last executing test programs: 9.801370157s ago: executing program 3 (id=120): openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) 8.891250321s ago: executing program 2 (id=121): socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 8.047149557s ago: executing program 3 (id=122): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x30) 7.866950715s ago: executing program 2 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 7.195849822s ago: executing program 2 (id=126): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000340), &(0x7f0000000440)=r0}, 0x20) shutdown(r0, 0x0) 7.025748281s ago: executing program 1 (id=127): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) write$tun(r1, &(0x7f00000004c0)={@val={0x0, 0x4}, @void, @mpls={[], @ipv6=@tcp={0x9, 0x6, "79c245", 0x2a, 0x6, 0x1, @local, @mcast2, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x80, 0x0, 0x7}, {"23d46d7999bd35797302f8785dd35990a2b5340058c5"}}}}}}, 0x56) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6.973519992s ago: executing program 3 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x800004, 0x7fff, 0x3d75, 0x2, 0x1000, 0x2, 0xfffffffa, 0xc00000, 0xfbfffff9, 0x8e, 0xd, 0x81, 0x1, 0x2006, 0x8, 0x5, 0x2, 0x7f, 0x7, 0xd1, 0x6, 0x2, 0x2, 0xfff, 0x1, 0x1, 0x1, 0xffff8001, 0x3, 0xd, 0x7, 0x3, 0x7, 0x6, 0x81, 0x3, 0x3, 0x1, 0x401, 0x5, 0x2, 0x401, 0x6, 0x2, 0x4, 0x6, 0x100, 0x6, 0xf, 0x9, 0x7, 0x5, 0x7c57, 0x4, 0x8, 0x0, 0x1, 0x90, 0x1e000000, 0x3, 0x8, 0x4, 0x5e, 0x5, 0x9, 0xf, 0x0, 0x7, 0x3, 0xfffff000, 0x8, 0x10000, 0x0, 0x16, 0x2, 0x1, 0x6, 0x4, 0x6f4a957a, 0xa, 0x0, 0x7, 0x1, 0x80, 0xe, 0x4ed14900, 0x2, 0xfffffff7, 0x2, 0x1, 0x3, 0x64d0, 0x2, 0x3, 0x6, 0x8, 0xffffff3e, 0x3ff, 0x83f9, 0x5d8c, 0x6, 0x97, 0x51, 0x9, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2d, 0x5a9, 0x5, 0x9, 0x8, 0x1, 0x9, 0x3ff, 0xd, 0xff, 0x7, 0x4, 0xffff43de, 0xff, 0x3, 0x80000000, 0xd937, 0x0, 0xfffff07f, 0x7fffffff, 0x47f1f2aa, 0x2, 0x3, 0x229, 0x6, 0x7fff, 0x6, 0x4, 0x4, 0x100, 0x5, 0x37b01c98, 0xf0, 0x1, 0x3, 0x3ff, 0x0, 0x5, 0x4b, 0xf9, 0xc7ca, 0x0, 0x8, 0x4, 0x6, 0x6, 0x1, 0x7, 0xffffffff, 0x101, 0x2, 0xfffffffb, 0x3, 0x10, 0x9, 0x782, 0x101, 0x40000000, 0x4, 0x1, 0x9626, 0x1, 0x1, 0x7, 0xffffffff, 0x5, 0xfffffffa, 0x5, 0x3, 0x3, 0x1, 0x0, 0x7, 0x401, 0x9, 0x2, 0x1ff, 0x8, 0x0, 0xd2, 0x2e, 0x7f, 0x8, 0x6, 0x6, 0x0, 0x969f, 0x8, 0x3, 0x80000000, 0x4, 0x7ee47b82, 0x9, 0x2, 0x1, 0xd, 0x1d0, 0xffffffff, 0x6, 0xdc, 0xe76, 0x4, 0x7, 0xf109, 0x7fff, 0x3, 0x9, 0x4, 0x8, 0x0, 0xa, 0xffffffff, 0x101, 0x7, 0x305, 0xe7, 0x7, 0x5, 0x2, 0x7, 0x0, 0x3, 0x101, 0x7f, 0x3, 0x2, 0x6, 0x82, 0x400, 0xffff, 0x27, 0x99, 0x0, 0x1, 0x62, 0x6, 0x6, 0x0, 0x6, 0x5, 0x7b, 0x9, 0x3c6, 0x8000, 0x745, 0x80, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 6.766165264s ago: executing program 2 (id=130): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0x200c17a) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(r1, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.473366361s ago: executing program 2 (id=131): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, 0x0, &(0x7f0000000880)}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 6.300414739s ago: executing program 0 (id=132): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xffffffffffffffe3, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) 6.299763759s ago: executing program 2 (id=133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.673486374s ago: executing program 1 (id=134): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000040000000000000024000000850000004800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 5.623999995s ago: executing program 3 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000080)={r4, 0xa, "d72e4afa70070a8e4461"}, &(0x7f0000000300)=0x12) 5.517390646s ago: executing program 0 (id=136): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a000200000000000000000004", @ANYRES16, @ANYBLOB="18"], 0x48}], 0x1, 0x40) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x280000f) r1 = socket$kcm(0x2d, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0430e1ffc90031d2e7bfd7ddbc70aa7981772e2d849cf778041639"], 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0xd}, 0x6, 0x43, 0x0, 0x0, 0xc0000000, 0x9, 0x0, 0xffff56b1, 0x6, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) capset(0x0, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) 4.510984053s ago: executing program 3 (id=137): syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000, 0xffffffffffffffff, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 4.361634205s ago: executing program 1 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x15, 0x5, 0x0) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x4, 0x3, 0x7d, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, 0x10, 0x7fb0, 0x9, 0x1}}) socket$alg(0x26, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002c40)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.338639751s ago: executing program 0 (id=139): r0 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) inotify_rm_watch(r0, r3) 3.723158759s ago: executing program 0 (id=140): socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x42}) 2.181585648s ago: executing program 3 (id=141): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0x1}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @remote}) fstat(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x11f0, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x11dc, 0x1, [@m_police={0x11d8, 0x1, 0x0, 0x0, {{0xb}, {0x11ac, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xfd3c}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x5, 0x4a8, 0x7ff, {0x52, 0x0, 0x8, 0x8, 0x2, 0x6}, {0x3, 0x1, 0x7, 0x4, 0x9, 0x10000}, 0x800, 0x7, 0xfffffffc}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0xc52, 0x7, 0x2, 0x0, 0x1, 0x7, 0xc127, 0xf, 0x580, 0x3, 0x4, 0x1, 0x3, 0x2, 0xd4b, 0x1, 0x7, 0x8, 0x3, 0x6, 0x5, 0x10000, 0x10, 0x2, 0x1c, 0x200, 0x489d9480, 0x3, 0x200, 0x7eb, 0xaf, 0x6000, 0xa9b1, 0x0, 0x7f, 0x4, 0x8, 0xb, 0x0, 0x8, 0x80000000, 0x2, 0xd, 0xfff, 0x9, 0x5, 0x9, 0x400, 0x2, 0x7ff, 0x4, 0x3, 0x0, 0x5, 0x1, 0x1, 0x8, 0x0, 0xcc, 0x0, 0x8, 0x357, 0x5, 0x9, 0x2, 0x9, 0x6ad, 0xfffffffd, 0x100, 0xd9, 0x40, 0x9, 0x0, 0x7f, 0x36b0, 0x6, 0xff, 0x2, 0x3ba, 0x9, 0x5, 0x5, 0x8, 0x78b, 0x4, 0x0, 0x1, 0x6, 0xffff8001, 0xfffffff7, 0x7fffffff, 0xfc, 0x1, 0x3, 0x7, 0xfffffffa, 0x0, 0xfffffe00, 0x7, 0x55, 0x2, 0x1, 0x87d, 0x7, 0x1, 0x6, 0x0, 0x5, 0x4, 0x1, 0x770, 0x80, 0x6, 0xd1, 0xb6d, 0x2, 0x40c064f7, 0x6, 0x800, 0x5, 0x0, 0x4, 0x8, 0x4, 0xc4, 0xe, 0x7f, 0x2, 0xfffffffa, 0x7, 0x10000, 0x5, 0x5, 0x48, 0x2, 0x9, 0x0, 0x4, 0x6, 0x758189da, 0x6, 0x4d4, 0x7, 0xcd9f, 0x8001, 0x800, 0x4, 0x9, 0x6, 0x8000, 0x1000, 0x80000000, 0xa, 0x0, 0x2, 0x3, 0x6, 0xec, 0x10001, 0x0, 0x9f34, 0x32000000, 0x10000, 0x0, 0x9, 0x6, 0x80000000, 0x0, 0x61, 0x9, 0x200, 0x3, 0x4, 0x9, 0x3, 0xf, 0xb, 0x0, 0x5, 0xd, 0x530, 0x358, 0xf, 0x6, 0xb, 0xb, 0x1, 0x3, 0x7, 0x8, 0x3, 0x3, 0xe14, 0xfff, 0x5, 0x3, 0x4, 0x2, 0x1, 0x21c3, 0x7, 0xbd21, 0x6, 0x1ff, 0x0, 0x52a, 0xffff, 0x0, 0x8, 0xfffffffa, 0x7, 0x5, 0x3, 0x400, 0xd1, 0xf90, 0xffffffff, 0xa, 0x5, 0x0, 0xfffffffd, 0xf9, 0x8, 0x80000000, 0x4, 0x4, 0xb66, 0xfff, 0x7f, 0x4, 0x289e39c1, 0x3, 0x3, 0xf7e, 0x9, 0x9, 0x9, 0x2, 0x7, 0x4, 0x42360, 0x2, 0xfffffffb, 0x9, 0x194, 0x8, 0x3, 0xa, 0x7, 0x81, 0x7, 0xfffffffc, 0x6, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x1, 0x4, 0x717, 0x1, {0x6, 0x2, 0xc, 0x5, 0x2, 0xffff}, {0xf, 0x1, 0x0, 0x4, 0x6, 0xfff}, 0xfffff678, 0x3, 0x9}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0xffffffffffffffff, 0x4, 0x0, 0x2, {0x81, 0x0, 0x0, 0x800, 0x7, 0x1}, {0x6, 0x2, 0x4, 0x9c, 0xfff9, 0x5df6}, 0x0, 0x7, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x1, 0xd996, 0x5, 0x5, 0x4, 0x3, 0x80000000, 0x5, 0x6c, 0x1, 0x5, 0x830, 0x7fffffff, 0xa, 0x7, 0x3, 0x218d, 0xd228, 0x9, 0x7fff, 0x1, 0x1000, 0x4, 0x6, 0xe55, 0x7, 0x800, 0x23, 0x50f3, 0x2, 0x9296, 0x5, 0x1, 0x7f, 0x4, 0x101, 0x7, 0x6, 0x6, 0xc09d, 0xffffffbf, 0xffff, 0x4, 0x1000, 0xfffffc00, 0x8000, 0xc7, 0x8, 0x1, 0x7, 0xf1d8, 0x8, 0x6, 0x8, 0xb70, 0x781, 0xaaf3, 0xb, 0xf9, 0x8, 0x7f, 0x3, 0xa, 0x492b, 0x0, 0x6, 0x4, 0x8, 0xff, 0x8000, 0x6856, 0x4ca4, 0x6, 0x101, 0x5, 0xffff, 0xb00, 0xe6d9, 0x8001, 0x5, 0xe628, 0x38f5, 0x80000001, 0xc1a, 0xffff, 0x0, 0x0, 0x9, 0x9, 0x6, 0x15e9ef2f, 0x38a0c000, 0x40, 0xa, 0x6, 0x7fffffff, 0x9, 0x7, 0x7fffffff, 0xffffffff, 0x10000, 0x9, 0x4, 0x80000001, 0xa, 0xc1b9, 0xa51, 0x7, 0x3, 0x7, 0x1, 0xaefe, 0x10, 0xd, 0x0, 0x91, 0x8, 0x8, 0x3, 0xfffffffb, 0x1, 0xc, 0x6, 0xffff, 0x200, 0x8, 0xfffffffd, 0x4, 0x7, 0x0, 0x4, 0x5, 0x7497, 0xfdae, 0xd6, 0xa00, 0x8001, 0x5, 0xfffffffe, 0x8, 0x6, 0x1, 0x1, 0x7, 0xa, 0x4, 0x1ff, 0x1, 0x80000000, 0x6, 0x40, 0x8f78, 0x6, 0x5, 0x200, 0xff, 0xa, 0x0, 0xfff, 0x81, 0x1, 0x7, 0x0, 0x8, 0x0, 0x48, 0x48e176f8, 0x0, 0x3, 0x0, 0x8, 0x4, 0xca90, 0x80000000, 0xffffffff, 0x8000, 0x5, 0x2, 0xe6, 0x5, 0x6, 0x1, 0x9, 0x9, 0x9, 0x3, 0x40, 0xd, 0xe, 0xf, 0x3, 0x7, 0x5, 0x7, 0x80, 0xe4aa, 0x8, 0x180000, 0x6, 0x5, 0xd, 0x7f, 0x8, 0x5ba0328f, 0x8, 0x48f, 0x8, 0x1, 0xe, 0x2000000, 0x9bc, 0x4d5, 0x8b, 0x7, 0x7, 0xfff, 0x4, 0x5, 0x8, 0x9, 0x8, 0x400, 0xff, 0x5, 0x9, 0x3, 0x2d8, 0x2, 0x1, 0x8, 0x4, 0x9, 0x7, 0xffff5da8, 0x4, 0x2, 0x9, 0x6, 0x2, 0xfffffff1, 0xa, 0x72c4969c, 0x0, 0xa4, 0x4, 0x2, 0xfffffe01, 0x5, 0x7fffffff, 0x100, 0x369f, 0x400, 0x6, 0x7fffffff, 0x7f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4849ceae}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0xe, 0x7fff, 0x8, 0x2ab, 0x3, 0x8, 0x30e50265, 0x9, 0x2, 0x1ff, 0xf7, 0x5, 0xe, 0x1, 0x7, 0x4000000, 0x4ca0, 0x2, 0x7, 0x7, 0x2a70, 0x77, 0x1000, 0x3, 0x3, 0x12a8, 0x2, 0x1, 0xfffffff9, 0x4, 0x7fff, 0x10, 0x230, 0xd, 0x200, 0x7, 0x8, 0x4bb, 0x1ff, 0x5, 0x1, 0x6, 0x0, 0x399, 0x7fff, 0x3, 0x3, 0xffffffe4, 0x1c2, 0x0, 0x4, 0x3, 0x3, 0x12a2, 0x0, 0x7a6, 0x400, 0xff, 0x5, 0x9, 0x7, 0x2, 0x2, 0x32a, 0x400, 0x1, 0x4, 0x10, 0x8, 0x8001, 0x4, 0x5, 0x0, 0x1, 0x200, 0x8001, 0x6, 0x40, 0x4, 0x7, 0x8, 0xb, 0x9, 0x1, 0x10, 0x16, 0xf477, 0x655, 0x8, 0x10000, 0x35c, 0x2c2, 0x4, 0xfffffffe, 0x3, 0x4, 0x3, 0x5, 0xe, 0x0, 0x1, 0x6, 0x8, 0x4, 0x5, 0x3, 0x1ff, 0x4, 0x16, 0xd, 0x0, 0x2, 0x3, 0x80c, 0x5, 0x2, 0x0, 0x0, 0x4, 0x97c, 0x6, 0x8, 0x3ff, 0x7fffffff, 0xc5d, 0x1, 0x3, 0x200, 0x16d1, 0x9954, 0x9, 0x823d, 0x5, 0x0, 0x7, 0xd30, 0x6, 0x81, 0x1, 0x0, 0x8, 0x9, 0x10, 0xe0, 0x4, 0xd3, 0xf, 0x38e7, 0x5, 0x481a, 0x7e5, 0xfff, 0xfff, 0x80000000, 0x5, 0xf333, 0x4f53d65, 0x100, 0x6, 0x6, 0x3, 0x4, 0x800, 0xffff, 0x0, 0x8, 0x9a99, 0xe4, 0x81000, 0x40, 0x79, 0x0, 0x9, 0x3, 0x1ffe000, 0x8, 0x8f, 0xff, 0x10, 0x7228, 0x6, 0x1, 0x5, 0x4, 0x1, 0xad6, 0x8, 0xff, 0xc, 0x1, 0x4, 0x3, 0x5, 0x4, 0x4, 0x6, 0x7, 0x9, 0x82, 0x9, 0x0, 0x6, 0xd, 0x80000001, 0x75f5294b, 0x7e, 0x1, 0x7, 0x80, 0x1, 0x8, 0x2, 0x335, 0x0, 0x1, 0x101, 0x200, 0x3, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x401, 0xffff, 0x1509, 0x2f8b, 0x4, 0x100, 0x5, 0xfffffff7, 0x702b2081, 0x7, 0xa7, 0x8, 0x3, 0xfffffffc, 0xd04, 0x7, 0x0, 0x1, 0xf46e, 0x9, 0x5, 0xd521652, 0x0, 0x9, 0x5, 0x3, 0x5, 0x640, 0x244, 0x3, 0xfff, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff28}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe000000000000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x499c, 0x1, 0x4000000, 0xffffffff, 0xffffffff, 0x0, 0xff, 0x3, 0x1, 0xd424, 0xcd2c, 0x0, 0x289807d6, 0x6, 0xd0c, 0x10001, 0x9, 0xcfa, 0x200, 0x6662, 0x8, 0x6, 0x71, 0x5, 0xf2, 0x5, 0x80000001, 0x0, 0x400, 0x7, 0x2, 0x7, 0xac, 0xe0000000, 0x80000000, 0x3, 0x4, 0xd06, 0x7, 0xe506, 0x1, 0x2, 0x0, 0x0, 0x2, 0x4, 0x6, 0x7, 0x280, 0xffffff01, 0x9, 0x6, 0x0, 0x101, 0x2a1a, 0x10001, 0x800, 0x7, 0x8000, 0x2, 0x4, 0xef64, 0x3ff, 0x9, 0x9, 0x8, 0x2, 0x200, 0x7, 0x3, 0xa, 0xffff, 0x5, 0x4, 0x400, 0x3, 0x2, 0x3, 0x4, 0x3, 0x9, 0xe8, 0x0, 0x1, 0xd55, 0x3, 0x80, 0x3ff, 0x5e, 0xffffffff, 0x80000000, 0xffff015c, 0x2, 0x8, 0x9, 0x3, 0x7, 0x5, 0x7, 0x4ae8eff2, 0x0, 0x5, 0xb72, 0x63, 0x4, 0x3, 0xa5a4, 0x7, 0x800, 0xb3f, 0x2, 0x5, 0x7540080a, 0x184, 0x508, 0x53, 0x4, 0xfffffffd, 0x5fa, 0x63d, 0x8000, 0x8, 0x1, 0x7, 0x7, 0xff, 0x2, 0xfff000, 0x1, 0x3, 0x1ff, 0x0, 0x2, 0x6, 0x2, 0x2, 0x6, 0x4, 0x100, 0x62, 0x280000, 0x100, 0x8800, 0x9, 0x8, 0x8, 0x5, 0x7ff, 0x5, 0x5, 0x2, 0x8, 0x0, 0x7, 0x1, 0x8, 0x6, 0x1c, 0x2, 0x2, 0x80000000, 0x9, 0x40, 0x1, 0x0, 0x7, 0x1b94, 0x2, 0xffffff80, 0xffffffff, 0x1, 0x80000001, 0x10001, 0x6e7, 0x3, 0x1, 0x3, 0x5, 0x7a, 0x4, 0xfffffff8, 0x7fff, 0x0, 0x6, 0x74e, 0x3, 0x80000000, 0x4, 0xe, 0x51f, 0x0, 0x5, 0x1ff, 0x5, 0x1ff, 0x3, 0x7fffffff, 0x593, 0xfffffffa, 0x0, 0x81, 0xfffffe0b, 0x8, 0x6, 0x7, 0x8, 0x2, 0x1ff0000, 0x4, 0x7ff, 0x9, 0x80000001, 0x13, 0x9, 0x9, 0x2, 0x4, 0x9, 0x9, 0x2, 0x0, 0x26, 0xfff, 0xfffffffc, 0x101, 0x0, 0xffff, 0x76, 0x10, 0x40, 0x6, 0xf, 0x1afc, 0x1, 0x7, 0xfffffffb, 0x80000000, 0x1, 0xebe1, 0x2, 0xc, 0xf1a7, 0x401, 0x8, 0x3, 0x7fff, 0x4, 0x376, 0x230bb28f, 0x8, 0x5, 0xc76, 0x2, 0x800, 0x400, 0xe264]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x1, 0x6, 0x7, 0x5, {0xf7, 0x2, 0x3, 0xbd4, 0xd, 0x1}, {0x80, 0x1, 0xf, 0x68, 0x7ca6, 0x7}, 0x8022, 0x2, 0x20}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000a10"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffa888}, 0x20000880) close(r2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 2.001027735s ago: executing program 1 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c00000400000014000180080016000000030006000600800a0000080002"], 0x1034}}, 0x0) 1.732732146s ago: executing program 0 (id=143): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="ae46bc2fa9cb201922fe82a5c7562897", 0x10) 984.21678ms ago: executing program 1 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r3, 0x0}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 86.071526ms ago: executing program 0 (id=145): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x0, r1, 0x0, 0x80000}) 0s ago: executing program 1 (id=146): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setregid(0xffffffffffffffff, 0xffffffffffffffff) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 67.080812][ T5756] cgroup: Unknown subsys name 'net' [ 67.213635][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.629931][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.584253][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.595018][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.595634][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.611285][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.611347][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.628691][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.628770][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.639051][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.656032][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.657460][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.665978][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.673640][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.682776][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.691491][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.706961][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.707542][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.716381][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.737855][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.747232][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.790089][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.800620][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.809423][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.818898][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.835087][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.174723][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 71.244365][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 71.315738][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 71.343782][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.351777][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.360572][ T5769] bridge_slave_0: entered allmulticast mode [ 71.368138][ T5769] bridge_slave_0: entered promiscuous mode [ 71.378206][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.386128][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.394374][ T5769] bridge_slave_1: entered allmulticast mode [ 71.401806][ T5769] bridge_slave_1: entered promiscuous mode [ 71.469355][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.494827][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.504033][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.512200][ T5767] bridge_slave_0: entered allmulticast mode [ 71.519802][ T5767] bridge_slave_0: entered promiscuous mode [ 71.529989][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.538139][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.546521][ T5767] bridge_slave_1: entered allmulticast mode [ 71.553833][ T5767] bridge_slave_1: entered promiscuous mode [ 71.570847][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.644753][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.659744][ T5769] team0: Port device team_slave_0 added [ 71.669476][ T5769] team0: Port device team_slave_1 added [ 71.688287][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.695989][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.704838][ T5768] bridge_slave_0: entered allmulticast mode [ 71.713793][ T5768] bridge_slave_0: entered promiscuous mode [ 71.723362][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.749278][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.757053][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.764184][ T5768] bridge_slave_1: entered allmulticast mode [ 71.771704][ T5768] bridge_slave_1: entered promiscuous mode [ 71.835320][ T5767] team0: Port device team_slave_0 added [ 71.843679][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.855330][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.888552][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.889324][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.906035][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.907756][ T5767] team0: Port device team_slave_1 added [ 71.918807][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.943740][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.951547][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.980561][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.994164][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.015307][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.022943][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.051485][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.070521][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.078054][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.107105][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.119911][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 72.143077][ T5768] team0: Port device team_slave_0 added [ 72.183928][ T5768] team0: Port device team_slave_1 added [ 72.246110][ T5769] hsr_slave_0: entered promiscuous mode [ 72.253180][ T5769] hsr_slave_1: entered promiscuous mode [ 72.266306][ T5767] hsr_slave_0: entered promiscuous mode [ 72.273447][ T5767] hsr_slave_1: entered promiscuous mode [ 72.281474][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.290292][ T5767] Cannot create hsr debugfs directory [ 72.339376][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.347440][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.375086][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.400964][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.409007][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.437110][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.512959][ T5768] hsr_slave_0: entered promiscuous mode [ 72.519988][ T5768] hsr_slave_1: entered promiscuous mode [ 72.528053][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.536168][ T5768] Cannot create hsr debugfs directory [ 72.563165][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.571228][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.579781][ T5773] bridge_slave_0: entered allmulticast mode [ 72.586900][ T5773] bridge_slave_0: entered promiscuous mode [ 72.618427][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.626079][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.634459][ T5773] bridge_slave_1: entered allmulticast mode [ 72.641615][ T5773] bridge_slave_1: entered promiscuous mode [ 72.710553][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.750161][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.806941][ T5773] team0: Port device team_slave_0 added [ 72.837389][ T5782] Bluetooth: hci2: command tx timeout [ 72.843503][ T5782] Bluetooth: hci0: command tx timeout [ 72.849935][ T5783] Bluetooth: hci1: command tx timeout [ 72.864315][ T5773] team0: Port device team_slave_1 added [ 72.917142][ T5782] Bluetooth: hci3: command tx timeout [ 72.923718][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.931829][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.959186][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.001164][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.009095][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.037282][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.104487][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.129975][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.156233][ T5773] hsr_slave_0: entered promiscuous mode [ 73.163854][ T5773] hsr_slave_1: entered promiscuous mode [ 73.170649][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.179264][ T5773] Cannot create hsr debugfs directory [ 73.186276][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.212759][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.288839][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.302763][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.340035][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.359334][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.461511][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.488551][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.502580][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.512764][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.594522][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.621118][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.643479][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.653711][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.737786][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.753665][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.784974][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.815573][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.823180][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.835596][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.843317][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.871894][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.893224][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.901311][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.925364][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.964984][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.972265][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.015448][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.064192][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.072005][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.088066][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.096343][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.123453][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.213306][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.245960][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.293177][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.307983][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.315544][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.351050][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.358714][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.424520][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.515206][ T5773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.559197][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.661964][ T5769] veth0_vlan: entered promiscuous mode [ 74.684738][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.707552][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.723997][ T5769] veth1_vlan: entered promiscuous mode [ 74.843357][ T5767] veth0_vlan: entered promiscuous mode [ 74.870524][ T5768] veth0_vlan: entered promiscuous mode [ 74.889303][ T5769] veth0_macvtap: entered promiscuous mode [ 74.909137][ T5767] veth1_vlan: entered promiscuous mode [ 74.920028][ T5782] Bluetooth: hci0: command tx timeout [ 74.920106][ T51] Bluetooth: hci2: command tx timeout [ 74.933034][ T5783] Bluetooth: hci1: command tx timeout [ 74.945172][ T5769] veth1_macvtap: entered promiscuous mode [ 74.970992][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.982891][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.997314][ T5783] Bluetooth: hci3: command tx timeout [ 75.007827][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.019431][ T5768] veth1_vlan: entered promiscuous mode [ 75.039601][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.051651][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.061532][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.071658][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.185439][ T5767] veth0_macvtap: entered promiscuous mode [ 75.199424][ T5767] veth1_macvtap: entered promiscuous mode [ 75.229939][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.247728][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.250303][ T5768] veth0_macvtap: entered promiscuous mode [ 75.285106][ T5768] veth1_macvtap: entered promiscuous mode [ 75.308594][ T5773] veth0_vlan: entered promiscuous mode [ 75.341265][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.341566][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.350529][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.363809][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.383090][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.411572][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.424032][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.434634][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.447276][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.459592][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.474007][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.491590][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.503674][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.529980][ T5773] veth1_vlan: entered promiscuous mode [ 75.546418][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.564898][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.579564][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.590550][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.604355][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.617334][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.627740][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.639083][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.650585][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.677163][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.687096][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.697792][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.708089][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.834981][ T5773] veth0_macvtap: entered promiscuous mode [ 75.853777][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.867768][ T5773] veth1_macvtap: entered promiscuous mode [ 75.923436][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.942940][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.944160][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.957475][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.990945][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.019001][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.031720][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.046140][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.058952][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.100821][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.137423][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.152907][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.164291][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.179555][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.204217][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.217798][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.260894][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.263543][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.269128][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.427745][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.475383][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.541293][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.944184][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.990341][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.011063][ T5783] Bluetooth: hci1: command tx timeout [ 77.017847][ T5783] Bluetooth: hci2: command tx timeout [ 77.023976][ T5783] Bluetooth: hci0: command tx timeout [ 77.064201][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.077545][ T5783] Bluetooth: hci3: command tx timeout [ 77.085119][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.104018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 77.570147][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.650116][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.783280][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.828860][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.026523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 79.647024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.872769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.877245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.884892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 80.176861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 80.586503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.862023][ T5783] Bluetooth: hci0: command tx timeout [ 80.862890][ T5782] Bluetooth: hci2: command tx timeout [ 80.868546][ T5783] Bluetooth: hci1: command tx timeout [ 80.874414][ T5782] Bluetooth: hci3: command tx timeout [ 81.331210][ T5863] tipc: Started in network mode [ 81.336597][ T5863] tipc: Node identity 4e9a0b7e506a, cluster identity 4711 [ 81.349564][ T5863] tipc: Enabled bearer , priority 0 [ 81.362931][ T5863] syzkaller0: entered promiscuous mode [ 81.389380][ T5863] syzkaller0: entered allmulticast mode [ 81.541206][ T5863] tipc: Resetting bearer [ 81.583245][ T5862] tipc: Resetting bearer [ 81.615235][ T5869] syz.3.11[5869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.657147][ T5862] tipc: Disabling bearer [ 81.689385][ T5869] loop3: detected capacity change from 0 to 1024 [ 81.799385][ T5869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.841858][ T5869] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.629800][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.886744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 85.143130][ T5888] loop1: detected capacity change from 0 to 2048 [ 85.143517][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 85.161184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.257200][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.262067][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 85.375312][ T5890] team0 (unregistering): Port device team_slave_0 removed [ 85.392584][ T5890] team0 (unregistering): Port device team_slave_1 removed [ 86.256053][ T5900] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 87.112407][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.185165][ T5890] syz.0.8 (5890) used greatest stack depth: 20360 bytes left [ 87.250489][ T966] cfg80211: failed to load regulatory.db [ 87.520457][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 88.584617][ T5918] syzkaller0: entered promiscuous mode [ 88.596148][ T5918] syzkaller0: entered allmulticast mode [ 92.630143][ T5942] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 94.792076][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.186329][ T5978] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.35'. [ 96.718372][ T5982] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 97.413346][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 98.701962][ T6000] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 101.719826][ T6017] tipc: Started in network mode [ 101.724958][ T6017] tipc: Node identity 62929f4d4a29, cluster identity 4711 [ 101.733288][ T6017] tipc: Enabled bearer , priority 0 [ 101.803807][ T6017] syzkaller0: entered promiscuous mode [ 101.820474][ T6017] syzkaller0: entered allmulticast mode [ 101.988757][ T6020] tipc: Resetting bearer [ 102.054030][ T6016] tipc: Resetting bearer [ 102.098460][ T6016] tipc: Disabling bearer [ 103.145958][ T6033] syzkaller0: entered promiscuous mode [ 103.155908][ T6033] syzkaller0: entered allmulticast mode [ 103.963343][ T6036] kvm: kvm [6034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x243 [ 103.992792][ T6036] kvm: kvm [6034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xaf51 [ 104.007475][ T6036] kvm: kvm [6034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2b60 [ 104.032170][ T6036] kvm: kvm [6034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd6f8 [ 104.045887][ T6036] kvm: kvm [6034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x108b [ 104.694917][ T6044] mmap: syz.3.51 (6044) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.130154][ T6036] kvm: kvm [6034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60d1 [ 106.143047][ T6054] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 106.972595][ T28] audit: type=1326 audit(2000000019.289:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 107.498333][ T5085] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 107.499044][ T28] audit: type=1326 audit(2000000019.289:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 107.666545][ T28] audit: type=1326 audit(2000000019.289:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 107.776245][ T28] audit: type=1326 audit(2000000019.289:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 107.831253][ T28] audit: type=1326 audit(2000000019.289:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 107.946556][ T28] audit: type=1326 audit(2000000019.289:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 108.052801][ T28] audit: type=1326 audit(2000000019.289:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 108.088999][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.352965][ T28] audit: type=1326 audit(2000000019.299:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 108.456611][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 108.647838][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.697358][ T8] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.716194][ T28] audit: type=1326 audit(2000000019.299:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 108.775535][ T8] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.791046][ T28] audit: type=1326 audit(2000000019.299:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947439c799 code=0x7ffc0000 [ 108.819655][ T8] usb 2-1: Product: syz [ 108.824050][ T8] usb 2-1: Manufacturer: syz [ 109.025020][ T8] usb 2-1: SerialNumber: syz [ 109.071196][ T8] usb 2-1: config 0 descriptor?? [ 109.105098][ T6066] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.185047][ T6078] o2cb: This node has not been configured. [ 109.191531][ T6078] o2cb: Cluster check failed. Fix errors before retrying. [ 109.199126][ T6078] (syz.3.52,6078,1):user_dlm_register:674 ERROR: status = -22 [ 109.207105][ T6078] (syz.3.52,6078,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 109.904992][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.913764][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.489436][ T6086] bridge0: port 3(syz_tun) entered blocking state [ 110.501597][ T6086] bridge0: port 3(syz_tun) entered disabled state [ 110.512719][ T6086] syz_tun: entered allmulticast mode [ 110.526025][ T5837] usb 2-1: USB disconnect, device number 2 [ 110.597124][ T6086] syz_tun: entered promiscuous mode [ 110.685228][ T6089] loop0: detected capacity change from 0 to 512 [ 111.577389][ T5085] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 111.651396][ T5085] Bluetooth: hci3: Injecting HCI hardware error event [ 111.661350][ T5085] Bluetooth: hci3: hardware error 0x00 [ 112.318488][ T6098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.381429][ T6104] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.66'. [ 112.567280][ T6098] bond0: (slave rose0): Enslaving as an active interface with an up link [ 113.223222][ T6109] loop3: detected capacity change from 0 to 2048 [ 113.295122][ T6109] loop3: p3 < > p4 < > [ 113.313922][ T6109] loop3: partition table partially beyond EOD, truncated [ 113.367861][ T6109] loop3: p3 start 4284289 is beyond EOD, truncated [ 113.780176][ T6113] syzkaller0: entered promiscuous mode [ 113.879520][ T6113] syzkaller0: entered allmulticast mode [ 114.256153][ T5085] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 114.822974][ T6121] Zero length message leads to an empty skb [ 114.921033][ T6137] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 114.972035][ T6137] team0 (unregistering): Port device team_slave_0 removed [ 115.029942][ T6137] team0 (unregistering): Failed to send options change via netlink (err -105) [ 115.078679][ T6137] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 115.138029][ T6137] team0 (unregistering): Port device team_slave_1 removed [ 117.729967][ T6188] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.210492][ T6195] syzkaller0: entered promiscuous mode [ 118.216120][ T6195] syzkaller0: entered allmulticast mode [ 121.915270][ T6215] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 121.968769][ T6219] warning: `syz.3.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.085246][ T6216] netlink: 'syz.3.87': attribute type 10 has an invalid length. [ 122.307651][ T6216] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 123.155238][ T6222] netlink: 14 bytes leftover after parsing attributes in process `syz.3.87'. [ 123.731463][ T6222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.788086][ T6222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.828072][ T6222] bond0 (unregistering): Released all slaves [ 126.207853][ T6254] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 126.216020][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.95'. [ 126.220853][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 126.552821][ T6257] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 126.674092][ T6259] bond1 (unregistering): (slave syz_tun): Releasing backup interface [ 126.748865][ T6259] bond1 (unregistering): Released all slaves [ 127.230887][ T6268] syzkaller0: entered promiscuous mode [ 127.247363][ T6268] syzkaller0: entered allmulticast mode [ 127.626576][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 130.696704][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.181130][ T6288] ptrace attach of "./syz-executor exec"[6303] was attempted by "./syz-executor exec"[6288] [ 132.057863][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 132.103324][ T5813] usb 1-1: config index 0 descriptor too short (expected 526, got 367) [ 132.897041][ T5813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.908746][ T5813] usb 1-1: config 0 has no interfaces? [ 132.988576][ T5813] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 133.025666][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.166528][ T5813] usb 1-1: Product: syz [ 133.171395][ T5813] usb 1-1: Manufacturer: syz [ 133.176706][ T5813] usb 1-1: SerialNumber: syz [ 133.208718][ T5813] usb 1-1: config 0 descriptor?? [ 133.231941][ T5813] usb 1-1: can't set config #0, error -71 [ 133.383246][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.390672][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.857313][ T5813] usb 1-1: USB disconnect, device number 2 [ 134.829386][ T6324] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 134.872677][ T6324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.925048][ T6324] vlan2: entered promiscuous mode [ 134.930763][ T6324] bond1: entered promiscuous mode [ 134.939324][ T6324] vlan2: entered allmulticast mode [ 135.074756][ T6324] bond1: entered allmulticast mode [ 135.218859][ T6326] bond1: (slave bridge1): making interface the new active one [ 135.368156][ T6326] bridge1: entered promiscuous mode [ 135.374865][ T6326] bridge1: entered allmulticast mode [ 135.398328][ T6326] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 136.392103][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 137.282417][ T8] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 139.683248][ T6358] ptrace attach of "./syz-executor exec"[6365] was attempted by "./syz-executor exec"[6358] [ 140.381970][ T6371] loop1: detected capacity change from 0 to 128 [ 140.398350][ T6371] ======================================================= [ 140.398350][ T6371] WARNING: The mand mount option has been deprecated and [ 140.398350][ T6371] and is ignored by this kernel. Remove the mand [ 140.398350][ T6371] option from the mount to silence this warning. [ 140.398350][ T6371] ======================================================= [ 140.586898][ T6374] syzkaller0: entered promiscuous mode [ 140.592635][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.603855][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 140.617858][ T8] usb 1-1: can't read configurations, error -71 [ 140.628684][ T6374] syzkaller0: entered allmulticast mode [ 140.755872][ T6371] loop1: detected capacity change from 0 to 2048 [ 140.813591][ T6371] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 140.824769][ T6371] loop1: partition table partially beyond EOD, truncated [ 140.848547][ T6371] loop1: p1 start 4278190080 is beyond EOD, truncated [ 140.870511][ T6371] loop1: p2 start 16908800 is beyond EOD, truncated [ 140.900079][ T6371] loop1: p4 start 11326 is beyond EOD, truncated [ 140.928477][ T6371] loop1: p5 start 16908800 is beyond EOD, truncated [ 140.945792][ T6371] loop1: p6 start 11326 is beyond EOD, truncated [ 140.970246][ T6381] loop0: detected capacity change from 0 to 8192 [ 141.488660][ T6394] syzkaller0: entered promiscuous mode [ 141.495271][ T6394] syzkaller0: entered allmulticast mode [ 141.795052][ T6402] netlink: 64 bytes leftover after parsing attributes in process `syz.2.131'. [ 144.886536][ T5085] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 144.897828][ T28] audit: type=1326 audit(2000000056.358:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6431 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd952d9c799 code=0x7ffc0000 [ 144.922838][ T5085] Bluetooth: hci0: Injecting HCI hardware error event [ 144.931861][ T5085] Bluetooth: hci0: hardware error 0x00 [ 144.940244][ T28] audit: type=1326 audit(2000000056.358:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6431 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd952d9c799 code=0x7ffc0000 [ 144.975472][ T28] audit: type=1326 audit(2000000056.368:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6431 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fd952d9c799 code=0x7ffc0000 [ 145.001067][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 145.006690][ T28] audit: type=1326 audit(2000000056.368:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6431 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd952d9c799 code=0x7ffc0000 [ 145.037395][ T28] audit: type=1326 audit(2000000056.368:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6431 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd952d9c799 code=0x7ffc0000 [ 146.410293][ T6444] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 146.495892][ T6446] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.142'. [ 146.507005][ T6446] openvswitch: netlink: ct_state flags 00030000 unsupported [ 147.316763][ T5085] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 147.924571][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.196652][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 148.208988][ T23] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 148.272381][ T23] usb 4-1: config 0 has no interface number 0 [ 148.294004][ T23] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.921728][ T23] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 148.976532][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.986464][ T23] usb 4-1: Product: syz [ 148.991254][ T23] usb 4-1: Manufacturer: syz [ 148.992188][ T6459] netlink: 277 bytes leftover after parsing attributes in process `syz.1.146'. [ 254.296393][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 254.303868][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6365/1:b..l [ 254.312160][ C0] rcu: (detected by 0, t=10502 jiffies, g=13577, q=248 ncpus=2) [ 254.320323][ C0] task:syz.3.120 state:R running task stack:22728 pid:6365 ppid:5767 flags:0x00004002 [ 254.332769][ C0] Call Trace: [ 254.336350][ C0] [ 254.339515][ C0] __schedule+0x1553/0x45a0 [ 254.344056][ C0] ? asan.module_dtor+0x20/0x20 [ 254.349142][ C0] ? lock_acquire+0x208/0x420 [ 254.354147][ C0] ? preempt_schedule+0xc0/0xd0 [ 254.359400][ C0] preempt_schedule_common+0x82/0xc0 [ 254.364950][ C0] preempt_schedule+0xc0/0xd0 [ 254.369985][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 254.375990][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 254.381481][ C0] preempt_schedule_thunk+0x1a/0x30 [ 254.387313][ C0] _raw_spin_unlock+0x3a/0x40 [ 254.392193][ C0] follow_page_pte+0xbd6/0x1ac0 [ 254.397153][ C0] ? pmd_lock+0x60/0x60 [ 254.401493][ C0] __get_user_pages+0x55c/0x1380 [ 254.406868][ C0] ? populate_vma_page_range+0x380/0x380 [ 254.412748][ C0] ? get_dump_page+0xb6/0x200 [ 254.417863][ C0] ? down_read_killable+0x1d0/0x340 [ 254.423420][ C0] get_dump_page+0x10c/0x200 [ 254.428277][ C0] ? fault_in_readable+0x150/0x150 [ 254.433745][ C0] ? __asan_memset+0x22/0x40 [ 254.438421][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 254.443175][ C0] dump_user_range+0x127/0x860 [ 254.448193][ C0] ? dump_skip+0x40/0x40 [ 254.452511][ C0] ? dump_emit+0x78/0xe0 [ 254.456921][ C0] ? dump_emit+0xa6/0xe0 [ 254.461448][ C0] ? elf_core_dump+0x2bae/0x3770 [ 254.466481][ C0] elf_core_dump+0x31d0/0x3770 [ 254.471457][ C0] ? load_elf_binary+0x2860/0x2860 [ 254.477368][ C0] ? dump_vma_snapshot+0xbe8/0x1090 [ 254.483032][ C0] ? verify_lock_unused+0x140/0x140 [ 254.488411][ C0] ? mas_next_slot+0x94f/0x980 [ 254.493445][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 254.499418][ C0] ? 0xffffffffff600000 [ 254.503575][ C0] do_coredump+0x17cc/0x24d0 [ 254.508257][ C0] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 254.513454][ C0] ? lock_chain_count+0x20/0x20 [ 254.518469][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.524006][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 254.529401][ C0] get_signal+0x1133/0x13f0 [ 254.535058][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 254.540902][ C0] ? get_sigframe_size+0x20/0x20 [ 254.546458][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 254.552885][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 254.558525][ C0] exit_to_user_mode_loop+0x70/0x110 [ 254.564064][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 254.569686][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 254.575232][ C0] exc_page_fault+0x8c/0x100 [ 254.579987][ C0] asm_exc_page_fault+0x26/0x30 [ 254.585028][ C0] RIP: 0033:0x7f9c2b99c7a1 [ 254.589696][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 254.595920][ C0] RAX: 0000000000000000 RBX: 00007f9c2bc16090 RCX: 00007f9c2b99c799 [ 254.604104][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 254.612251][ C0] RBP: 00007f9c2ba32c99 R08: 0000000000000000 R09: 0000000000000000 [ 254.620850][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.629261][ C0] R13: 00007f9c2bc16128 R14: 00007f9c2bc16090 R15: 00007fffc0d2e3f8 [ 254.638089][ C0] [ 254.641484][ C0] rcu: rcu_preempt kthread starved for 585 jiffies! g13577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 254.654206][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 254.665663][ C0] rcu: RCU grace-period kthread stack dump: [ 254.671972][ C0] task:rcu_preempt state:R running task stack:27656 pid:17 ppid:2 flags:0x00004000 [ 254.683974][ C0] Call Trace: [ 254.687468][ C0] [ 254.690587][ C0] __schedule+0x1553/0x45a0 [ 254.695209][ C0] ? asan.module_dtor+0x20/0x20 [ 254.700514][ C0] ? enqueue_timer+0x23d/0x550 [ 254.705710][ C0] ? __mod_timer+0x984/0xdb0 [ 254.710671][ C0] schedule+0xbd/0x170 [ 254.715005][ C0] schedule_timeout+0x188/0x2d0 [ 254.720204][ C0] ? console_conditional_schedule+0x40/0x40 [ 254.726641][ C0] ? update_process_times+0x1b0/0x1b0 [ 254.732020][ C0] ? prepare_to_swait_event+0x339/0x360 [ 254.737751][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 254.742705][ C0] ? rcu_gp_init+0x1162/0x1560 [ 254.747833][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 254.752795][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 254.759027][ C0] ? rcu_gp_init+0x1560/0x1560 [ 254.763965][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 254.769176][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.774461][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 254.780072][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 254.785468][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 254.790955][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 254.796243][ C0] ? __kthread_parkme+0x162/0x1c0 [ 254.801704][ C0] kthread+0x2fa/0x390 [ 254.806062][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 254.811472][ C0] ? kthread_blkcg+0xd0/0xd0 [ 254.816081][ C0] ret_from_fork+0x48/0x80 [ 254.820940][ C0] ? kthread_blkcg+0xd0/0xd0 [ 254.825601][ C0] ret_from_fork_asm+0x11/0x20 [ 254.830826][ C0] [ 254.834176][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 254.841007][ C0] Sending NMI from CPU 0 to CPUs 1: [ 254.846469][ C1] NMI backtrace for cpu 1 [ 254.846494][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 254.846579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.846588][ C1] RIP: 0010:update_rq_clock+0x0/0x4b0 [ 254.846614][ C1] Code: 7c 96 e8 53 b7 82 00 eb 8f 89 da 80 e2 07 80 c2 03 38 ca 7c cd 48 89 df 89 c5 e8 db b7 82 00 89 e8 eb bf 0f 1f 80 00 00 00 00 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 fb 49 [ 254.846626][ C1] RSP: 0018:ffffc900001f0c78 EFLAGS: 00000046 [ 254.846639][ C1] RAX: 1ffff110171e780a RBX: 00000000ffffed79 RCX: b3978e9ac7c09800 [ 254.846650][ C1] RDX: 0000000000000100 RSI: ffffffff8acadae0 RDI: ffff8880b8f3c000 [ 254.846660][ C1] RBP: ffffc900001f0df0 R08: 0000000000000003 R09: 0000000000000004 [ 254.846669][ C1] R10: dffffc0000000000 R11: fffff5200003e178 R12: 0000000000000000 [ 254.846679][ C1] R13: 1ffff110171e795a R14: dffffc0000000000 R15: ffff8880b8f3cd58 [ 254.846690][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 254.846702][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.846712][ C1] CR2: 000020000003e000 CR3: 00000000309f7000 CR4: 00000000003506e0 [ 254.846725][ C1] Call Trace: [ 254.846732][ C1] [ 254.846737][ C1] update_blocked_averages+0x1b8/0x1590 [ 254.846754][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 254.846773][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 254.846789][ C1] ? __run_timers+0x7a0/0x800 [ 254.846809][ C1] ? rebalance_domains+0xa10/0xa10 [ 254.846825][ C1] ? detach_timer+0x2b0/0x2b0 [ 254.846840][ C1] ? lock_chain_count+0x20/0x20 [ 254.846857][ C1] run_rebalance_domains+0xf9/0x1c0 [ 254.846875][ C1] handle_softirqs+0x280/0x820 [ 254.846892][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 254.846908][ C1] ? do_softirq+0x1a0/0x1a0 [ 254.846924][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 254.846943][ C1] __irq_exit_rcu+0xd3/0x190 [ 254.846956][ C1] ? irq_exit_rcu+0x20/0x20 [ 254.846974][ C1] irq_exit_rcu+0x9/0x20 [ 254.846986][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 254.847003][ C1] [ 254.847007][ C1] [ 254.847012][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.847029][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 254.847045][ C1] Code: 40 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 29 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 254.847056][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 254.847068][ C1] RAX: b3978e9ac7c09800 RBX: ffffffff8162ac40 RCX: b3978e9ac7c09800 [ 254.847078][ C1] RDX: 0000000000000001 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 254.847088][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 254.847099][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff110036cd780 [ 254.847109][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 254.847121][ C1] ? do_idle+0x1f0/0x4e0 [ 254.847141][ C1] default_idle+0x13/0x20 [ 254.847157][ C1] default_idle_call+0x6c/0xa0 [ 254.847173][ C1] do_idle+0x1f0/0x4e0 [ 254.847191][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 254.847207][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 254.847223][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 254.847245][ C1] cpu_startup_entry+0x43/0x60 [ 254.847261][ C1] start_secondary+0xee/0xf0 [ 254.847276][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 254.847303][ C1] [ 254.887006][ T1291] ieee802154 phy0 wpan0: encryption failed: -22