last executing test programs: 11.948276211s ago: executing program 2 (id=3): bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 11.15737243s ago: executing program 1 (id=2): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r4 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x40004) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x1, r7, 0x3}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000680)="081a6b8ce3fd45478902fda3e7da351a560e587f047a5a4648a3860f8bf14126703ba3c8286e3fe4a7152aaba14db99c5f02f674a0c6c4ba7eff066ea077a6213da846c917072d92d45534d0fc686bdf46b501567f62778d8bd5a8f5abc838201493c402e4579c567be6d27b2623efd1d23b0c5b7c649a94533fbb69e20d15c546857c3bbe29fd405b6a837489ad86e95e9dbb7b297add7e16df150fd3f3805d0696a871b3d0342fa60debe4d80883b8747cf8986f051240d457e172142b782a72894844e19a008266f9b8a777023378a7c497bc9a688e89d09f67cf0926384984ed65e59c2bd92f01ed0c7b0a5dfe6663ad44175900fcb05735ea5e8b2277e931b2a2b68ceed92e103001e456ac388173316191fe35401c5e94ee773da034911bdef12cbdeb8fdf802bace4d194d59026aaf1f903a0019f3bffed3c608583b52478a4099f3e70563273b7542fdcce91f880e946ca6db810c41138da6ce1055bc37c6a6bffbd083a0d48c3936a336c15449610156d533862da4ab3d8f89ef37039672ba42e5b06ff24ac22153ec5b654f8a48ba72100a202234e7a62e14c5b59754374d01c4ebfecfc019244363e5819aae0473a793e364258f3d21ebd052d6d1e15092241fb681bcb4bc1575edd0c345b9e1aae6ef9cbb1056cf4e43c73b5419bb23826769a9e9c3502debd087a1f9dbe934576b9a737667abedd0f57a9767aff85bbd3dee36e211c04923e983130a1359ab2bbf8361c40c39c44ace354c8dc00295486a6124b0c89e77b9f5ae69d4b5f7022ba0cda3a2c878ac313d7764c7af121a709d4b0b99fb38bc7a8590b63615a503e7f69e58359aba5b34381830ed6ab640dcc4310b44112c2b51fb4a1fc5b691bfb6fe5590451de93584e85ac59dd50e85f3983ac37e07704f65526b13a53732fdccb6bf31584fe2a1bc38de4e7f4fd3f6da2ae4f937757581e76ca4c2ba10f7699f43293dc4ac1a4f63d0c6e5e6cac6ee22b911694b1292a6ff842acd700a92a708587dc8fbc5a86b5a46573a252bad8d9d9d86b39261b89e17e92c35d14df572e61a15419b57c4b12b2b188d725346705f947eed7dd7366a3b618da62ebf7f71e2ad8f0234278fd76a66a105ba22b7dde9355f8b882397c44bbaf17cc70a097e6eeee349c1babf0b785c692302238c555bfe6e5093b199405cd70d6ddb0273639000ad06111d59ee952cbd1f59514fc07cb6d42149389ad8a0aefba0482080df50b02842d12d60139f3c0e93318395b48b85a7439847c8a7729e25a3c808841e163da854c73df644057daaa675ecc18387b0adc4948f7b67f4a9f5b76df74e6863810675f588890328b58cfa7ee1d7ae298b13bcdea92853861717984a303bd844f7ec9786ffcdc036796351d1067d4cf9fe18ddbb3687d9cf3691bc89bf64580fbda7b6e5c7596ebc2caee1dd25754274ab0604115b60f8f48f009a281067ba17e377d312fd1458560bc46478001001a5f25410cef8e3a55d4837645b740462c4d8c21aabeef2e60812f64586723d8be5c898dd1d21e8aaebfffe630efb67e3b0f661d4b84f9f7a35c77e751dc35e20a17e379f17d1567dd8284fb722b30c6b8ff028a83d830cd5a6e5eb89605ac5c939b1d4e91b6fa51a193d95e3492885c15549294a0c10f409e4fa02fd42ea12f4bb513932500fea60d9a623d0cc1ae0a97a1618d35f5eeabf900ceae31224381b3ca48c4a8721a3dafe72d552a110a18e9c7f2b58cac7debd3be0dcb56d48c63f708fcb6a9ef73f2312919d189913f44a03a92f711d9dd834029d8510fc6da64e82f4a6ef2c6b4940db50ff58f2c49f0485add8cab03baad4d9cb74f764ef0e9a63294cc2e5a5a403ec70d9346f1ab7286a13bb5fd677543deba4826c8ff8f191f04b9c548c547d1acf3448c7837be513a60b1a3424d1e303d5f48d70c6456bb7783fd3efbbfea9dadbc36d9d349d3530de30807bc6a7a8c0e4893e09e9ea80f590df8bb0dbd54758809852b28379d924a82d0ba6a3da6b1d767260a806c57de1bfb3a9cd0ba55140e0e267ddffc64db30568674a5fa9ee8f9d86b58d320beb5d605e47521bea378b5e9bad330392f398db64f76d77e73543070d0606d646c53d1443c2b3a0937f514b618494cde166ec6d18d48298954b4490cd3802f55a978bfab16dc3f098f5dcee0844f3084ad619cf896a9c67b56e61f6584b7e3ada62b89f996ab763d88f30ebe153bf3790c753925fc0c3b2b375da8d5fd2ba3aec57b11682e166866e5113748d611c1bf451014fa802722bd5b329376e1615fcf8be69ceac0f2b8f85dad792e69ea5912dff739ae002e6ecc056ffe69037e5ad44aedb3332414f64aa4cf6092bed897dee4d55ce62ea279fdebb5f6b76ddd924b105cefd40fa18c88c75470d74d56f936eb93ed82198620cab1f97186f6775915de6ff214cf78f1ba617c6b7ed4de8303e776b5d88f684d518bfde614a150d9dc95c2d4ab04e02cd1d015e80ace04f3f6c082a764d9ddec4949d544b5e6ed77ee0d6124d965b3482830624eac4adf41de60411a20384cd12eb4895d9d8eb5717406602ce5bd3e1ce1b905ce4dbbafc8eec68ff37caf2357f4285bb11c8a6b1080dc037d35dba6fcaf1d6986c1a786bde3f266b6a45f40f046ea263a1099e6d79b232e3f5f6872edd65269e8a26b718ea8c0d4417a776bf573a6aa4a317edf394afb862ace7b2f89c80d44360cfd496f0646d08eeee8227c6c8d838aa9b887d827f804da15ab7768c1ce98a83a44e515519d4abca07751efaab805b4b9ae59bb4ff16216ebc014450b675fb5a85fc9c02d69ec53fa1b8be26b4770c4fe5e727c2c124183ad949d25a2c714066b3fca88776ee045a5656f1dd382a87c0e144f714ad4dc7de200a997415e58e46b32c6e9dcc93eb8aa4d0aade711293aba051d0000943647ff96590a74a66a721871bfefa1ad93167b5b94bd9035e9769eae2914344197d330a7ea2c8ee93d12ca65d64a26eea2d50a7e052f516367755a42d6dc675cb212cd809f4980a3b806bf5fca6a84fdc027d5092eee43bd72cf6c5a4f1e34d44aced725eea97e66b5695f6d715945bf34ac26dbb65ac125b5193337a0f835815738bd055188617dc5cc60ba79471e370dfe5a3cce35c4f4620e8a9ca3b5a03839347d93304a4c5832331da4086c9b472b11171a2ee04b7b66c9b827ba9d0a1b1c20780f12d6873ba80283d6f65061016e27b2500d9a1157bdcc7349d21598d35db45447f2f7e527f37fca650e855cdec25e97692173493ad0dedae28cdbc84cbb5288233fc50f647ca80e988920e876490fd767e4ab96728d7f13684a9c8464823e1b5b88658da51ef444a2a11fd4b7e9fcac0d943376642ef2f8b7ddc55788127c3abdc72d5fb3b214bf3a84b53ca876d34a1952cdfe0901569575d13f70e529a5e4132510a7498bbf8a1c223de4c4c8c67dfa7de2d2d918d1f3cb7df135493c6a88ccd765782aac76c0baf484eb9c37fb98fdf6977287b8d5654692156a4c766c66cd2aa5872ddc047afb2b4c767579b3ace889a4f0f6a363b1fddd52672272f98c46a3f6ee8fb272c60297c0e3dbaa0b089a8c7f640bc551ba0baf1d4965db84d329b8ce68a900f810595e24b2e390fe2ca6369db0eadcac2e24215e77bff5ad1eabaf2ddba9f0783ea3a3ba44b59fb66e1305aa0c7f287a068115b63329faf7a3748c8673ab78f9bfddf1c10a65a928a38a795be835222c099313ecf4b135ccfc56a5d692ce489925bfa1b98e9640bdca446bae3e89ee6c19dd3a844973ef7569a423c774697c19c7556473ec04fba50179d0b54591c02a6db330577f7b98f86e67270ccb10ece236ca15a4dfd81e47e88dfc29c9dfa006b897975ce09dae047c3747763b2b8e773530b117122a744b7595bb6e62f9fc495ec9196021c04351d99a92080aa56002d0235623119cce98d443a1641ca3a8e6a966facd423b1467115a23edfc29d7250c3352cd55566336c1a15f7cc3cab88a94b40fff5cec170d925df083f5e21efa513690bca5a2d00cc74d8cfaa84172a9a0f841aed561d517c681ea8de6b481ac51fdd176b7a151ad47b10e9ddd3077eb4392f38995681afe6f95825e83dbb5ec9217196fcab70fcc351ecaee1162ac227cb19a69064ae8c8e009097a13ba31fd05a3fd22fa9383c6dc4e50ba3901e98f8211f1e9d76f42170089df5e5b648504cc0fd3050e68784506029b9d71fa02e499148f6d2cf2555805afba5cdd7bf460403c4dd3045671f91dcf0445803d8224ec076f22fc3cd0595f9ba562b7eeb986658107fd24e987c04c577c64e2237754ce4e158c6d4e065665aca9198fc81969a09eebe66a7937ac6407f29675b5ff3d6c9f49bc19ccc2c903eb46e6a99fcf3285bf008574d69fc4f61c01e17a9846d0f82f89f8df179c5d536b447a895ab338ab37b925897f6cdeb152004e99ab063bb7011b1bdb932624d700807747de288845a2b6a66c256746a4a53232495f88e310b375902ec0642e77e44ba59701dbebc61f6cdf1ea50056dce6b416f93b35387e1b59314cf48a263b69d4c365b1fba86d73d3fc4e8197e5a17ae4c7947d908e98dffbc8b64334749cabd92d6cb99328a33bce1e036daf1f9d705ef8e5cbe80e3d7bc09647f4ccdb9e419778affc564979517a5c26f8e1d1d23050ebf37818273a95d88679bde1f52873634874ce05ad1ee3f2f4658b95eee461d672f92fced20137facb84187eb4e3ac7e2dc2032d356d1db65be78e18375fbf59a9e0a5e82efb9f202146b728785e88240c87da9b16f34f529a94aeb070a1f4d0601d32405d9fa605fb609de77d38d540fd7870d0136f0ace70713fcae7c6367c4342ff68bd3c54a113928433faa395292815685ad91aa16f1b33ffcd2c7c04dff3e70aab7ce308cd4140f4bcc7d7c6739aca7be887364f9211d29da1d2d74a07b2f3dd9d3e3a61fd6864687f067b24d968a3496a22a6b24fc67fc50f6a93669aea9019dc0fda3ea5d468ec358f28a7eb71b317c8eeb13b9ebb2acabba929eefbd17a988cd95b6a3a52cb680fe25ab18fac4f797ce5360e9be6eff103e7f8c311d44277b39fc2ae511ee7bae49a9d9ebeb3eeee900f0f4e0bff22f5129c83e8f2fe6b4427193cdd40b398b7e777d304211198992c4eb0039c440acd7875cfdaed062ffe2e696508dbbfe99a05151d4a0e5f28379ce1fc8a8d6f7597494b852a6bb5b277ad3db2b8c7e83c3309cdd20d1c26e21231ee7d3cd916ea31482a17a476a3c15c385209a4994f32cf5d2098c07e684e9b4256b49d2d56c1add26e19d8150c45d1b7a088516b6da5f9c279d257c24e911c66e2e0f107698eccaf24acae5722c72c2d7bd61b437e86e4f4874fde0b31ec6b04a22e461ec47a69421275ddbde5ade95046090b6ceab0b5f1f612feb261827541fa4c2f6689d3634eb15c3f79232ae00815c531d7512a24669f93d1f17d8ed59f57da90cd548c96d9810bfc97a47fd6fccd8ad0e553f4efd0b0dd1a60a1fbc28ea06bb63967ab7989b9a823f01589b1c067e3888a1602ecc2a1e8332262d534ac4d4d57fd414b7e88e977f4bd088ff70a9d18f7561188f44b2df703582db9dfac1b5b6914ae76546b688c2cb6fccccb412d8d9d5e1fce12aaa6b23bb0fd7e5d722ba15b3f2dfde340ff1568219c9b8ef9e2fdb9998df4", 0xfc0}, {&(0x7f0000000100)="d9e9778860957187969b1c3f885287c94119b1a63f20b37b5b4a", 0x1a}, {&(0x7f0000000480)="eef6bd591735fad80109c2384bcb5a21036742c2a503936d63b42697a17716782d586f489a10d8ca0b937e3a0cc1ded8115fa9ed9a0d13bfb443df9e83d49cdfe6db1a340c8eceb975123bc40fa6aaf8513a6e507b82e819712edc691e6db923e55afa20971c5b284dd19a9e6da5678d5676973a79dfafffc9f3027bd5b124221fd92783f2ed90e9d177eb68d64b6de9758bfe850081659f3302c826ef1774625dc4c8005761fd7abb40e555afe870aea4021714a8f9142f32be67a650eb7052072c5841ded588edc39cb003706becb48dddc968b247aefff420b5537b1ecadf4dc8414859ac75f43d31670176de9f19a92e", 0xf2}], 0x3, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r0, r1, r2}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}], 0x58, 0x4}, 0x40) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000001c0)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 10.91248612s ago: executing program 0 (id=1): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5a8874", 0x4c, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1102a8887a2c9305895b8cb59331cdffdf8e04142a112e9e8a24dbc3ec49d3a4", "2db6a193bcc7961b3d7ffdd654edbf06b88768a543517e85683cba3eacfc34c915f14e6909b49f9237345255b67d8e45", "381da35b3b5c874ffc044f7e6bdb47fd7e6379a64c0cc354322238af", {"a263753d250cfb21bd9221645c29f7d3", "432c3aac2290feba17bfa3643cdcbbfd"}}}}}}}}, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x1fe, 0x0, &(0x7f0000016000/0x3000)=nil}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 8.892216127s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)={0x40, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0xde}, @nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0xd6, 0x0, 0x1, [@nested={0x20, 0xa1, 0x0, 0x1, [@nested={0x1c, 0xbd, 0x0, 0x1, [@nested={0x4, 0x118}, @nested={0x4, 0x35}, @generic, @nested={0x4, 0x141}, @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x9}]}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40881}, 0x8002) 8.658564751s ago: executing program 4 (id=5): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005480)=@delchain={0xc08, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xbbc, 0x2, [@TCA_BASIC_EMATCHES={0xa8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x78, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR=')\'']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="2d47bb42cd", @TCF_META_TYPE_VAR="14f63b7992969961", @TCF_META_TYPE_INT=0x8]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0x398, 0x3, [@m_sample={0x94, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x55, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d8db6ee7a95acb45665d419103d3630ef3c99f3729bf251659b35ee457bb1f0377974ae753b08d9ac3d3880a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x110, 0x16, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x8, 0x5, 0xff, 0xc80d}, @rand_addr=0x64010102, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x5, 0x7, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6b4, 0x1, 0x4, 0xfffff801, 0x7}, @multicast1, @loopback, 0xff000000}}]}, {0x6d, 0x6, "716419c69fb8beef0196e6ce5e767365e9f220c88fe37fecd5e41c3e47efc43e26b871fe31b287d6389be63392094bddba50168eccec6e732e8dfaafb0b318c1153fc6da1e58ee6880c471442a36bc475b74f83d5338a096c2c958f4ed131eaef186355b8b7fa1dbd1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x138, 0x5, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xba5, 0x7, 0xa09b, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xc0000000, 0xffffffffffffffff, 0x2, 0xe}, 0x7}}]}, {0xd0, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b78c605fb9edbb86dd5ae3f174ba8489176ed907a788dd2e877be404d047e0ef287164365312e1579e808483983c2580a15ec224a6752e7166875eb90c4f59f87bfd3b2edbfe9385620737e080d57ca4c98685011b2f9c4cec6b25a5f3f11e0049720b5f08aac01"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xb8, 0x20, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x101, 0xffffffffffffffff, 0x0, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffff, 0x8000, 0x0, 0x200, 0x100}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xdcb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xbd}]}, {0x42, 0x6, "7869d57b2a3f81f69cdb37016be2d4004aee24bff16bf837979f9e43d4e1cda55030c428c50a4522d3f10c6bff0dd1a3932e4088c0072884583fd8736295"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_ACT={0x778, 0x3, [@m_nat={0x188, 0x13, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x676, 0x1, 0x1000, 0x4}, @multicast2, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x2, 0x20000000}, @dev={0xac, 0x14, 0x14, 0x34}, @empty, 0xffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffff36f, 0x2, 0x2, 0x2, 0x31}, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x10000, 0x0, 0x6, 0xffff5953}, @loopback, @rand_addr=0x64010101, 0xff000000, 0x3}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x6, 0x3, 0x4, 0xd24}, @multicast1, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xae2, 0x3, 0x2, 0x24, 0x4}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x14}, 0xffffff00}}]}, {0x6f, 0x6, "66192ac1fed8877d2ff441f104bb1ed9b7e3699153970e97b122249670bd7ce68849599e5b9598f51670bfcb99c1c73f6db674731bb991e5737f3ba8c6dc2a856a1329aea24bdc3b24b5fdd6ca6966da56a0ec38e4fdcd38ca821e8e67c1012f80957abfaf5b417a9708cc"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_skbedit={0xe8, 0x6, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xc}}]}, {0x92, 0x6, "f1047ea98ff5595d9142095c011e1bc3c7b5381e2b0f4b0f5e7a3fcf9e2b895791fe41ab4c00e0fe02992808669c8941a4e55cbc9bc4b7f0c5d2abcccbc85b255eca4b2078d979d6e3821612659043f680ff8670d850210af94cfe2fd1ecd9e2249bd519f6fa67d9c3b2d3dfa2606919183daed5f012090eb81122130635e06abb1f7d261a06bf2ab29b840ce195"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xac, 0xd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb42, 0x7, 0xffffffffffffffff, 0x7}, 0xd}}]}, {0x60, 0x6, "ac819f35ceba13a04cb0a1432cc6124c5741ec27e64c8b219e2a9760f3c4b4bc1221fc8521cf19b146681d135ea35f15672cabdd65b7a775d72e997a15ca594afe20689fa51794e50d0f57d31cdfa385f1ae545af45026ffc4597467"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x124, 0x1b, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000001, 0x8136, 0x7, 0x1, 0xc3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x28e}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x800000e, 0xc21, 0x5920}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xa7, 0x6, "0cba2658b25101c9e8d9505c5bf3e7c7108338fe34c13cc37b4066c4f15982693aa318d0e0e272469c033157eef977fba373c81c8d15577ead8c591e89102c48bcfcf92f345e9882ab57510e560893aa3bf7c1172b147178bd18b76b119d28feb4aa0cffb0987c794c5e3995922d85a2da944b8e8b5b71fb3798e223295ce73effe492e30bd7170a1da74f5c2369271f78ddd09f2b2e959130c557d278a74d057dbb71"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x178, 0x1d, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xdfd5, 0x4, 0xbd1e}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x20000000, 0x4, 0x5}, 0x1}}, @TCA_IFE_SMAC={0xa}]}, {0xde, 0x6, "9a6f5c950be2c5a7003586ba3d1068fe1e10fc916add816d61957113dcd73308c5f4e023f80f7eabe5af67fd7dd2adccde6eea0c17132fbc6aa84017f1626971adee63dc2499b8ce9dcb130fe591a3479bdf9ae816a04eab341e9bd022515fca5ea5c86d298baf2298073913dbe7c5e446142c64c0de033fef9eef26922245d4a764814898359bc057f3041b313a8f434b80617801e66c0189e7c45c57c6e86a5f701e8fe5ee15f550a776c42a9acbfe303620f49dd2ce06ee710158f49072b2bea32a9293cb2ae45bf7f66bc93ec457cbfddd2e3ce6f77409de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x8, 0x1, 0x2, 0x1ff}, 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9c}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfc00}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x4, 0x1, 0x5, 0x2f1}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x11c, 0x9, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xffffffc0, 0x6, 0x100, 0x7fffffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0xc8ba965, 0xc, 0xffffffffffffffff, 0xf6d7, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff1af5, 0x5, 0x0, 0x5, 0x4b}}]}, {0xa5, 0x6, "5230bdfd85bd960d6e0294ad03296495328c4cbd16b6e1fbfab6b3a1ac5780ff68532b22f6c38aee6f56be7a12e66bc7eac5df983bac14d7faa621cae48a259f1d0b193a7df56aa70254544c2e5b42f7b0ae7e52c868573d6abe2fc00388b401789239d431562ddc9b8e1143ccb49ed0ab93730a33377d4a08d6c7f2d34174413b5bc3aa09e7fd749e378557792f558261821f5e85a4066fd3aef2fb836f3c5263"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xc08}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.452064787s ago: executing program 1 (id=6): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5a8874", 0x4c, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1102a8887a2c9305895b8cb59331cdffdf8e04142a112e9e8a24dbc3ec49d3a4", "2db6a193bcc7961b3d7ffdd654edbf06b88768a543517e85683cba3eacfc34c915f14e6909b49f9237345255b67d8e45", "381da35b3b5c874ffc044f7e6bdb47fd7e6379a64c0cc354322238af", {"a263753d250cfb21bd9221645c29f7d3", "432c3aac2290feba17bfa3643cdcbbfd"}}}}}}}}, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x1fe, 0x0, &(0x7f0000016000/0x3000)=nil}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 8.154153992s ago: executing program 3 (id=7): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 7.790016886s ago: executing program 4 (id=8): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) eventfd(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x204100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000380)=ANY=[], 0xaf) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r5}) 6.659932308s ago: executing program 2 (id=9): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) mount$bind(0x0, 0x0, 0x0, 0x301091, 0x0) 6.383353066s ago: executing program 0 (id=10): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 6.374962831s ago: executing program 4 (id=11): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5a8874", 0x4c, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1102a8887a2c9305895b8cb59331cdffdf8e04142a112e9e8a24dbc3ec49d3a4", "2db6a193bcc7961b3d7ffdd654edbf06b88768a543517e85683cba3eacfc34c915f14e6909b49f9237345255b67d8e45", "381da35b3b5c874ffc044f7e6bdb47fd7e6379a64c0cc354322238af", {"a263753d250cfb21bd9221645c29f7d3", "432c3aac2290feba17bfa3643cdcbbfd"}}}}}}}}, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x1fe, 0x0, &(0x7f0000016000/0x3000)=nil}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.955944945s ago: executing program 3 (id=12): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) timer_delete(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4ea0, 0xffffffff, @private2, 0x7}, 0x1c) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x9, 0x0, 0x0, 0x0, 0x300) futex(&(0x7f000000cffc), 0x5, 0x800, 0x0, &(0x7f00000001c0), 0x3000000) 1.047833005s ago: executing program 2 (id=13): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x60402, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000280)={0x40001, 0x401, 0xfff, 0x80000002, 0x7, "9393858308cadc3fe5df0af03652b354deb58c", 0x21, 0x103}) socket$can_j1939(0x1d, 0x2, 0x7) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x1, 0x1, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800"], 0xe0}}, 0x0) 53.626714ms ago: executing program 3 (id=14): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 0 (id=15): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2bc, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x100, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x777e, 0xef92, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 81.848433][ T5781] cgroup: Unknown subsys name 'net' [ 82.090206][ T5781] cgroup: Unknown subsys name 'cpuset' [ 82.165005][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.932590][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.377693][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.379794][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.384141][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.415127][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.416773][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.418347][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.428221][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.432428][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.433598][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.447838][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.456127][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.456945][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.459531][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.460231][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.461169][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.464471][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.466288][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.469493][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.475726][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.504599][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.507894][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.512569][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.524558][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.555144][ T5112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.601207][ T5112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.068304][ T36] cfg80211: failed to load regulatory.db [ 87.598782][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 87.620327][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 87.696259][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 87.701797][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 87.768992][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 88.007142][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.008319][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.008555][ T5795] bridge_slave_0: entered allmulticast mode [ 88.010312][ T5795] bridge_slave_0: entered promiscuous mode [ 88.061776][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.061863][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.061967][ T5793] bridge_slave_0: entered allmulticast mode [ 88.063386][ T5793] bridge_slave_0: entered promiscuous mode [ 88.101772][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.101906][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.102237][ T5795] bridge_slave_1: entered allmulticast mode [ 88.103639][ T5795] bridge_slave_1: entered promiscuous mode [ 88.143187][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.143306][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.143504][ T5793] bridge_slave_1: entered allmulticast mode [ 88.166555][ T5793] bridge_slave_1: entered promiscuous mode [ 88.193676][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.193776][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.193881][ T5796] bridge_slave_0: entered allmulticast mode [ 88.197082][ T5796] bridge_slave_0: entered promiscuous mode [ 88.201620][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.201774][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.201983][ T5794] bridge_slave_0: entered allmulticast mode [ 88.206314][ T5794] bridge_slave_0: entered promiscuous mode [ 88.260963][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.261074][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.261228][ T5796] bridge_slave_1: entered allmulticast mode [ 88.263226][ T5796] bridge_slave_1: entered promiscuous mode [ 88.268164][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.268289][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.268752][ T5794] bridge_slave_1: entered allmulticast mode [ 88.271210][ T5794] bridge_slave_1: entered promiscuous mode [ 88.293235][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.293346][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.293492][ T5798] bridge_slave_0: entered allmulticast mode [ 88.296853][ T5798] bridge_slave_0: entered promiscuous mode [ 88.310524][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.361145][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.361538][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.361701][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.361876][ T5798] bridge_slave_1: entered allmulticast mode [ 88.363491][ T5798] bridge_slave_1: entered promiscuous mode [ 88.370252][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.418123][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.454414][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.470584][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.476019][ T5806] Bluetooth: hci2: command tx timeout [ 88.508109][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.529295][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.554565][ T5806] Bluetooth: hci4: command tx timeout [ 88.554576][ T5112] Bluetooth: hci1: command tx timeout [ 88.634544][ T5112] Bluetooth: hci3: command tx timeout [ 88.634794][ T5806] Bluetooth: hci0: command tx timeout [ 88.777960][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.780033][ T5795] team0: Port device team_slave_0 added [ 88.806791][ T5793] team0: Port device team_slave_0 added [ 88.832866][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.835974][ T5795] team0: Port device team_slave_1 added [ 88.859473][ T5793] team0: Port device team_slave_1 added [ 88.900118][ T5796] team0: Port device team_slave_0 added [ 88.918028][ T5794] team0: Port device team_slave_0 added [ 88.948357][ T5796] team0: Port device team_slave_1 added [ 88.971682][ T5794] team0: Port device team_slave_1 added [ 88.973447][ T5798] team0: Port device team_slave_0 added [ 88.975057][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.975070][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.975093][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.002372][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.002391][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.002415][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.031719][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.031735][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.031759][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.054190][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.054207][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.054401][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.106910][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.106935][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.106960][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.108755][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.108774][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.108799][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.115212][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.115228][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.115252][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.135824][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.135843][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.135867][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.277604][ T5795] hsr_slave_0: entered promiscuous mode [ 89.279324][ T5795] hsr_slave_1: entered promiscuous mode [ 89.363522][ T5793] hsr_slave_0: entered promiscuous mode [ 89.365833][ T5793] hsr_slave_1: entered promiscuous mode [ 89.367336][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 89.367445][ T5793] Cannot create hsr debugfs directory [ 89.369970][ T5798] team0: Port device team_slave_1 added [ 89.380964][ T5796] hsr_slave_0: entered promiscuous mode [ 89.382518][ T5796] hsr_slave_1: entered promiscuous mode [ 89.383421][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 89.383445][ T5796] Cannot create hsr debugfs directory [ 89.395218][ T5794] hsr_slave_0: entered promiscuous mode [ 89.396482][ T5794] hsr_slave_1: entered promiscuous mode [ 89.397439][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 89.397463][ T5794] Cannot create hsr debugfs directory [ 89.472603][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.472628][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.472650][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.537283][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.537298][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.537313][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.111063][ T5798] hsr_slave_0: entered promiscuous mode [ 90.111895][ T5798] hsr_slave_1: entered promiscuous mode [ 90.112448][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 90.112466][ T5798] Cannot create hsr debugfs directory [ 90.554420][ T5806] Bluetooth: hci2: command tx timeout [ 90.579142][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.631454][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.635484][ T5806] Bluetooth: hci1: command tx timeout [ 90.635517][ T5806] Bluetooth: hci4: command tx timeout [ 90.678936][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.714970][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.715051][ T5112] Bluetooth: hci0: command tx timeout [ 90.724593][ T5112] Bluetooth: hci3: command tx timeout [ 90.890203][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.935043][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.980627][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.038580][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.166221][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.209122][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.252172][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.287924][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.425409][ T5794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.481334][ T5794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.516240][ T5794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.569004][ T5794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.690257][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.731099][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.732041][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.763232][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.802774][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.898345][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.909973][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.946121][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.946349][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.006984][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.007337][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.056520][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.094018][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.112774][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.112896][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.154987][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.156127][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.211507][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.233381][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.252569][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.253087][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.327666][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.327831][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.400206][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.441074][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.452224][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.452351][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.535657][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.535791][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.636482][ T5112] Bluetooth: hci2: command tx timeout [ 92.643131][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.682730][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.682831][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.715225][ T5112] Bluetooth: hci4: command tx timeout [ 92.715260][ T5112] Bluetooth: hci1: command tx timeout [ 92.773523][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.782815][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.794533][ T5806] Bluetooth: hci3: command tx timeout [ 92.794565][ T5806] Bluetooth: hci0: command tx timeout [ 92.840277][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.053972][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.183464][ T5795] veth0_vlan: entered promiscuous mode [ 93.197327][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.277912][ T5795] veth1_vlan: entered promiscuous mode [ 93.423570][ T5793] veth0_vlan: entered promiscuous mode [ 93.480923][ T5796] veth0_vlan: entered promiscuous mode [ 93.483678][ T5795] veth0_macvtap: entered promiscuous mode [ 93.493057][ T5793] veth1_vlan: entered promiscuous mode [ 93.519940][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.524004][ T5795] veth1_macvtap: entered promiscuous mode [ 93.559734][ T5796] veth1_vlan: entered promiscuous mode [ 93.634461][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.639278][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.673320][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.732290][ T3513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.747815][ T3513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.748891][ T5793] veth0_macvtap: entered promiscuous mode [ 93.753453][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.764470][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.803179][ T5793] veth1_macvtap: entered promiscuous mode [ 93.874424][ T5796] veth0_macvtap: entered promiscuous mode [ 93.928387][ T5796] veth1_macvtap: entered promiscuous mode [ 94.035520][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.075819][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.108594][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.110550][ T5798] veth0_vlan: entered promiscuous mode [ 94.141639][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.149856][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.149885][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.197117][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.197224][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.225601][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.234119][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.278073][ T5798] veth1_vlan: entered promiscuous mode [ 94.282197][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.317381][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.342564][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.343451][ T5794] veth0_vlan: entered promiscuous mode [ 94.348679][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.363755][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.363776][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.515852][ T5794] veth1_vlan: entered promiscuous mode [ 94.715216][ T5112] Bluetooth: hci2: command tx timeout [ 94.758808][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.758826][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.760599][ T5798] veth0_macvtap: entered promiscuous mode [ 94.794658][ T5112] Bluetooth: hci1: command tx timeout [ 94.794688][ T5112] Bluetooth: hci4: command tx timeout [ 94.862386][ T5798] veth1_macvtap: entered promiscuous mode [ 94.874907][ T5806] Bluetooth: hci0: command tx timeout [ 94.874949][ T5806] Bluetooth: hci3: command tx timeout [ 94.898220][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.898236][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.037225][ T5794] veth0_macvtap: entered promiscuous mode [ 95.057976][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.057994][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.091362][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.120192][ T5794] veth1_macvtap: entered promiscuous mode [ 95.171558][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.171573][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.173708][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.270405][ T1124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.288734][ T1124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.291420][ T1124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.312052][ T1124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.358020][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.449495][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.574809][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.589979][ T3513] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.592737][ T3513] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.604614][ T3513] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.604864][ T3513] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.964316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.138280][ T1362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.138302][ T1362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.196770][ T5805] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.440012][ T5805] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.440041][ T5805] usb 2-1: config 0 has no interface number 0 [ 96.450273][ T5805] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 96.450303][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.450322][ T5805] usb 2-1: Product: syz [ 96.450335][ T5805] usb 2-1: Manufacturer: syz [ 96.450348][ T5805] usb 2-1: SerialNumber: syz [ 96.578144][ T5805] usb 2-1: config 0 descriptor?? [ 96.671973][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.672001][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.814941][ T5805] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 96.895700][ T5805] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 96.896190][ T5805] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 96.896239][ T5805] usb 2-1: media controller created [ 97.008185][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.013814][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.013835][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.374560][ T5805] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 97.375303][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.375319][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.995360][ T5805] usb 2-1: USB disconnect, device number 2 [ 98.136711][ T5930] netlink: zone id is out of range [ 98.136723][ T5930] netlink: zone id is out of range [ 98.136727][ T5930] netlink: zone id is out of range [ 99.403999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.404041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.404073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.404103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.404133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.404163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.404193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.554262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.554305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.905633][ T5942] ALSA: mixer_oss: invalid OSS volume '' [ 100.345523][ T5885] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.523826][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.523862][ T5885] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 100.523877][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.533971][ T5885] usb 3-1: config 0 descriptor?? [ 104.422689][ T3513] ODEBUG: Out of memory. ODEBUG disabled [ 104.884470][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 104.886148][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 105.267352][ T5885] usb 3-1: USB disconnect, device number 2 [ 107.515837][ C1] ------------[ cut here ]------------ [ 107.515852][ C1] 1 [ 107.515866][ C1] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#1: ktimers/1/29 [ 107.515902][ C1] Modules linked in: [ 107.515936][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.515957][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.515970][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 107.515988][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 107.516001][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 107.516016][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 107.516029][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 107.516040][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 107.516051][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 107.516064][ C1] R13: 00000000ffffb400 R14: 1ffff92000147f4c R15: ffff88805d6746e8 [ 107.516076][ C1] FS: 0000000000000000(0000) GS:ffff888126443000(0000) knlGS:0000000000000000 [ 107.516091][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.516103][ C1] CR2: 0000001b2f00aff8 CR3: 00000000350f6000 CR4: 00000000003526f0 [ 107.516120][ C1] Call Trace: [ 107.516131][ C1] [ 107.516138][ C1] call_timer_fn+0x192/0x640 [ 107.516161][ C1] ? __pfx_stub_timer+0x10/0x10 [ 107.516177][ C1] ? call_timer_fn+0xd4/0x640 [ 107.516195][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 107.516213][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.516246][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.516266][ C1] ? __pfx_stub_timer+0x10/0x10 [ 107.516287][ C1] __run_timer_base+0x6a3/0x9f0 [ 107.516325][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 107.516356][ C1] run_timer_softirq+0xb7/0x170 [ 107.516377][ C1] handle_softirqs+0x1de/0x6f0 [ 107.516404][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 107.516425][ C1] run_ktimerd+0x69/0x100 [ 107.516445][ C1] smpboot_thread_fn+0x541/0xa50 [ 107.516468][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 107.516498][ C1] kthread+0x388/0x470 [ 107.516519][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 107.516544][ C1] ? __pfx_kthread+0x10/0x10 [ 107.516562][ C1] ret_from_fork+0x51e/0xb90 [ 107.516589][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 107.516612][ C1] ? __switch_to+0xc7d/0x1450 [ 107.516639][ C1] ? __pfx_kthread+0x10/0x10 [ 107.516659][ C1] ret_from_fork_asm+0x1a/0x30 [ 107.516696][ C1] [ 107.516706][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.516720][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.516738][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.516756][ C1] Call Trace: [ 107.516762][ C1] [ 107.516768][ C1] vpanic+0x56c/0xa60 [ 107.516791][ C1] ? __pfx__printk+0x10/0x10 [ 107.516812][ C1] ? __pfx_vpanic+0x10/0x10 [ 107.516835][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 107.516859][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 107.516890][ C1] panic+0xc5/0xd0 [ 107.516914][ C1] ? __pfx_panic+0x10/0x10 [ 107.516947][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 107.516971][ C1] __warn+0x315/0x4f0 [ 107.516993][ C1] ? stub_timer+0xa/0x20 [ 107.517009][ C1] ? stub_timer+0xa/0x20 [ 107.517026][ C1] __report_bug+0x29a/0x540 [ 107.517055][ C1] ? stub_timer+0xa/0x20 [ 107.517070][ C1] ? __pfx___report_bug+0x10/0x10 [ 107.517088][ C1] ? add_lock_to_list+0xc7/0x100 [ 107.517114][ C1] ? lockdep_unlock+0x5d/0xd0 [ 107.517353][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 107.517399][ C1] ? stub_timer+0xa/0x20 [ 107.517415][ C1] report_bug+0x16a/0x220 [ 107.517438][ C1] ? stub_timer+0xa/0x20 [ 107.517448][ C1] ? stub_timer+0xc/0x20 [ 107.517459][ C1] handle_bug+0x98/0x200 [ 107.517480][ C1] exc_invalid_op+0x1a/0x50 [ 107.517503][ C1] asm_exc_invalid_op+0x1a/0x20 [ 107.517521][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 107.517540][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 107.517553][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 107.517572][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 107.517585][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 107.517593][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 107.517601][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 107.517610][ C1] R13: 00000000ffffb400 R14: 1ffff92000147f4c R15: ffff88805d6746e8 [ 107.517625][ C1] ? __pfx_stub_timer+0x10/0x10 [ 107.517723][ C1] ? stub_timer+0x9/0x20 [ 107.517745][ C1] ? stub_timer+0x9/0x20 [ 107.517795][ C1] call_timer_fn+0x192/0x640 [ 107.517809][ C1] ? __pfx_stub_timer+0x10/0x10 [ 107.517821][ C1] ? call_timer_fn+0xd4/0x640 [ 107.517854][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 107.517866][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.517893][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.517912][ C1] ? __pfx_stub_timer+0x10/0x10 [ 107.517926][ C1] __run_timer_base+0x6a3/0x9f0 [ 107.517958][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 107.517990][ C1] run_timer_softirq+0xb7/0x170 [ 107.518012][ C1] handle_softirqs+0x1de/0x6f0 [ 107.518040][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 107.518060][ C1] run_ktimerd+0x69/0x100 [ 107.518081][ C1] smpboot_thread_fn+0x541/0xa50 [ 107.518101][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 107.518128][ C1] kthread+0x388/0x470 [ 107.518143][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 107.518161][ C1] ? __pfx_kthread+0x10/0x10 [ 107.518177][ C1] ret_from_fork+0x51e/0xb90 [ 107.518200][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 107.518217][ C1] ? __switch_to+0xc7d/0x1450 [ 107.518238][ C1] ? __pfx_kthread+0x10/0x10 [ 107.518253][ C1] ret_from_fork_asm+0x1a/0x30 [ 107.518280][ C1] [ 107.520041][ C1] Kernel Offset: disabled