, 0x7d, 0x2, 0x7, 0x9, 0x1, 0x8, 0x503, 0x2, "2573d259098f7f06722c851067287ed0b795cc996c46347ee6aeae634e0b4180"}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0xcf, &(0x7f0000000100)=0xd, 0x4) 0s ago: executing program 0 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x4000, 0x1, &(0x7f00008fc000/0x4000)=nil) shmat(r3, &(0x7f00003bc000/0x1000)=nil, 0x1000) signalfd4(r2, 0x0, 0x0, 0x100000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r4, &(0x7f0000000040)="e4", 0x1, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000740), 0x0, 0x40000023, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 74.757259][ T5597] cgroup: Unknown subsys name 'net' [ 74.999163][ T5597] cgroup: Unknown subsys name 'cpuset' [ 75.052187][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.704995][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.099564][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.116464][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.130524][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.136077][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.149845][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.153470][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.154595][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.155400][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.157761][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.181755][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.185830][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.190540][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.191522][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.195579][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.196609][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.211428][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.212883][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.220945][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.260617][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.278745][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.295793][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.360540][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.363898][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.373113][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.375699][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.253551][ T5623] Bluetooth: hci3: command tx timeout [ 81.253662][ T5623] Bluetooth: hci2: command tx timeout [ 81.411795][ T4924] Bluetooth: hci0: command tx timeout [ 81.411992][ T4924] Bluetooth: hci1: command tx timeout [ 81.493179][ T5623] Bluetooth: hci4: command tx timeout [ 81.543705][ T44] cfg80211: failed to load regulatory.db [ 81.825069][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.825780][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.825936][ T5614] bridge_slave_0: entered allmulticast mode [ 81.828118][ T5614] bridge_slave_0: entered promiscuous mode [ 81.830808][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.831079][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.831314][ T5611] bridge_slave_0: entered allmulticast mode [ 81.840251][ T5611] bridge_slave_0: entered promiscuous mode [ 81.889783][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.890067][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.890303][ T5612] bridge_slave_0: entered allmulticast mode [ 81.893401][ T5612] bridge_slave_0: entered promiscuous mode [ 81.922667][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.922903][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.923109][ T5614] bridge_slave_1: entered allmulticast mode [ 81.925932][ T5614] bridge_slave_1: entered promiscuous mode [ 81.927333][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.927667][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.928238][ T5611] bridge_slave_1: entered allmulticast mode [ 81.932974][ T5611] bridge_slave_1: entered promiscuous mode [ 81.936951][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.937221][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.937796][ T5610] bridge_slave_0: entered allmulticast mode [ 81.941028][ T5610] bridge_slave_0: entered promiscuous mode [ 81.945463][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.945726][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.945938][ T5612] bridge_slave_1: entered allmulticast mode [ 81.948856][ T5612] bridge_slave_1: entered promiscuous mode [ 82.024412][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.024710][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.024967][ T5610] bridge_slave_1: entered allmulticast mode [ 82.028252][ T5610] bridge_slave_1: entered promiscuous mode [ 82.056667][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.056954][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.057505][ T5615] bridge_slave_0: entered allmulticast mode [ 82.060593][ T5615] bridge_slave_0: entered promiscuous mode [ 82.129071][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.129377][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.129844][ T5615] bridge_slave_1: entered allmulticast mode [ 82.135518][ T5615] bridge_slave_1: entered promiscuous mode [ 82.149140][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.157521][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.184668][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.204474][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.207867][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.235498][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.238916][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.294915][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.325719][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.388453][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.393853][ T5614] team0: Port device team_slave_0 added [ 82.398712][ T5611] team0: Port device team_slave_0 added [ 82.420511][ T5612] team0: Port device team_slave_0 added [ 82.441128][ T5614] team0: Port device team_slave_1 added [ 82.445428][ T5611] team0: Port device team_slave_1 added [ 82.449507][ T5610] team0: Port device team_slave_0 added [ 82.456711][ T5612] team0: Port device team_slave_1 added [ 82.511049][ T5610] team0: Port device team_slave_1 added [ 82.533449][ T5615] team0: Port device team_slave_0 added [ 82.590390][ T5615] team0: Port device team_slave_1 added [ 82.593295][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.593308][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.593330][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.601168][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.601181][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.601203][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.626864][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.626879][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.626902][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.657300][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.657315][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.657338][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.659696][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.659707][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.659730][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.663101][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.663113][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.663136][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.667665][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.667676][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.667718][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.731092][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.731107][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.731130][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.750415][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.750431][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.750454][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.785628][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.785642][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.785665][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.995066][ T5614] hsr_slave_0: entered promiscuous mode [ 82.997275][ T5614] hsr_slave_1: entered promiscuous mode [ 83.013867][ T5611] hsr_slave_0: entered promiscuous mode [ 83.015861][ T5611] hsr_slave_1: entered promiscuous mode [ 83.017484][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 83.017581][ T5611] Cannot create hsr debugfs directory [ 83.056827][ T5612] hsr_slave_0: entered promiscuous mode [ 83.058744][ T5612] hsr_slave_1: entered promiscuous mode [ 83.060298][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 83.060319][ T5612] Cannot create hsr debugfs directory [ 83.104229][ T5610] hsr_slave_0: entered promiscuous mode [ 83.105769][ T5610] hsr_slave_1: entered promiscuous mode [ 83.106641][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 83.106662][ T5610] Cannot create hsr debugfs directory [ 83.331909][ T5623] Bluetooth: hci2: command tx timeout [ 83.331947][ T5623] Bluetooth: hci3: command tx timeout [ 83.491867][ T5623] Bluetooth: hci1: command tx timeout [ 83.491900][ T5623] Bluetooth: hci0: command tx timeout [ 83.571843][ T4924] Bluetooth: hci4: command tx timeout [ 83.680454][ T5615] hsr_slave_0: entered promiscuous mode [ 83.681558][ T5615] hsr_slave_1: entered promiscuous mode [ 83.683855][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 83.683884][ T5615] Cannot create hsr debugfs directory [ 84.394204][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.445059][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.460632][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.497866][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.504963][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.550048][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.568073][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.607777][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.742470][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.788285][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.791322][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.828877][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.833420][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.876059][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.898636][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.938345][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.056885][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.096836][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.099435][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.135134][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.150175][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.176583][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.198578][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.234922][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.369534][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.406944][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.411310][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.414460][ T4924] Bluetooth: hci2: command tx timeout [ 85.415207][ T4924] Bluetooth: hci3: command tx timeout [ 85.456857][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.476631][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.518536][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.546348][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.571888][ T4924] Bluetooth: hci0: command tx timeout [ 85.571917][ T4924] Bluetooth: hci1: command tx timeout [ 85.576833][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.652982][ T5623] Bluetooth: hci4: command tx timeout [ 85.701896][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.765698][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.806806][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.820690][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.855479][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.870549][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.897757][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.909653][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.935380][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.956602][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.011326][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.013891][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.066518][ T1303] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.066846][ T1303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.092935][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.203658][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.238455][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.261138][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.261276][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.322691][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.322849][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.410527][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.427871][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.477644][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.477856][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.557046][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.557198][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.636825][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.746242][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.749850][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.749941][ T1296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.807988][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.808129][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.960215][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.041073][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.041211][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.123655][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.123831][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.477754][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.493245][ T4924] Bluetooth: hci2: command tx timeout [ 87.495083][ T5623] Bluetooth: hci3: command tx timeout [ 87.651819][ T4924] Bluetooth: hci0: command tx timeout [ 87.651863][ T5623] Bluetooth: hci1: command tx timeout [ 87.733204][ T5623] Bluetooth: hci4: command tx timeout [ 87.859029][ T5614] veth0_vlan: entered promiscuous mode [ 87.971568][ T5614] veth1_vlan: entered promiscuous mode [ 88.244221][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.298737][ T5614] veth0_macvtap: entered promiscuous mode [ 88.361136][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.378645][ T5614] veth1_macvtap: entered promiscuous mode [ 88.511166][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.588456][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.649486][ T5612] veth0_vlan: entered promiscuous mode [ 88.677346][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.677613][ T1485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.700386][ T1485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.718671][ T1485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.736155][ T1485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.754625][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.778491][ T5612] veth1_vlan: entered promiscuous mode [ 88.857302][ T5610] veth0_vlan: entered promiscuous mode [ 89.109675][ T5610] veth1_vlan: entered promiscuous mode [ 89.315582][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.315606][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.316521][ T5612] veth0_macvtap: entered promiscuous mode [ 89.379961][ T5615] veth0_vlan: entered promiscuous mode [ 89.400942][ T5612] veth1_macvtap: entered promiscuous mode [ 89.463042][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.463061][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.474222][ T5615] veth1_vlan: entered promiscuous mode [ 89.496407][ T5610] veth0_macvtap: entered promiscuous mode [ 89.555916][ T5610] veth1_macvtap: entered promiscuous mode [ 89.566472][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.605611][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.629371][ T5611] veth0_vlan: entered promiscuous mode [ 89.658310][ T1485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.660344][ T1485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.684027][ T1485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.695554][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.706641][ T1485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.718172][ T5611] veth1_vlan: entered promiscuous mode [ 89.780901][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.935666][ T5615] veth0_macvtap: entered promiscuous mode [ 90.023163][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.027703][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.082165][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.089244][ T5615] veth1_macvtap: entered promiscuous mode [ 90.110802][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.395778][ T5808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8'. [ 90.517709][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.528440][ T5611] veth0_macvtap: entered promiscuous mode [ 90.539499][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.539516][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.617632][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.669877][ T5611] veth1_macvtap: entered promiscuous mode [ 90.759470][ T1303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.771410][ T1303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.781608][ T1303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.790466][ T1485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.790481][ T1485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.905228][ T1303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.940570][ T5814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 91.039983][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.040002][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.080298][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.271431][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.578186][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.578204][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.681754][ T148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.691331][ T1303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.715714][ T1303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.736604][ T1303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.837172][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.837191][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.838682][ T5827] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15'. [ 92.177164][ T1485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.177183][ T1485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.444407][ T1543] tipc: Subscription rejected, illegal request [ 92.559328][ T1485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.559347][ T1485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.602432][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 92.707582][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.707600][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.735310][ T5855] netlink: 56 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.069805][ T5863] Zero length message leads to an empty skb [ 94.357880][ T1303] tipc: Subscription rejected, illegal request [ 95.039259][ T5894] netlink: 56 bytes leftover after parsing attributes in process `syz.1.39'. [ 96.909198][ T5906] netlink: 'syz.0.43': attribute type 11 has an invalid length. [ 96.909218][ T5906] netlink: 224 bytes leftover after parsing attributes in process `syz.0.43'. [ 101.513579][ T5965] netlink: 'syz.4.66': attribute type 11 has an invalid length. [ 101.513599][ T5965] netlink: 224 bytes leftover after parsing attributes in process `syz.4.66'. [ 102.931677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.496128][ T6041] netlink: 'syz.3.92': attribute type 11 has an invalid length. [ 105.496150][ T6041] netlink: 224 bytes leftover after parsing attributes in process `syz.3.92'. [ 113.225025][ T6168] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.749542][ T6190] Mount JFS Failure: -5 [ 120.081677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.261680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.771699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.791705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.801695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.811683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.951683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.971683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.981685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.530510][ T6348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.211'. [ 127.530530][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 132.715537][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.715660][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.640795][ T6382] netlink: 48 bytes leftover after parsing attributes in process `syz.4.225'. [ 133.640815][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'. [ 136.117264][ T6418] netlink: 48 bytes leftover after parsing attributes in process `syz.2.237'. [ 136.117284][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 147.117913][ T6502] netlink: 972 bytes leftover after parsing attributes in process `syz.3.274'. [ 151.678776][ T6556] netlink: 'syz.0.294': attribute type 11 has an invalid length. [ 151.678797][ T6556] netlink: 224 bytes leftover after parsing attributes in process `syz.0.294'. [ 159.267722][ T6660] syzkaller0: entered promiscuous mode [ 159.268191][ T6660] syzkaller0: entered allmulticast mode [ 159.671905][ T6668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.341'. [ 162.063499][ T6692] syzkaller0: entered promiscuous mode [ 162.063532][ T6692] syzkaller0: entered allmulticast mode [ 162.838232][ T6695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.354'. [ 162.838545][ T6686] netlink: 'syz.0.350': attribute type 11 has an invalid length. [ 162.838560][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.0.350'. [ 165.055258][ T6719] syzkaller0: entered promiscuous mode [ 165.055282][ T6719] syzkaller0: entered allmulticast mode [ 165.907180][ T6726] netlink: 'syz.2.366': attribute type 11 has an invalid length. [ 165.907195][ T6726] netlink: 224 bytes leftover after parsing attributes in process `syz.2.366'. [ 166.549175][ T6737] loop2: detected capacity change from 0 to 512 [ 167.689500][ T6737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 167.689526][ T6737] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 168.027198][ T6737] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.371: invalid indirect mapped block 9 (level 0) [ 168.027334][ T6737] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.032426][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 168.032439][ C1] EXT4-fs (loop2): initial error at time 1781156067: ext4_free_branches:1023: inode 11 [ 168.032468][ C1] EXT4-fs (loop2): last error at time 1781156067: ext4_free_branches:1023: inode 11 [ 168.221299][ T6737] EXT4-fs (loop2): 1 truncate cleaned up [ 168.288197][ T6737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.645380][ T6759] syzkaller0: entered promiscuous mode [ 169.645405][ T6759] syzkaller0: entered allmulticast mode [ 170.117388][ T6764] loop1: detected capacity change from 0 to 512 [ 170.158473][ T6764] ======================================================= [ 170.158473][ T6764] WARNING: The mand mount option has been deprecated and [ 170.158473][ T6764] and is ignored by this kernel. Remove the mand [ 170.158473][ T6764] option from the mount to silence this warning. [ 170.158473][ T6764] ======================================================= [ 170.186026][ T6764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.329052][ T6768] loop3: detected capacity change from 0 to 512 [ 170.459756][ T6764] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.372: invalid indirect mapped block 4294967295 (level 1) [ 170.459780][ T6764] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.463371][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 170.463390][ C1] EXT4-fs (loop1): initial error at time 1781156069: ext4_free_branches:1023: inode 11 [ 170.463416][ C1] EXT4-fs (loop1): last error at time 1781156069: ext4_free_branches:1023: inode 11 [ 170.502365][ T6764] EXT4-fs (loop1): Remounting filesystem read-only [ 170.502852][ T6764] EXT4-fs (loop1): 2 truncates cleaned up [ 170.584951][ T6764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.620056][ T6768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.762922][ T6766] netlink: 'syz.4.380': attribute type 11 has an invalid length. [ 170.762941][ T6766] netlink: 224 bytes leftover after parsing attributes in process `syz.4.380'. [ 170.883461][ T6768] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.382: invalid indirect mapped block 4294967295 (level 1) [ 170.884348][ T6768] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.885500][ T6768] EXT4-fs (loop3): Remounting filesystem read-only [ 170.892267][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 170.892284][ C1] EXT4-fs (loop3): initial error at time 1781156070: ext4_free_branches:1023: inode 11 [ 170.892310][ C1] EXT4-fs (loop3): last error at time 1781156070: ext4_free_branches:1023: inode 11 [ 171.001179][ T6768] EXT4-fs (loop3): 2 truncates cleaned up [ 171.084222][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.153675][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.176474][ T6768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.978158][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.437374][ T6801] loop3: detected capacity change from 0 to 512 [ 175.654874][ T6801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.675960][ T6801] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.394: invalid indirect mapped block 9 (level 0) [ 175.675995][ T6801] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.681680][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 175.681698][ C1] EXT4-fs (loop3): initial error at time 1781156075: ext4_free_branches:1023: inode 11 [ 175.681726][ C1] EXT4-fs (loop3): last error at time 1781156075: ext4_free_branches:1023: inode 11 [ 176.093999][ T6801] EXT4-fs (loop3): 1 truncate cleaned up [ 176.518002][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.796467][ T6839] loop0: detected capacity change from 0 to 512 [ 179.890161][ T6839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.055368][ T6839] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.404: invalid indirect mapped block 4294967295 (level 1) [ 180.055392][ T6839] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 180.055567][ T6839] EXT4-fs (loop0): Remounting filesystem read-only [ 180.055737][ T6839] EXT4-fs (loop0): 2 truncates cleaned up [ 180.636043][ T6839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.692722][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.982036][ T6848] loop1: detected capacity change from 0 to 512 [ 181.495693][ T6848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.695641][ T6848] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.407: invalid indirect mapped block 4294967295 (level 1) [ 181.695681][ T6848] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 181.696839][ T6848] EXT4-fs (loop1): Remounting filesystem read-only [ 181.697189][ T6848] EXT4-fs (loop1): 2 truncates cleaned up [ 181.706289][ T6848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.709483][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.269492][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.622188][ T6880] netlink: 'syz.3.412': attribute type 11 has an invalid length. [ 187.622208][ T6880] netlink: 224 bytes leftover after parsing attributes in process `syz.3.412'. [ 197.843370][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.843474][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.892720][ T6932] netlink: 'syz.2.430': attribute type 11 has an invalid length. [ 198.892733][ T6932] netlink: 224 bytes leftover after parsing attributes in process `syz.2.430'. [ 203.016416][ T4924] Bluetooth: hci2: command 0x0406 tx timeout [ 203.090687][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 204.100769][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 206.604977][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 206.605015][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 206.606178][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 206.652876][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 209.270691][ T6994] netlink: 'syz.1.449': attribute type 11 has an invalid length. [ 209.270704][ T6994] netlink: 224 bytes leftover after parsing attributes in process `syz.1.449'. [ 232.728908][ T7110] loop2: detected capacity change from 0 to 512 [ 234.905088][ T7126] loop1: detected capacity change from 0 to 512 [ 234.928108][ T7126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.899222][ T7126] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.487: invalid block [ 235.899256][ T7126] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 235.901998][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 235.902018][ C1] EXT4-fs (loop1): initial error at time 1781156135: ext4_get_branch:178: inode 11: block 4294967295 [ 235.902051][ C1] EXT4-fs (loop1): last error at time 1781156135: ext4_get_branch:178: inode 11: block 4294967295 [ 236.041378][ T7126] EXT4-fs (loop1): Remounting filesystem read-only [ 236.042048][ T7126] EXT4-fs (loop1): 2 truncates cleaned up [ 236.053423][ T7126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.554599][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.732528][ T7148] loop2: detected capacity change from 0 to 512 [ 237.751554][ T7148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.804689][ T7148] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.494: invalid block [ 237.804723][ T7148] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 237.804931][ T7148] EXT4-fs (loop2): Remounting filesystem read-only [ 237.805237][ T7148] EXT4-fs (loop2): 2 truncates cleaned up [ 237.813247][ T7148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.145805][ T7159] loop0: detected capacity change from 0 to 512 [ 239.190840][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.193443][ T7159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.236663][ T7159] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.496: invalid block [ 239.236683][ T7159] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 239.236839][ T7159] EXT4-fs (loop0): Remounting filesystem read-only [ 239.237004][ T7159] EXT4-fs (loop0): 2 truncates cleaned up [ 239.238484][ T7159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.426146][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.906610][ T7196] loop1: detected capacity change from 0 to 512 [ 242.927683][ T7196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.757643][ T7196] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.506: invalid indirect mapped block 4294967295 (level 1) [ 243.757693][ T7196] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 243.758723][ T7196] EXT4-fs (loop1): Remounting filesystem read-only [ 243.759177][ T7196] EXT4-fs (loop1): 2 truncates cleaned up [ 243.779078][ T7196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.421135][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.253946][ T60] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 247.254114][ T60] Bluetooth: hci4: Injecting HCI hardware error event [ 247.255851][ T5623] Bluetooth: hci4: hardware error 0x00 [ 248.529126][ T7244] loop0: detected capacity change from 0 to 512 [ 250.454027][ T5623] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 260.703445][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.703523][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.686688][ T7352] loop3: detected capacity change from 0 to 512 [ 267.082769][ T7352] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.550: iget: bad extended attribute block 1 [ 267.082810][ T7352] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.092478][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 267.092541][ C0] EXT4-fs (loop3): initial error at time 1781156166: ext4_orphan_get:1399: inode 15 [ 267.093252][ C0] EXT4-fs (loop3): last error at time 1781156166: ext4_orphan_get:1399: inode 15 [ 267.229783][ T7352] EXT4-fs (loop3): Remounting filesystem read-only [ 267.241536][ T7352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.566077][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.815309][ T7363] loop3: detected capacity change from 0 to 512 [ 267.830140][ T7363] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 267.834231][ T7363] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.558: invalid indirect mapped block 9 (level 0) [ 267.834264][ T7363] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 267.834851][ T7363] EXT4-fs (loop3): 1 truncate cleaned up [ 267.857997][ T7363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.917080][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 268.127563][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 274.486637][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.140343][ T7437] loop0: detected capacity change from 0 to 512 [ 283.160025][ T7437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.277343][ T7437] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.581: invalid block [ 283.277378][ T7437] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 283.278702][ T7437] EXT4-fs (loop0): Remounting filesystem read-only [ 283.278953][ T7437] EXT4-fs (loop0): 2 truncates cleaned up [ 284.213563][ T7437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.410413][ T7476] loop2: detected capacity change from 0 to 512 [ 290.417584][ T7476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 290.429962][ T7476] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.578: invalid indirect mapped block 9 (level 0) [ 290.429994][ T7476] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 290.431749][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 290.431771][ C1] EXT4-fs (loop2): initial error at time 1781156189: ext4_free_branches:1023: inode 11 [ 290.431795][ C1] EXT4-fs (loop2): last error at time 1781156189: ext4_free_branches:1023: inode 11 [ 290.433518][ T7476] EXT4-fs (loop2): 1 truncate cleaned up [ 290.453244][ T7476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.222886][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.630072][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.037845][ T7530] loop3: detected capacity change from 0 to 512 [ 300.355036][ T7530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.379950][ T7530] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.595: invalid indirect mapped block 4294967295 (level 1) [ 300.379987][ T7530] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 300.381989][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 300.382007][ C1] EXT4-fs (loop3): initial error at time 1781156199: ext4_free_branches:1023: inode 11 [ 300.382033][ C1] EXT4-fs (loop3): last error at time 1781156199: ext4_free_branches:1023: inode 11 [ 300.450141][ T7530] EXT4-fs (loop3): Remounting filesystem read-only [ 301.398852][ T7530] EXT4-fs (loop3): 2 truncates cleaned up [ 301.411893][ T7530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.197332][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.255411][ T7562] loop1: detected capacity change from 0 to 512 [ 306.257938][ T7562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.450905][ T7562] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.611: invalid indirect mapped block 4294967295 (level 1) [ 307.450928][ T7562] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 307.451763][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 307.451774][ C0] EXT4-fs (loop1): initial error at time 1781156206: ext4_free_branches:1023: inode 11 [ 307.451790][ C0] EXT4-fs (loop1): last error at time 1781156206: ext4_free_branches:1023: inode 11 [ 307.451986][ T7562] EXT4-fs (loop1): Remounting filesystem read-only [ 307.452174][ T7562] EXT4-fs (loop1): 2 truncates cleaned up [ 307.453734][ T7562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.739098][ T7578] loop4: detected capacity change from 0 to 512 [ 308.245595][ T7578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.470860][ T7578] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.614: invalid indirect mapped block 4294967295 (level 1) [ 308.470897][ T7578] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 308.471443][ T7578] EXT4-fs (loop4): Remounting filesystem read-only [ 308.472751][ T7578] EXT4-fs (loop4): 2 truncates cleaned up [ 308.509378][ T7578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.727308][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.648324][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.673499][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 309.799479][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 313.006463][ T7622] loop4: detected capacity change from 0 to 512 [ 313.178736][ T7622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 313.243817][ T7622] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.626: invalid block [ 313.243850][ T7622] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 313.245744][ T7622] EXT4-fs (loop4): Remounting filesystem read-only [ 313.246058][ T7622] EXT4-fs (loop4): 2 truncates cleaned up [ 313.845504][ T7622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.736921][ T37] audit: type=1800 audit(1781156214.116:2): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.629" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 314.967800][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 315.023810][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 315.935310][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.161949][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 323.852276][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.852393][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.689677][ T7725] loop3: detected capacity change from 0 to 512 [ 330.694300][ T7725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 330.760812][ T7725] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.656: invalid indirect mapped block 4294967295 (level 1) [ 330.760848][ T7725] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 330.761723][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 330.761741][ C1] EXT4-fs (loop3): initial error at time 1781156230: ext4_free_branches:1023: inode 11 [ 330.761767][ C1] EXT4-fs (loop3): last error at time 1781156230: ext4_free_branches:1023: inode 11 [ 330.763622][ T7725] EXT4-fs (loop3): Remounting filesystem read-only [ 330.763925][ T7725] EXT4-fs (loop3): 2 truncates cleaned up [ 330.770649][ T7725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.262015][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.055340][ T7767] loop0: detected capacity change from 0 to 512 [ 335.059619][ T7767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.103231][ T7767] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.665: invalid indirect mapped block 4294967295 (level 1) [ 335.103261][ T7767] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 335.112106][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 335.112127][ C0] EXT4-fs (loop0): initial error at time 1781156234: ext4_free_branches:1023: inode 11 [ 335.112153][ C0] EXT4-fs (loop0): last error at time 1781156234: ext4_free_branches:1023: inode 11 [ 335.174097][ T7767] EXT4-fs (loop0): Remounting filesystem read-only [ 335.174390][ T7767] EXT4-fs (loop0): 2 truncates cleaned up [ 335.440509][ T7767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.521962][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.645580][ T0] ------------[ cut here ]------------ [ 340.645591][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 340.645601][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#1: swapper/1/0 [ 340.645630][ T0] Modules linked in: [ 340.645662][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 340.645678][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.645689][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 340.645710][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 5a 8b 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 76 [ 340.645722][ T0] RSP: 0000:ffffc900001e7bf8 EFLAGS: 00010097 [ 340.645734][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 340.645744][ T0] RDX: ffff888038649f00 RSI: ffffffff8d8bbd05 RDI: ffffffff8baa4380 [ 340.645754][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 340.645763][ T0] R10: ffff8880b873c910 R11: ffffffff8199a020 R12: dffffc0000000000 [ 340.645773][ T0] R13: ffffffff8d8f1798 R14: ffff88801da95d00 R15: ffff8880b873c620 [ 340.645784][ T0] FS: 0000000000000000(0000) GS:ffff888125fbb000(0000) knlGS:0000000000000000 [ 340.645795][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.645805][ T0] CR2: 0000555569415a48 CR3: 0000000042634000 CR4: 00000000003526f0 [ 340.645817][ T0] Call Trace: [ 340.645826][ T0] [ 340.645835][ T0] put_prev_task_idle+0xd/0x20 [ 340.645849][ T0] __schedule+0x3da0/0x5550 [ 340.645882][ T0] ? trace_irq_disable+0x3b/0x140 [ 340.645903][ T0] ? __pfx___schedule+0x10/0x10 [ 340.645916][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 340.645941][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 340.645965][ T0] schedule_idle+0x51/0x90 [ 340.645981][ T0] do_idle+0x4a6/0x540 [ 340.646004][ T0] ? __pfx_do_idle+0x10/0x10 [ 340.646031][ T0] cpu_startup_entry+0x43/0x60 [ 340.646052][ T0] start_secondary+0x101/0x110 [ 340.646070][ T0] common_startup_64+0x13e/0x157 [ 340.646096][ T0] [ 340.646104][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 340.646114][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 340.646130][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.646137][ T0] Call Trace: [ 340.646143][ T0] [ 340.646148][ T0] vpanic+0x56c/0xa60 [ 340.646168][ T0] ? __pfx__printk+0x10/0x10 [ 340.646182][ T0] ? __pfx_vpanic+0x10/0x10 [ 340.646200][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 340.646225][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 340.646252][ T0] panic+0xc5/0xd0 [ 340.646271][ T0] ? __pfx_panic+0x10/0x10 [ 340.646301][ T0] ? common_startup_64+0x13e/0x157 [ 340.646326][ T0] __warn+0x315/0x4c0 [ 340.646347][ T0] ? update_curr_idle+0x1cf/0x260 [ 340.646358][ T0] ? update_curr_idle+0x1cf/0x260 [ 340.646368][ T0] __report_bug+0x339/0x540 [ 340.646385][ T0] ? update_curr_idle+0x1cf/0x260 [ 340.646395][ T0] ? __pfx___report_bug+0x10/0x10 [ 340.646412][ T0] ? pick_task_fair+0x21a/0x1410 [ 340.646424][ T0] ? update_curr_idle+0x1cf/0x260 [ 340.646433][ T0] report_bug+0x16a/0x220 [ 340.646446][ T0] ? update_curr_idle+0x1cf/0x260 [ 340.646455][ T0] ? update_curr_idle+0x1d1/0x260 [ 340.646464][ T0] handle_bug+0x9c/0x200 [ 340.646482][ T0] exc_invalid_op+0x1a/0x50 [ 340.646497][ T0] asm_exc_invalid_op+0x1a/0x20 [ 340.646507][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 340.646517][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 5a 8b 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 76 [ 340.646525][ T0] RSP: 0000:ffffc900001e7bf8 EFLAGS: 00010097 [ 340.646534][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 340.646541][ T0] RDX: ffff888038649f00 RSI: ffffffff8d8bbd05 RDI: ffffffff8baa4380 [ 340.646548][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 340.646555][ T0] R10: ffff8880b873c910 R11: ffffffff8199a020 R12: dffffc0000000000 [ 340.646562][ T0] R13: ffffffff8d8f1798 R14: ffff88801da95d00 R15: ffff8880b873c620 [ 340.646571][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 340.646585][ T0] ? update_curr_idle+0xab/0x260 [ 340.646596][ T0] put_prev_task_idle+0xd/0x20 [ 340.646605][ T0] __schedule+0x3da0/0x5550 [ 340.646626][ T0] ? trace_irq_disable+0x3b/0x140 [ 340.646641][ T0] ? __pfx___schedule+0x10/0x10 [ 340.646651][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 340.646667][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 340.646684][ T0] schedule_idle+0x51/0x90 [ 340.646695][ T0] do_idle+0x4a6/0x540 [ 340.646717][ T0] ? __pfx_do_idle+0x10/0x10 [ 340.646736][ T0] cpu_startup_entry+0x43/0x60 [ 340.646752][ T0] start_secondary+0x101/0x110 [ 340.646764][ T0] common_startup_64+0x13e/0x157 [ 340.646781][ T0] [ 341.711287][ T0] Shutting down cpus with NMI [ 341.711618][ T0] Kernel Offset: disabled