last executing test programs: 7.730582617s ago: executing program 3 (id=14): syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) 6.856280732s ago: executing program 1 (id=20): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000500)="1234567890", 0xa, 0x0, &(0x7f0000000600)={0x2, 0x1f90, @loopback}, 0x10) 6.722906442s ago: executing program 1 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x118}}, 0x0) 6.666941547s ago: executing program 4 (id=22): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='A', 0x10}], 0x1}, 0x0) 6.480704036s ago: executing program 4 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r2, &(0x7f0000000400)="45000014000000004004732a7f0000017f000001", 0x14, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000400)="45000014000000004004732a7f0000017f000001", 0x14, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000400)="45000014000000004004732a7f0000017f000001", 0x14, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) r3 = socket$inet(0x2, 0x3, 0x4) recvfrom(r3, &(0x7f0000000600)=""/256, 0x100, 0x40, 0x0, 0x0) 6.467151119s ago: executing program 1 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) syz_emit_ethernet(0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000190640fe800000000000000000000000000001fe8000000000000000000000000000014e234e220000000100000001501010000000000068656c6c6f"], 0x0) syz_emit_ethernet(0x57, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000190640fe800000000000000000000000000001fe8000000000000000000000000000014e234e220000000200000002501010000000000068656c6c6f"], 0x0) 6.270646609s ago: executing program 4 (id=25): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255}, 0x0, 0x1, 0x0, 0x0) 6.110234058s ago: executing program 2 (id=26): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001e00)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.826815166s ago: executing program 3 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.682806065s ago: executing program 4 (id=29): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) socket(0x400000000010, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0xcb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 5.526984383s ago: executing program 3 (id=31): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 5.455381217s ago: executing program 1 (id=32): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 5.441191043s ago: executing program 0 (id=33): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.39648747s ago: executing program 4 (id=34): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='bye', 0x3}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 5.081833209s ago: executing program 3 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.794711013s ago: executing program 2 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x49f7, 0xffff, 0x6}}}}]}, 0x44}}, 0x400) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@delchain={0x24, 0x66, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x9, 0xd}, {0x1, 0xfff1}, {0xc, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000881}, 0x49090) 4.623433385s ago: executing program 1 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000000000000000000000000000e2a074576347ec733d22061c05f79963813f4ced7c080dc5f119c7cbed9fb7711834dc6e2965bdd48dae31f2aad3b50a8a756d4aaa3fa6505433aa6e872218473ee5f32bc355d75f2e604c434ddb5104aacb734df0e0cbf7e6a3f488ab25eb7bbd211acac0611af138e1656a855ccf2bd284bd5f37243fe7188cac958da4cfefa9300ea471552095efe66cf9f7695ff22dfa34c16d7d7f5367594f237e8baad9816a12f8a1e501e4fe54be5f5f767f648846ea9e84bc0c2bd79460b6fa8f39b0d1dee693ccbfcf50261df1f99b9ee4cae45283e4c2"]) 4.544826279s ago: executing program 3 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0000000080211000001080211000000505050505050a50008"], 0x48}}, 0x0) 4.451621697s ago: executing program 2 (id=39): openat$sequencer(0xffffffffffffff9c, 0x0, 0x140, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) 4.355146857s ago: executing program 3 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000a00) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) read(0xffffffffffffffff, &(0x7f0000000180)=""/236, 0xec) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0xfa}, 0x2) msgget(0x1, 0x220) msgrcv(0x0, &(0x7f0000002240)={0x0, ""/204}, 0xd4, 0x0, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 4.264342288s ago: executing program 4 (id=41): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x11a) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x11) r2 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e5e, &(0x7f0000000400)={0x0, 0x6da9, 0x2000, 0x7, 0x2c}, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000240)) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000900)={0x0, @reserved}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e22, 0x1, @loopback, 0x5}, 0x1c) syz_open_dev$vivid(0x0, 0x0, 0x2) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = socket(0x23, 0x80000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x8000000, 0x1, 0xff, 0x1, 0x0, 0x400}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0xc, 0x4}, 0x20) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) 4.184325206s ago: executing program 0 (id=42): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x100, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@private=0xa010101, 0x12345678, 0x32}, @in=@private=0xa010101, {}, {}, {}, 0x0, 0x0, 0x2}}, 0x100}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="940000002900010000000000000000000a01010100000000000000000000000012345678320202000a0101020000000000000000000000000a010101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x94}], 0x1}, 0x0) 4.073042998s ago: executing program 2 (id=43): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x2, 0x84) 3.716706614s ago: executing program 2 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000580)="1001000013000500000000000000000007000000040000000000000000000000f0001a80ec000780e80005802400018008000100010000000800020000000000080003000000000008000400030000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000400000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a000200001122334455000008000300010000000800040001000000080005000100000005000600010000000800070001000000", 0x108) 3.716439232s ago: executing program 0 (id=45): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x80) 3.576209719s ago: executing program 0 (id=46): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='bridge0\x00') ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_names='syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000010), 0x10, &(0x7f0000000320)={&(0x7f0000000340)=@setlink={0x0, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000440)={'syz_tun\x00', 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x40, 0x2, 0x0, @local, @multicast1}, {0x22, 0x0, 0x0, @multicast1, "0000000101000001e000000112345678"}}}}}, 0x0) 3.539234647s ago: executing program 2 (id=47): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r2, 0x0, 0x0) 3.356394605s ago: executing program 0 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd, 0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x1, [@m_nat={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @private=0xa010100, @private=0xa010101, 0xffffffff}}]}, {0x7, 0x3, "001122"}, {0xc, 0x4}, {0xc, 0x5}}}]}]}}]}, 0x94}}, 0x0) write(r0, &(0x7f0000000300)="000008004500001c00010000400100000a0000010a0000020800f7ff00000000", 0x20) 3.162168733s ago: executing program 0 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 1 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@ipv4_newroute={0x0, 0x18, 0x605, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x0, 0x1, @empty}, @RTA_OIF={0x0, 0x4, r2}]}, 0x1}}, 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 73.971247][ T5611] cgroup: Unknown subsys name 'net' [ 74.086520][ T5611] cgroup: Unknown subsys name 'cpuset' [ 74.095559][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.467218][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.628661][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.640853][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.646475][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.649122][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.656530][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.665233][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.674603][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.686186][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.687611][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.694165][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.701931][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.716461][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.717592][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.723629][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.734062][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.739588][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.745613][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.754405][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.761851][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.766310][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.779978][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.782124][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.794250][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.794330][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.816732][ T4943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.763918][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.771716][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.779288][ T5641] bridge_slave_0: entered allmulticast mode [ 78.786413][ T5641] bridge_slave_0: entered promiscuous mode [ 78.830178][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.837688][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.845151][ T5641] bridge_slave_1: entered allmulticast mode [ 78.852254][ T5641] bridge_slave_1: entered promiscuous mode [ 78.917374][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.924740][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.931943][ T5644] bridge_slave_0: entered allmulticast mode [ 78.939405][ T5644] bridge_slave_0: entered promiscuous mode [ 78.956357][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.963548][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.970797][ T5643] bridge_slave_0: entered allmulticast mode [ 78.978017][ T5643] bridge_slave_0: entered promiscuous mode [ 79.004974][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.012154][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.020611][ T5644] bridge_slave_1: entered allmulticast mode [ 79.028083][ T5644] bridge_slave_1: entered promiscuous mode [ 79.038256][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.047526][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.055233][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.062372][ T5643] bridge_slave_1: entered allmulticast mode [ 79.069509][ T5643] bridge_slave_1: entered promiscuous mode [ 79.106087][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.134865][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.142061][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.150213][ T5645] bridge_slave_0: entered allmulticast mode [ 79.157465][ T5645] bridge_slave_0: entered promiscuous mode [ 79.190330][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.197568][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.205158][ T5646] bridge_slave_0: entered allmulticast mode [ 79.212385][ T5646] bridge_slave_0: entered promiscuous mode [ 79.219810][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.227159][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.234459][ T5645] bridge_slave_1: entered allmulticast mode [ 79.241877][ T5645] bridge_slave_1: entered promiscuous mode [ 79.251100][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.273430][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.282667][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.289944][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.297337][ T5646] bridge_slave_1: entered allmulticast mode [ 79.304574][ T5646] bridge_slave_1: entered promiscuous mode [ 79.322928][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.334174][ T5641] team0: Port device team_slave_0 added [ 79.345004][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.383491][ T5641] team0: Port device team_slave_1 added [ 79.410055][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.449550][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.460781][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.480965][ T5644] team0: Port device team_slave_0 added [ 79.499052][ T5643] team0: Port device team_slave_0 added [ 79.506832][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.536516][ T5644] team0: Port device team_slave_1 added [ 79.543225][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.550267][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.576189][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.589711][ T5643] team0: Port device team_slave_1 added [ 79.619736][ T5645] team0: Port device team_slave_0 added [ 79.636233][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.643463][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.669577][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.692249][ T5646] team0: Port device team_slave_0 added [ 79.700120][ T5645] team0: Port device team_slave_1 added [ 79.731464][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.738541][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.764971][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.777960][ T5646] team0: Port device team_slave_1 added [ 79.792857][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.800490][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.826660][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.838244][ T4943] Bluetooth: hci1: command tx timeout [ 79.838250][ T5640] Bluetooth: hci0: command tx timeout [ 79.844160][ T5640] Bluetooth: hci2: command tx timeout [ 79.854679][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.862579][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.888992][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.910043][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.913349][ T5640] Bluetooth: hci4: command tx timeout [ 79.917750][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.923687][ T4943] Bluetooth: hci3: command tx timeout [ 79.950951][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.967750][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.974763][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.000938][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.036057][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.043366][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.069897][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.102676][ T5641] hsr_slave_0: entered promiscuous mode [ 80.109257][ T5641] hsr_slave_1: entered promiscuous mode [ 80.116404][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.123651][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.149777][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.187585][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.194801][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.221166][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.256006][ T5643] hsr_slave_0: entered promiscuous mode [ 80.262268][ T5643] hsr_slave_1: entered promiscuous mode [ 80.268558][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 80.274449][ T5643] Cannot create hsr debugfs directory [ 80.301408][ T5644] hsr_slave_0: entered promiscuous mode [ 80.307816][ T5644] hsr_slave_1: entered promiscuous mode [ 80.314498][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 80.320245][ T5644] Cannot create hsr debugfs directory [ 80.378949][ T5645] hsr_slave_0: entered promiscuous mode [ 80.385422][ T5645] hsr_slave_1: entered promiscuous mode [ 80.391908][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 80.398067][ T5645] Cannot create hsr debugfs directory [ 80.515481][ T5646] hsr_slave_0: entered promiscuous mode [ 80.521802][ T5646] hsr_slave_1: entered promiscuous mode [ 80.528564][ T5646] debugfs: 'hsr0' already exists in 'hsr' [ 80.534365][ T5646] Cannot create hsr debugfs directory [ 80.944012][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.962505][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.973818][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.984654][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.993849][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.005181][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.021303][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.030542][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.088740][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.101926][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.116079][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.126684][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.135670][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.149870][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.158552][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.168274][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.247345][ T5644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.257319][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.266647][ T5644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.277995][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.286066][ T5644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.295525][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.304487][ T5644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.313601][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.432757][ T5645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.444372][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.452883][ T5645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.464517][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.472469][ T5645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.482444][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.490538][ T5645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.500117][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.555667][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.625058][ T5646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.636315][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.657046][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.665561][ T5646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.677981][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.688202][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.702923][ T5646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.712623][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.720777][ T5646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.730361][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.744382][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.751941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.794451][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.801915][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.833996][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.866313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.873509][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.903804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.910924][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.914833][ T4943] Bluetooth: hci1: command tx timeout [ 81.918560][ T5640] Bluetooth: hci2: command tx timeout [ 81.918587][ T5640] Bluetooth: hci0: command tx timeout [ 81.993818][ T4943] Bluetooth: hci3: command tx timeout [ 81.994390][ T5637] Bluetooth: hci4: command tx timeout [ 82.026338][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.047351][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.107572][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.117370][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.139709][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.159020][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.166194][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.189192][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.196410][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.221153][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.230218][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.237412][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.248030][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.255169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.288597][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.318867][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.326065][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.367693][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.387153][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.394353][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.484654][ T5641] veth0_vlan: entered promiscuous mode [ 82.538019][ T5641] veth1_vlan: entered promiscuous mode [ 82.548131][ T5643] veth0_vlan: entered promiscuous mode [ 82.562776][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.590646][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.626128][ T5643] veth1_vlan: entered promiscuous mode [ 82.669403][ T5641] veth0_macvtap: entered promiscuous mode [ 82.695771][ T5641] veth1_macvtap: entered promiscuous mode [ 82.715320][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.778416][ T5644] veth0_vlan: entered promiscuous mode [ 82.789035][ T5643] veth0_macvtap: entered promiscuous mode [ 82.799919][ T5645] veth0_vlan: entered promiscuous mode [ 82.814065][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.828394][ T5643] veth1_macvtap: entered promiscuous mode [ 82.844515][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.860706][ T5644] veth1_vlan: entered promiscuous mode [ 82.888601][ T3271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.899285][ T3271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.915856][ T5645] veth1_vlan: entered promiscuous mode [ 82.924606][ T3271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.947805][ T3271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.977184][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.011315][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.059458][ T5644] veth0_macvtap: entered promiscuous mode [ 83.067569][ T133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.088329][ T5646] veth0_vlan: entered promiscuous mode [ 83.096635][ T133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.106787][ T133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.127382][ T5644] veth1_macvtap: entered promiscuous mode [ 83.146238][ T133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.208859][ T5646] veth1_vlan: entered promiscuous mode [ 83.218718][ T5645] veth0_macvtap: entered promiscuous mode [ 83.239049][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.248428][ T5645] veth1_macvtap: entered promiscuous mode [ 83.261407][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.278808][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.292096][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.343849][ T3271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.355481][ T3271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.378281][ T3271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.401256][ T3271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.403985][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.419176][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.422991][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.433706][ T5646] veth0_macvtap: entered promiscuous mode [ 83.470751][ T5646] veth1_macvtap: entered promiscuous mode [ 83.506329][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.527923][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.536689][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.564906][ T133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.569965][ T5641] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.588717][ T133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.588772][ T133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.588807][ T133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.646861][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.656304][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.658058][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.736940][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.828974][ T133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.838524][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.846743][ T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.847229][ T33] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.864792][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.896946][ T33] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.946750][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.960724][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.986648][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.999888][ T5637] Bluetooth: hci1: command tx timeout [ 83.999916][ T4943] Bluetooth: hci0: command tx timeout [ 83.999948][ T4943] Bluetooth: hci2: command tx timeout [ 84.045799][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.074112][ T4943] Bluetooth: hci3: command tx timeout [ 84.075222][ T5637] Bluetooth: hci4: command tx timeout [ 84.167594][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.185968][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.326507][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.358858][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.477126][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.501503][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.938049][ T5741] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.154982][ T5742] netlink: 'syz.0.6': attribute type 20 has an invalid length. [ 85.989679][ T5759] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 86.073714][ T5637] Bluetooth: hci2: command tx timeout [ 86.084929][ T5637] Bluetooth: hci1: command tx timeout [ 86.084985][ T4943] Bluetooth: hci0: command tx timeout [ 86.155847][ T4943] Bluetooth: hci4: command tx timeout [ 86.155863][ T5637] Bluetooth: hci3: command tx timeout [ 86.191415][ T5759] veth3: entered allmulticast mode [ 88.175947][ T5804] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET) [ 89.270102][ T5830] syzkaller0: entered promiscuous mode [ 89.293225][ T5830] syzkaller0: entered allmulticast mode [ 89.341281][ T5830] tipc: Started in network mode [ 89.362332][ T5830] tipc: Node identity ba28a2609fe, cluster identity 4711 [ 89.386905][ T5830] tipc: Enabled bearer , priority 0 [ 89.436260][ T5829] tipc: Resetting bearer [ 89.486171][ T5829] tipc: Disabling bearer [ 89.800382][ T5841] netlink: 'syz.2.39': attribute type 11 has an invalid length. [ 90.279857][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.42'. [ 90.528428][ T5864] Zero length message leads to an empty skb [ 90.843499][ T5870] netlink: 'syz.0.48': attribute type 13 has an invalid length. [ 91.056520][ T5703] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.136598][ T24] cfg80211: failed to load regulatory.db [ 133.563522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 142.063395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 144.213118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 146.363546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.863361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.013151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 159.163509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 165.104076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.253147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 169.403502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 234.593123][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 234.600161][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4994/1:b..l [ 234.608368][ C1] rcu: (detected by 1, t=10503 jiffies, g=14973, q=961 ncpus=2) [ 234.616202][ C1] task:udevd state:R running task stack:23976 pid:4994 tgid:4994 ppid:1 task_flags:0x400140 flags:0x00080000 [ 234.630409][ C1] Call Trace: [ 234.633708][ C1] [ 234.636645][ C1] __schedule+0x17d9/0x56c0 [ 234.641199][ C1] ? trace_sched_exit_tp+0x3a/0x130 [ 234.646414][ C1] ? __pfx___schedule+0x10/0x10 [ 234.651269][ C1] ? __lock_acquire+0x683/0x2cf0 [ 234.656321][ C1] preempt_schedule_irq+0x4d/0xa0 [ 234.661370][ C1] irqentry_exit+0x14f/0x8f0 [ 234.665980][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 234.671478][ C1] RIP: 0010:lock_acquire+0x34/0x350 [ 234.676710][ C1] Code: 55 41 54 53 48 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3 49 89 fd 48 8b ac 24 98 00 00 00 65 48 8b 05 2c 6c ca 11 <48> 89 44 24 58 0f 1f 44 00 00 65 8b 05 2f 6c ca 11 83 f8 08 0f 83 [ 234.696320][ C1] RSP: 0018:ffffc90002faf440 EFLAGS: 00000282 [ 234.702390][ C1] RAX: 8a0e06e90c3ee200 RBX: 0000000000000000 RCX: 0000000000000002 [ 234.710358][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb59c60 [ 234.718327][ C1] RBP: ffffffff8177827f R08: 0000000000000000 R09: 0000000000000000 [ 234.726300][ C1] R10: ffffc90002faf5d8 R11: ffffffff81b1fa10 R12: 0000000000000002 [ 234.734273][ C1] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000000 [ 234.742250][ C1] ? unwind_next_frame+0x8f/0x2550 [ 234.747374][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.753556][ C1] ? unwind_next_frame+0x8f/0x2550 [ 234.758690][ C1] ? kasan_save_track+0x3e/0x80 [ 234.763601][ C1] ? unwind_next_frame+0x8f/0x2550 [ 234.768729][ C1] unwind_next_frame+0xac/0x2550 [ 234.773684][ C1] ? unwind_next_frame+0x8f/0x2550 [ 234.778802][ C1] ? stack_trace_save+0xa9/0x100 [ 234.783752][ C1] ? unwind_next_frame+0x8f/0x2550 [ 234.788880][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.795074][ C1] arch_stack_walk+0x11b/0x150 [ 234.799854][ C1] ? kasan_save_track+0x3e/0x80 [ 234.804731][ C1] stack_trace_save+0xa9/0x100 [ 234.809598][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 234.814989][ C1] ? stack_trace_save+0xa9/0x100 [ 234.819935][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 234.825329][ C1] kasan_save_track+0x3e/0x80 [ 234.830293][ C1] ? kasan_save_track+0x3e/0x80 [ 234.835200][ C1] __kasan_slab_alloc+0x6c/0x80 [ 234.840060][ C1] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 234.845622][ C1] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 234.851252][ C1] ? security_file_alloc+0x34/0x310 [ 234.856460][ C1] ? security_file_alloc+0x34/0x310 [ 234.861687][ C1] security_file_alloc+0x34/0x310 [ 234.866749][ C1] init_file+0x90/0x2b0 [ 234.870912][ C1] alloc_empty_file+0x74/0x1d0 [ 234.875697][ C1] path_openat+0x8f/0x3830 [ 234.880113][ C1] ? kasan_save_free_info+0x40/0x50 [ 234.885312][ C1] ? __kasan_slab_pre_free+0xd1/0x120 [ 234.890705][ C1] ? kasan_save_track+0x4f/0x80 [ 234.895588][ C1] ? kasan_save_track+0x3e/0x80 [ 234.900467][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 234.905506][ C1] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 234.911494][ C1] ? do_getname+0x2e/0x250 [ 234.915920][ C1] ? do_sys_openat2+0xcc/0x200 [ 234.920693][ C1] ? __x64_sys_openat+0x138/0x170 [ 234.925723][ C1] ? do_syscall_64+0x174/0x580 [ 234.930581][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.936677][ C1] ? __lock_acquire+0x683/0x2cf0 [ 234.941639][ C1] do_file_open+0x23e/0x4a0 [ 234.946148][ C1] ? __pfx_do_file_open+0x10/0x10 [ 234.951194][ C1] ? _raw_spin_unlock+0x28/0x50 [ 234.956042][ C1] ? alloc_fd+0x651/0x6c0 [ 234.960473][ C1] do_sys_openat2+0x115/0x200 [ 234.965162][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.970382][ C1] __x64_sys_openat+0x138/0x170 [ 234.975256][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.981346][ C1] do_syscall_64+0x174/0x580 [ 234.985963][ C1] ? clear_bhb_loop+0x40/0x90 [ 234.990744][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.996660][ C1] RIP: 0033:0x7fbe38f15c3a [ 235.001188][ C1] RSP: 002b:00007ffe2eafd3d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 235.009620][ C1] RAX: ffffffffffffffda RBX: 00005585db13e7b0 RCX: 00007fbe38f15c3a [ 235.017608][ C1] RDX: 0000000000090800 RSI: 00005585db10d190 RDI: 00000000ffffff9c [ 235.025595][ C1] RBP: 00005585db10d190 R08: 0000000000000000 R09: 0000000000000001 [ 235.033664][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00005585db10a7b0 [ 235.041638][ C1] R13: 00000000000000ff R14: 00005585ccbb3be0 R15: 00007ffe2eafd660 [ 235.049641][ C1] [ 235.052670][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g14973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 235.064995][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=3133 [ 235.072788][ C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g14973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 235.084148][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 235.094113][ C1] rcu: RCU grace-period kthread stack dump: [ 235.099995][ C1] task:rcu_preempt state:I stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 235.111925][ C1] Call Trace: [ 235.115202][ C1] [ 235.118142][ C1] __schedule+0x17d9/0x56c0 [ 235.122677][ C1] ? __pfx___schedule+0x10/0x10 [ 235.127543][ C1] ? schedule+0x90/0x2b0 [ 235.131785][ C1] schedule+0x164/0x2b0 [ 235.135938][ C1] schedule_timeout+0x152/0x2c0 [ 235.140802][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 235.146188][ C1] ? __pfx_process_timeout+0x10/0x10 [ 235.151480][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 235.157284][ C1] ? prepare_to_swait_event+0x322/0x350 [ 235.162833][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 235.167691][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.172889][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 235.178706][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 235.184084][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 235.189284][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 235.195091][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 235.199692][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 235.204897][ C1] ? __kthread_parkme+0x71/0x1f0 [ 235.209839][ C1] ? __kthread_parkme+0x196/0x1f0 [ 235.214873][ C1] kthread+0x388/0x470 [ 235.218950][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 235.224164][ C1] ? __pfx_kthread+0x10/0x10 [ 235.228764][ C1] ret_from_fork+0x514/0xb70 [ 235.233367][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 235.238492][ C1] ? __switch_to+0xc89/0x1420 [ 235.243265][ C1] ? __pfx_kthread+0x10/0x10 [ 235.247869][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.252677][ C1] [ 235.255697][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 235.262126][ C1] Sending NMI from CPU 1 to CPUs 0: [ 235.267342][ C0] NMI backtrace for cpu 0 [ 235.267371][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 235.267406][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 235.267424][ C0] RIP: 0010:__asan_memset+0x4/0x50 [ 235.267458][ C0] Code: ba 01 00 00 00 e9 5c e5 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 [ 235.267472][ C0] RSP: 0018:ffffc90000007d50 EFLAGS: 00000046 [ 235.267486][ C0] RAX: 1ffff110043da660 RBX: ffff8880b8628360 RCX: dffffc0000000000 [ 235.267499][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff888021ed3318 [ 235.267510][ C0] RBP: ffff888021ed3318 R08: ffffffff9aa5adf3 R09: 1ffffffff354b5be [ 235.267522][ C0] R10: dffffc0000000000 R11: fffffbfff354b5bf R12: 0000000000000000 [ 235.267534][ C0] R13: dffffc0000000000 R14: 1ffff110043da663 R15: ffff888021ed3300 [ 235.267546][ C0] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 235.267560][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.267571][ C0] CR2: 00002000002c9030 CR3: 0000000058454000 CR4: 00000000003526f0 [ 235.267585][ C0] Call Trace: [ 235.267593][ C0] [ 235.267598][ C0] rb_erase_linked+0x142/0x170 [ 235.267621][ C0] __remove_hrtimer+0xf7/0x3e0 [ 235.267644][ C0] __hrtimer_run_queues+0x295/0xa10 [ 235.267671][ C0] hrtimer_interrupt+0x448/0x910 [ 235.267701][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 235.267726][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 235.267744][ C0] [ 235.267750][ C0] [ 235.267755][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.267774][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 235.267791][ C0] Code: dc 7e 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 8e 18 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 235.267804][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000242 [ 235.267817][ C0] RAX: 00000000000b7e6b RBX: ffffffff819b4450 RCX: 0000000080000001 [ 235.267829][ C0] RDX: 0000000000000001 RSI: ffffffff8e22d06b RDI: ffffffff8c4bdc80 [ 235.267840][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 235.267852][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 235.267863][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 235.267878][ C0] ? do_idle+0x2e0/0x540 [ 235.267904][ C0] default_idle+0x9/0x20 [ 235.267924][ C0] default_idle_call+0x72/0xb0 [ 235.267944][ C0] do_idle+0x2e0/0x540 [ 235.267967][ C0] ? __pfx_do_idle+0x10/0x10 [ 235.267989][ C0] ? do_idle+0x4cb/0x540 [ 235.268012][ C0] cpu_startup_entry+0x43/0x60 [ 235.268034][ C0] rest_init+0x2de/0x300 [ 235.268057][ C0] start_kernel+0x392/0x3e0 [ 235.268082][ C0] x86_64_start_reservations+0x24/0x30 [ 235.268099][ C0] x86_64_start_kernel+0x137/0x1b0 [ 235.268116][ C0] common_startup_64+0x13e/0x157 [ 235.268143][ C0]