last executing test programs: 21.04806027s ago: executing program 4 (id=5): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1fd, &(0x7f0000000480)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TCSETSW2(r4, 0x5425, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltfilter={0x44, 0x2d, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff}, {0x6, 0xffe0}, {0x0, 0x1d}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x70, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4004080) close(r3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) 17.449180127s ago: executing program 4 (id=13): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x20040000) recvmmsg(r0, 0x0, 0x0, 0x40010183, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x10) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000280)={0x2, 0x1, 0x3, {0x2, @win={{0x7fff, 0xfffffff0, 0xfffffffc, 0x7}, 0x3, 0x3, &(0x7f0000000400)={{0xffff, 0x1, 0xd09, 0xd4}, &(0x7f0000000500)={{0x5, 0x5, 0x1, 0x457758a3}}}, 0x80000002, &(0x7f0000000540)="e45a3335b0e0061a8989459b0b612fffdbf3868e410d238b6b9ebe1ca4d881746f95c0c8be7f8fa3fbeab0b9f906d0b2cf4457670d925c0826ebbff61a2ca09f321d3d7994761c3ddddddebd7c702a5d22e6380bcc80eaee66569f3c7ce0cc67b6e9bed4dca36b8abe38b0d0d2ff6b51bbcb692b335e15d332187556b8824885da06d4ade67c5da51bd711ad46307bce5e73d44e3fc2405af379aeeb9ce49d9f673120136c97809cf470861ba0000221c9cd958358dcc12aba97eaa4aec55e8f26382f8a77bfac63d019c90908da965a", 0xf6}}, 0x6}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000240)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x6}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @loopback}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x10000002, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xfffffffffffffff6, 0x80000000440, 0x1, 0x5, 0xffffeffffffffffe, 0x2004c6, 0x1, 0x0, 0xfffffffffffffffa, 0x0, 0x89b3, 0x2000, 0x4, 0x5], 0x3b390000, 0xd010}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) 16.232312653s ago: executing program 4 (id=19): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x5e4}}, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0}) 10.996483091s ago: executing program 0 (id=32): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000140a01010000000000000000000000060c00064000000000000000010900010073797a310000000039000800ac85b8ce93896bea80ce5e36911700a06fcbe3dbe469d9d3bd55b6a17781c3fb0e5d46ee6d2119b74d2e270544b06678f440fa8bea00000088000000060a0104000000000000000001000000080009400000000160000480240001800b000100657874686472000014000280080001400000000c0500020007000000380001800c0001006269747769736500280002800800034000000000080001400000001408000240000000120c000480080001006eee7e000900010073797a30000000001400000011009e205ea7697078a4d0010000000000000000000700000ac484b73d53776230e4e7ea86c04726b7fa8833ee8d524849ed"], 0x118}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x80086601, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x5e4}}, 0x50) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0}) 8.882180511s ago: executing program 4 (id=39): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1fd, &(0x7f0000000480)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8, 0x3f00}) 8.88093056s ago: executing program 0 (id=40): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x80086601, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x5e4}}, 0x50) 8.880719606s ago: executing program 2 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, 0x0, 0x800) 8.212717329s ago: executing program 2 (id=42): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000880)={0x3, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x3, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}]}, 0x20c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r3 = memfd_create(0x0, 0x3) ftruncate(r3, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 7.294329343s ago: executing program 1 (id=44): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1fd, &(0x7f0000000480)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TCSETSW2(r4, 0x5425, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltfilter={0x44, 0x2d, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff}, {0x6, 0xffe0}, {0x0, 0x1d}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x70, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4004080) close(r3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) 6.871888825s ago: executing program 4 (id=45): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000405308480100000800000109022400010000a00009040000020300020009210000200122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7}) r5 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x4000040) sendmsg$nl_xfrm(r6, 0x0, 0x0) keyctl$revoke(0x3, r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="200026bd7000fddbdf250100000014000680060005004e240000290003007f000001040006800c00068008000700", @ANYBLOB='P\x00\x00\x00', @ANYBLOB="0500007eed5e000800040002000000050005000200000000", @ANYRES16=r2, @ANYRESOCT=r2], 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x20008080) r8 = syz_io_uring_setup(0x52d0, &(0x7f0000000580)={0x0, 0x0, 0x1, 0xffffffbe, 0x7, 0x0, r4}, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r8, 0x207a98, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xb7) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 6.705848239s ago: executing program 3 (id=46): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) unshare(0x22020600) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x10fd02, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) 6.300007366s ago: executing program 2 (id=47): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20044011) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.265739272s ago: executing program 0 (id=48): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) epoll_create(0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0x541b, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x16, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x2000, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 5.381729399s ago: executing program 3 (id=49): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x5e4}}, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0}) 4.603407695s ago: executing program 0 (id=50): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000880)={0x3, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x3, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}]}, 0x20c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r3 = memfd_create(0x0, 0x3) ftruncate(r3, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 4.602915254s ago: executing program 1 (id=51): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}, @vti_common_policy]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x47ff}) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x18, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x3b, 0x2, 0x1, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}]}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x80000000}}, {{0xa, 0x0, 0xffffffff, @remote, 0x8}}}, 0x108) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x7, @pix_mp={0x6, 0x1, 0x32315659, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x4}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1}}) close(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000280), 0x7fffffff, 0x129680) 4.602525287s ago: executing program 2 (id=53): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000880)={0x3, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x3, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}]}, 0x20c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r3 = memfd_create(0x0, 0x3) ftruncate(r3, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 2.756093096s ago: executing program 3 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, 0x0, 0x800) 2.526229553s ago: executing program 3 (id=55): r0 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xbc, 0xb7, 0xf6, 0x20, 0xfe9, 0xd501, 0x2350, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x7b, 0xe3, 0x79}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x40, 0xffffffffffffff6d) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0x26, 0x1, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) 2.524049368s ago: executing program 2 (id=56): socket(0x2b, 0x80801, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x9, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x21, 0x800, 0x2) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffffff, {[0x2, 0x5, 0x401, 0x4, 0x0, 0x8, 0xfff, 0x400]}}, 0x5c) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="740100001700010000000000000a0000fc0000000000000000000000000000100000000000000000fe80000000000000000000000000000000002001000000000000000000000000000100"/101, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff00000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000007807000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000000000044001c00fc020000000000000000000000000000000004d40000000000000000e00000020000000000000000000000000000000000000000fdffffff8f00000000000000"], 0x174}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00000008000300"/18, @ANYRES32=r6, @ANYBLOB="2c005a802800038021000100000b031606240403304e590b03601260240005300400166c043648096c000000"], 0x48}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 2.357606071s ago: executing program 4 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="240000001a0001002dbd70009dda45590a00800046f2973f0d0c730257f3ce753e483cd32c8e04e22f936cf6ab9bda7ae0fb14a45b9c6b56ac5b8899ba09b6ae7abf864ecc98e88b96f56f867150f2f36daab334216a3dd0d0d95f669df8fb0671498eb288a21e9461ca0eaba888f3b8fce2cba658429f2ed9fc23f4206eae8165edfa17027ce45e17531c80abdfb2978f9467831732c537888dd1738a432737c597bfbfa2067d2427bd119ba61b89ea787d1eec8d873769f9a89ef2182fd17c5a656e639e57a6ea631ad9a17a2c7bff0808c7cab77313adc8dbfec5648a1641192272ab57cf47f3850c76", @ANYRES32=0x0, @ANYBLOB="00000000080002000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) unshare(0x68040200) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x400, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x63, 0x37, 0x16, 0xff, 0x19d2, 0x31, 0xc90d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ee, 0x2, 0x8, 0xf9, 0x30, 0x8, [{{0x9, 0x4, 0x26, 0x3, 0x8, 0xff, 0xff, 0xff, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x2, 0x6, 0xfa}]}, @uac_control={{0xa, 0x24, 0x1, 0x75c, 0xf2}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0xfc01, 0x8, '8'}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x3, 0x5, "a63bb121"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x8001, 0x3c, 'R'}]}], [{{0x9, 0x5, 0x5, 0x8, 0x400, 0x6, 0xa, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x7, 0x6, 0x1, [@generic={0x17, 0x20, "a34c63659b6573c618d86ca6f2836f8f6c8a9f5955"}, @generic={0x28, 0xe, "aa3fd9243c71936e80016c3a25d176f9bfc1c05154425b03a6dd39f1efebe33f4355dcd61add"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x3, 0x0, 0x3, [@generic={0x67, 0x11, "a6cd3cfd149453d306ff47f5abc755976c720d5b0f91937a182635a7e117154d6b5d5a8bddf48e7948d79e4a8013792b4ed3770ac03271feb0b8238d92f241a1c1f04896a62c42db14abf796ee6c72c043918876d1ceb6882a535fa5438d8befcfe3feeda7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc, 0xb}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x4, 0x9, 0x0, [@generic={0x4d, 0xe, "d4c4bd29d34de12d62522ce796a3f58a27d2be6183ec3a57e8b05167192cd760e9ee36eb818857c0a3d615bd218c50910800bb5b96acfab880e2d6e144e25af609225e23fcd8ab9ef26617"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0xfb, 0x24, 0x3, [@generic={0x74, 0x24, "a780bbd5ffd964f429556c6962d902eeeba1b14960df364df66a063756f6c39725c871478e4dc30b80179c322e26240e198553c43292f30758ed9b2c3e5b2dfeb0f1b6e76c958035414422c71bd2d81e25a79ff3f0a7e75a530febecc4103b833cd2d7572bded795909b82d552405c68833e"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x10, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x1, 0xc0, 0xd, [@generic={0xb, 0x8, "02fd5067f635022c55"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x9, 0x1, 0xf0, [@generic={0xec, 0x22, "1d29e35b01b51be3ef6c13aa6a936d81d91f8b7c0771d814ad4ce2ff5ba47ac3df34375776a3ba4af8ed00f4a3c8b70628ae3f421545d5ed5fe0bde0bfb916f4f21873fbb4975f7fbfc8e6459b1f74fc4757353e374a92d38950d6732795173e1e4da2e0e3165c4598d8cd5b15411ca9d12bae1da1fac286df808b3c838c8c312d416814b4942a0ca1163d6256bd9ca09ca54010d979685bd0918929e9abef0083e7ec0011edb6cef0c20fc9b0d19befdea7d2e57fffe179102faa638cd8c044c375ab59fae453602dde4026867b4974e34c239818b6e1d70af2e5df805f5c8b733ddfe7f4e7324f26bf"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x10, 0x3, 0x1}}]}}, {{0x9, 0x4, 0xb3, 0x0, 0x3, 0x41, 0xaf, 0x92, 0x4f, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x2, 0xf7, 0x5, "d6", "46c99e"}]}, @hid_hid={0x9, 0x21, 0x4, 0x5d, 0x1, {0x22, 0x323}}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x37, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}, @generic={0x9d, 0xb, "a7a89c82fa3d427bbd84bc4c91528cada55aafa99ff358a4fcc2ca15a822dadca7f84709dedbaed4daeb55d8c1b6fffec3579571159305fda4e940438305dc5f56a4333db6f9900839ff443053703a62aa8bd520f91aafba6e97f40d8cf2c675dd1f00dfa1cee3da72fe685edd91c4bc115824b602303eb7c6c27fda913bb281ea72605772248d8963b42177bccba0cbd117bfebe213d3d259a6dd"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0xa, 0xe, 0xb1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x2, 0x5, 0x3}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x8, 0x8, 0x6, 0x10, 0x53}, 0x6b, &(0x7f0000000200)={0x5, 0xf, 0x6b, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x8, 0xf000, 0xf, [0xff3ff0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "4399655d9877f578f3d76293eef0a2b0"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x2, 0x887, 0x2, [0xff3f, 0xf, 0x30]}, @generic={0x14, 0x10, 0x1, "e25ea53fe442978b000806857bb0c6684c"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0xd, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8e, 0x4, 0x3, 0x2, 0xff}]}, 0x8, [{0xab, &(0x7f0000000280)=@string={0xab, 0x3, "fcaa5f37f3562eb5aeb3aabe16e0b8fa4dc2d75658ed7df1cf8a9dee39086a77ac3d05ffc97bf1a55a323124d7d1ef8a86c0389003ab12966f186a812231336242256e8cbd86990a283f5c3073419acf559bd0a99dcdcc5184728002e5aefd05ae399b5264e7c8ebaa39b4d0ca8a482b9bea519a7b8a86c6bb831249de7c76fe420e4556d3e9e38d8160ec25c3bf42ca7e126c7ad262b5aaf312e1e01c5d60bb97c3cfeba6264f502c"}}, {0x40, &(0x7f0000000340)=@string={0x40, 0x3, "1ff4187673685ef79f3d4fcb006ea1f766a3a2a6a3519cbe738a60f92019f953b70d6fc5f3a4a816bfe6fff569c2d29a006bc2e448d8b68b3d8a16d89256"}}, {0xc0, &(0x7f0000000380)=@string={0xc0, 0x3, "b8d2568399548bc5b3ffc3846c19c80a13d33d81ceced9f475fcfcc089048603a39a1024fc6224cb8b7b98214ef6de07f43d3bb29a9c10a4bb947bef2ab9f0002e7d5765edd64d16cdabcdb196fb6b44b8c760ec4e8c95740a4aeb85c6f8c5263a5d9bc5b8fc008a62535d18d68b9d8e479f0e88807904159a691629ea1ed0a6a8bf78c756889875336ace3e4f7662bb8f6a026fcf7ee1ad8059b22ab411f6111f222cfd856c2727e7be849db83836a2e0a65a6b74124d3ea020ce27220e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x23, &(0x7f0000000480)=@string={0x23, 0x3, "bdac21ce0db3a17eb447f594aaea505478297465d7ca5c2359921b7b8666de91af"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x28, &(0x7f00000009c0)=@string={0x28, 0x3, "2e5fc977b2e992ca75b2e289d46cf7c800ae6d747dd23ae3ec40882dbf57d1345fbcd712dd3a"}}, {0x8, &(0x7f0000000a00)=@string={0x8, 0x3, "9cc4af9d385b"}}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000000c0)={0x400001, 0x100, 0x9, 0xff, 0x4, 0x0, 0x4, 0x0, 0x7, 0xa9, 0x2, 0x5, 0x4, 0x1000}) 2.281695098s ago: executing program 1 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 2.18619879s ago: executing program 1 (id=59): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"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"}) write$binfmt_aout(r1, 0x0, 0xffffffffffffff80) 1.894220247s ago: executing program 0 (id=60): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) unshare(0x22020600) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x10fd02, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) 1.661767152s ago: executing program 1 (id=61): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x80086601, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x5e4}}, 0x50) 910.873645ms ago: executing program 0 (id=62): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1fd, &(0x7f0000000480)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TCSETSW2(r4, 0x5425, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltfilter={0x44, 0x2d, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff}, {0x6, 0xffe0}, {0x0, 0x1d}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x70, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4004080) close(r3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) 674.062562ms ago: executing program 3 (id=63): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 473.65423ms ago: executing program 2 (id=64): syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x101402) socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x61, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r4, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x3c, 0x25, 0x8, 0x70bd28, 0x80000000, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0x7, 0x9}, {0x9, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x3c}, 0x1, 0x2b1e, 0x0, 0x10}, 0x24040010) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="404800001000010025bd7000fddbdf2500000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) 362.931383ms ago: executing program 3 (id=65): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x5e4}}, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0}) 0s ago: executing program 1 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048041}, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 74.231188][ T5850] cgroup: Unknown subsys name 'net' [ 74.365202][ T5850] cgroup: Unknown subsys name 'cpuset' [ 74.374060][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.913168][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.411873][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.420894][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.430676][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.442511][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.454044][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.462352][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.470364][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.489901][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.497590][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.507269][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.515401][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.515650][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.522934][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.532483][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.544816][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.552513][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.553837][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.572179][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.579905][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.579990][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.600042][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.608526][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.609636][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.617568][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.631336][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.285431][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 80.310396][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 80.499800][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 80.535047][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 80.656467][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.664038][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.671659][ T5879] bridge_slave_0: entered allmulticast mode [ 80.678885][ T5879] bridge_slave_0: entered promiscuous mode [ 80.687234][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.694563][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.702403][ T5881] bridge_slave_0: entered allmulticast mode [ 80.709410][ T5881] bridge_slave_0: entered promiscuous mode [ 80.753380][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.760920][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.771833][ T5879] bridge_slave_1: entered allmulticast mode [ 80.779882][ T5879] bridge_slave_1: entered promiscuous mode [ 80.794908][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.802658][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.809928][ T5881] bridge_slave_1: entered allmulticast mode [ 80.817572][ T5881] bridge_slave_1: entered promiscuous mode [ 80.838989][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 80.934015][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.972054][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.984691][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.019732][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.029156][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.036823][ T5882] bridge_slave_0: entered allmulticast mode [ 81.045349][ T5882] bridge_slave_0: entered promiscuous mode [ 81.055363][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.111225][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.118533][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.126492][ T5882] bridge_slave_1: entered allmulticast mode [ 81.133633][ T5882] bridge_slave_1: entered promiscuous mode [ 81.163874][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.171033][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.179399][ T5883] bridge_slave_0: entered allmulticast mode [ 81.186835][ T5883] bridge_slave_0: entered promiscuous mode [ 81.215739][ T5879] team0: Port device team_slave_0 added [ 81.223881][ T5881] team0: Port device team_slave_0 added [ 81.229973][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.237434][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.245036][ T5883] bridge_slave_1: entered allmulticast mode [ 81.253034][ T5883] bridge_slave_1: entered promiscuous mode [ 81.279687][ T5879] team0: Port device team_slave_1 added [ 81.287117][ T5881] team0: Port device team_slave_1 added [ 81.320255][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.334260][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.439803][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.453023][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.465693][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.473744][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.481049][ T5884] bridge_slave_0: entered allmulticast mode [ 81.489757][ T5884] bridge_slave_0: entered promiscuous mode [ 81.511278][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.518394][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.544577][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.557042][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.564806][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.591065][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.604708][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.612025][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.639190][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.650759][ T5861] Bluetooth: hci2: command tx timeout [ 81.684086][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.691377][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.699239][ T5884] bridge_slave_1: entered allmulticast mode [ 81.706238][ T5861] Bluetooth: hci1: command tx timeout [ 81.710463][ T5884] bridge_slave_1: entered promiscuous mode [ 81.712410][ T5861] Bluetooth: hci0: command tx timeout [ 81.717947][ T5866] Bluetooth: hci4: command tx timeout [ 81.723676][ T5876] Bluetooth: hci3: command tx timeout [ 81.750479][ T5882] team0: Port device team_slave_0 added [ 81.757354][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.764699][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.794705][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.859428][ T5883] team0: Port device team_slave_0 added [ 81.888591][ T5882] team0: Port device team_slave_1 added [ 81.927478][ T5883] team0: Port device team_slave_1 added [ 81.957700][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.995624][ T5879] hsr_slave_0: entered promiscuous mode [ 82.003245][ T5879] hsr_slave_1: entered promiscuous mode [ 82.047622][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.095088][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.102741][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.130323][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.170918][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.178098][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.204680][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.217296][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.224391][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.251060][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.277629][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.285382][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.312591][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.329434][ T5881] hsr_slave_0: entered promiscuous mode [ 82.335878][ T5881] hsr_slave_1: entered promiscuous mode [ 82.342365][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 82.348196][ T5881] Cannot create hsr debugfs directory [ 82.425320][ T5884] team0: Port device team_slave_0 added [ 82.436881][ T5882] hsr_slave_0: entered promiscuous mode [ 82.443591][ T5882] hsr_slave_1: entered promiscuous mode [ 82.450178][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 82.456715][ T5882] Cannot create hsr debugfs directory [ 82.498938][ T5884] team0: Port device team_slave_1 added [ 82.625807][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.633886][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.660326][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.679280][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.686462][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.712678][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.729828][ T5883] hsr_slave_0: entered promiscuous mode [ 82.737241][ T5883] hsr_slave_1: entered promiscuous mode [ 82.744012][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 82.749928][ T5883] Cannot create hsr debugfs directory [ 83.084306][ T5884] hsr_slave_0: entered promiscuous mode [ 83.090648][ T5884] hsr_slave_1: entered promiscuous mode [ 83.097241][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 83.103040][ T5884] Cannot create hsr debugfs directory [ 83.320322][ T5879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.334899][ T5879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.364475][ T5879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.396539][ T5879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.472313][ T5881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.489405][ T5881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.499946][ T5881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.510939][ T5881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.621032][ T5882] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.636147][ T5882] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.651029][ T5882] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.683371][ T5882] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.704628][ T5861] Bluetooth: hci2: command tx timeout [ 83.783891][ T5876] Bluetooth: hci3: command tx timeout [ 83.789404][ T5876] Bluetooth: hci4: command tx timeout [ 83.792703][ T5883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.795248][ T5861] Bluetooth: hci0: command tx timeout [ 83.802149][ T5866] Bluetooth: hci1: command tx timeout [ 83.819643][ T5883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.845037][ T5883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.856099][ T5883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.926380][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.966850][ T5884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.980921][ T5884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.006368][ T5884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.017535][ T5884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.046018][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.059413][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.111882][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.119656][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.143801][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.171060][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.178250][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.189528][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.196679][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.207147][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.214477][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.367626][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.407700][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.427219][ T5881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.484298][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.500056][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.517738][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.525052][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.551536][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.558795][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.586917][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.599268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.606673][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.639464][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.668966][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.701024][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.708444][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.718255][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.725597][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.742587][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.757324][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.764548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.888741][ T5884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.959031][ T5881] veth0_vlan: entered promiscuous mode [ 85.001227][ T5879] veth0_vlan: entered promiscuous mode [ 85.016907][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.035856][ T5881] veth1_vlan: entered promiscuous mode [ 85.050976][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.075591][ T5879] veth1_vlan: entered promiscuous mode [ 85.106001][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.186127][ T5884] veth0_vlan: entered promiscuous mode [ 85.206585][ T5879] veth0_macvtap: entered promiscuous mode [ 85.225343][ T5881] veth0_macvtap: entered promiscuous mode [ 85.236388][ T5884] veth1_vlan: entered promiscuous mode [ 85.244443][ T5879] veth1_macvtap: entered promiscuous mode [ 85.264231][ T5881] veth1_macvtap: entered promiscuous mode [ 85.298788][ T5882] veth0_vlan: entered promiscuous mode [ 85.328701][ T5882] veth1_vlan: entered promiscuous mode [ 85.343018][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.357448][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.398264][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.413714][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.426558][ T5883] veth0_vlan: entered promiscuous mode [ 85.445875][ T5884] veth0_macvtap: entered promiscuous mode [ 85.458947][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.469095][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.490326][ T5883] veth1_vlan: entered promiscuous mode [ 85.498016][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.507971][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.530336][ T5884] veth1_macvtap: entered promiscuous mode [ 85.539978][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.569178][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.578511][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.594698][ T5882] veth0_macvtap: entered promiscuous mode [ 85.606006][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.643758][ T5882] veth1_macvtap: entered promiscuous mode [ 85.740021][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.747936][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.756589][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.760769][ T5883] veth0_macvtap: entered promiscuous mode [ 85.782321][ T5866] Bluetooth: hci2: command tx timeout [ 85.794179][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.812110][ T5883] veth1_macvtap: entered promiscuous mode [ 85.839162][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.860871][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.863309][ T5866] Bluetooth: hci1: command tx timeout [ 85.870752][ T5876] Bluetooth: hci3: command tx timeout [ 85.875890][ T5866] Bluetooth: hci4: command tx timeout [ 85.881045][ T5876] Bluetooth: hci0: command tx timeout [ 85.895199][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.907593][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.919087][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.926155][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.951976][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.981549][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.992624][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.001542][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.017237][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.025809][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.046011][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.055256][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.064992][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.128854][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.140185][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.157430][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.180307][ T1005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.224247][ T5881] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.229077][ T1005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.254465][ T1005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.287139][ T1005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.313709][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.335635][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.509173][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.518114][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.544162][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.545103][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.583886][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.622687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.631244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.669204][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.703057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.711549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.720403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.829164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.892953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.934611][ T5969] vti0: entered promiscuous mode [ 86.939791][ T5969] vti0: entered allmulticast mode [ 86.952019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.033042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.041900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.157528][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.166925][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.382848][ T1554] cfg80211: failed to load regulatory.db [ 87.866425][ T5876] Bluetooth: hci2: command tx timeout [ 87.942748][ T5876] Bluetooth: hci4: command tx timeout [ 87.943919][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.948683][ T5876] Bluetooth: hci3: command tx timeout [ 87.960718][ T5861] Bluetooth: hci1: command tx timeout [ 87.964005][ T5876] Bluetooth: hci0: command tx timeout [ 88.200516][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.921378][ T5989] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.593621][ T5999] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.8'. [ 92.039905][ T6022] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.10'. [ 92.491838][ T6025] netlink: 202000 bytes leftover after parsing attributes in process `syz.2.12'. [ 92.666108][ T6029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.716405][ T6031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.793017][ T6040] netlink: 'syz.3.17': attribute type 11 has an invalid length. [ 92.821397][ T6040] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 92.845018][ T6040] FAULT_INJECTION: forcing a failure. [ 92.845018][ T6040] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.885092][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.3.17 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 92.885118][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.885134][ T6040] Call Trace: [ 92.885141][ T6040] [ 92.885149][ T6040] dump_stack_lvl+0x189/0x250 [ 92.885179][ T6040] ? __pfx____ratelimit+0x10/0x10 [ 92.885201][ T6040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.885221][ T6040] ? __pfx__printk+0x10/0x10 [ 92.885245][ T6040] ? __might_fault+0xb0/0x130 [ 92.885276][ T6040] should_fail_ex+0x414/0x560 [ 92.885310][ T6040] _copy_from_iter+0x1db/0x16f0 [ 92.885338][ T6040] ? __pfx__copy_from_iter+0x10/0x10 [ 92.885350][ T6040] ? sock_alloc_send_pskb+0x875/0x990 [ 92.885373][ T6040] ? __pfx__copy_from_iter+0x10/0x10 [ 92.885389][ T6040] ? page_copy_sane+0x16a/0x280 [ 92.885405][ T6040] copy_page_from_iter+0xdd/0x170 [ 92.885423][ T6040] skb_copy_datagram_from_iter+0x306/0x720 [ 92.885452][ T6040] tun_get_user+0x1691/0x3e20 [ 92.885487][ T6040] ? aa_file_perm+0x44d/0x1550 [ 92.885502][ T6040] ? __pfx_tun_get_user+0x10/0x10 [ 92.885516][ T6040] ? _parse_integer_limit+0x1ae/0x1f0 [ 92.885548][ T6040] ? __lock_acquire+0xab9/0xd20 [ 92.885575][ T6040] ? ref_tracker_alloc+0x318/0x460 [ 92.885595][ T6040] ? __lock_acquire+0xab9/0xd20 [ 92.885619][ T6040] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 92.885644][ T6040] ? tun_get+0x1c/0x2f0 [ 92.885661][ T6040] ? tun_get+0x1c/0x2f0 [ 92.885676][ T6040] ? tun_get+0x1c/0x2f0 [ 92.885697][ T6040] tun_chr_write_iter+0x113/0x200 [ 92.885725][ T6040] vfs_write+0x5c6/0xb30 [ 92.885751][ T6040] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 92.885864][ T6040] ? __pfx_vfs_write+0x10/0x10 [ 92.885890][ T6040] ? __fget_files+0x2a/0x420 [ 92.885911][ T6040] ksys_write+0x145/0x250 [ 92.885934][ T6040] ? __pfx_ksys_write+0x10/0x10 [ 92.885957][ T6040] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.885981][ T6040] __do_fast_syscall_32+0xb6/0x2b0 [ 92.886003][ T6040] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.886026][ T6040] do_fast_syscall_32+0x34/0x80 [ 92.886048][ T6040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.886068][ T6040] RIP: 0023:0xf705e539 [ 92.886088][ T6040] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 92.886100][ T6040] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 92.886119][ T6040] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 92.886131][ T6040] RDX: 000000000000fd6c RSI: 0000000000000000 RDI: 0000000000000000 [ 92.886140][ T6040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.886149][ T6040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.886159][ T6040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.886183][ T6040] [ 93.538557][ T1554] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.641716][ T6053] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.19'. [ 93.798975][ T1554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.984159][ T1554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.998854][ T1554] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.343251][ T1554] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 94.371705][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.378464][ T5915] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.431690][ T1554] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 94.451769][ T1554] usb 3-1: Manufacturer: syz [ 94.469546][ T1554] usb 3-1: config 0 descriptor?? [ 94.602759][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 94.619926][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.637353][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.671558][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 94.718927][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.800417][ T10] usb 1-1: config 0 descriptor?? [ 94.855182][ T6062] Zero length message leads to an empty skb [ 95.015446][ T9] IPVS: starting estimator thread 0... [ 95.111922][ T6064] IPVS: using max 34 ests per chain, 81600 per kthread [ 95.367132][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.422347][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.972838][ T1554] usbhid 3-1:0.0: can't add hid device: -71 [ 95.979011][ T1554] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 96.011817][ T5915] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 96.016136][ T1554] usb 3-1: USB disconnect, device number 2 [ 96.201994][ T5915] usb 2-1: device descriptor read/64, error -71 [ 96.333742][ T6082] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.26'. [ 96.520184][ T5915] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 96.687155][ T5915] usb 2-1: device descriptor read/64, error -71 [ 96.778461][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.802477][ T5915] usb usb2-port1: attempt power cycle [ 96.820862][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.102743][ T1554] IPVS: starting estimator thread 0... [ 97.151785][ T5915] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 97.191744][ T6091] IPVS: using max 32 ests per chain, 76800 per kthread [ 97.194497][ T5915] usb 2-1: device descriptor read/8, error -71 [ 97.465600][ T5915] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 97.522688][ T5915] usb 2-1: device descriptor read/8, error -71 [ 97.614557][ T6095] netlink: 202000 bytes leftover after parsing attributes in process `syz.3.29'. [ 97.640230][ T5915] usb usb2-port1: unable to enumerate USB device [ 97.856894][ T6100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.898764][ T6100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.836886][ T6110] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.32'. [ 99.674963][ T5860] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.891758][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 99.902602][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.927255][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.401694][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 100.407864][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 100.437926][ T6127] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.38'. [ 100.475548][ T5860] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 100.494804][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.517002][ T5860] usb 4-1: config 0 descriptor?? [ 101.242183][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.323343][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.396831][ T6143] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.40'. [ 101.799764][ T6151] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.810688][ T6151] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.911916][ T5860] usbhid 4-1:0.0: can't add hid device: -71 [ 101.957177][ T5860] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.239514][ T5860] usb 4-1: USB disconnect, device number 2 [ 103.351682][ T6004] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.653735][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.724521][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.766910][ T6004] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.989814][ T6004] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 103.999329][ T6004] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 104.010249][ T6004] usb 5-1: Manufacturer: syz [ 104.034731][ T6004] usb 5-1: config 0 descriptor?? [ 104.497006][ T6178] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.49'. [ 104.716517][ T5928] IPVS: starting estimator thread 0... [ 104.842583][ T6184] IPVS: using max 51 ests per chain, 122400 per kthread [ 105.545822][ T6196] vti0: entered promiscuous mode [ 105.550908][ T6196] vti0: entered allmulticast mode [ 107.117705][ T6004] usbhid 5-1:0.0: can't add hid device: -71 [ 107.134173][ T6004] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 107.184175][ T6004] usb 5-1: USB disconnect, device number 2 [ 107.447473][ T6214] netlink: 80 bytes leftover after parsing attributes in process `syz.2.56'. [ 107.474068][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.641739][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 107.650083][ T9] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 107.658789][ T9] usb 4-1: config 0 has no interface number 0 [ 107.675463][ T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 107.684917][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.705679][ T9] usb 4-1: Product: syz [ 107.727538][ T9] usb 4-1: Manufacturer: syz [ 107.735510][ T9] usb 4-1: SerialNumber: syz [ 107.751300][ T9] usb 4-1: config 0 descriptor?? [ 107.781813][ T6004] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.796973][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 107.870803][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 107.943754][ T6004] usb 5-1: Using ep0 maxpacket: 32 [ 107.959446][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.977557][ T6204] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 107.984437][ T6204] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 108.062962][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.084273][ T6004] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 108.084679][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.096746][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.135333][ T6004] usb 5-1: config 0 descriptor?? [ 108.200143][ T6225] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.61'. [ 108.226442][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 108.270034][ T9] usb 4-1: media controller created [ 108.363181][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.372358][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.658911][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.678608][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.729408][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.007455][ T9] cxusb: set interface failed [ 109.020873][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 109.277419][ T6004] usbhid 5-1:0.0: can't add hid device: -71 [ 109.285915][ T6004] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 109.505231][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 109.505434][ T6004] usb 5-1: USB disconnect, device number 3 [ 109.511516][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 109.624904][ T6249] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.65'. [ 214.611637][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 214.618872][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6248/1:b..l [ 214.627071][ C0] rcu: (detected by 0, t=10502 jiffies, g=12313, q=189 ncpus=2) [ 214.634799][ C0] task:syz.0.62 state:R running task stack:27624 pid:6248 tgid:6229 ppid:5884 task_flags:0x400040 flags:0x20004000 [ 214.648815][ C0] Call Trace: [ 214.652100][ C0] [ 214.655037][ C0] __schedule+0x1798/0x4cc0 [ 214.659769][ C0] ? __pfx___schedule+0x10/0x10 [ 214.664742][ C0] ? __do_fast_syscall_32+0xb6/0x2b0 [ 214.670061][ C0] ? do_fast_syscall_32+0x34/0x80 [ 214.675113][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 214.680415][ C0] preempt_schedule_irq+0xb5/0x150 [ 214.685535][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 214.691354][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 214.697252][ C0] irqentry_exit+0x6f/0x90 [ 214.701681][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 214.707864][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 214.713429][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 214.733215][ C0] RSP: 0018:ffffc9000ba97358 EFLAGS: 00000206 [ 214.739321][ C0] RAX: d36ed59f68189000 RBX: 0000000000000000 RCX: d36ed59f68189000 [ 214.747291][ C0] RDX: 0000000000000000 RSI: ffffffff8dba5fdf RDI: ffffffff8be33400 [ 214.755351][ C0] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 214.763337][ C0] R10: ffffc9000ba97518 R11: ffffffff81ac3890 R12: 0000000000000002 [ 214.771341][ C0] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 214.779342][ C0] ? unwind_next_frame+0xa5/0x2390 [ 214.784464][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 214.790621][ C0] ? unwind_next_frame+0xa5/0x2390 [ 214.795754][ C0] ? unwind_next_frame+0xa5/0x2390 [ 214.800874][ C0] ? __ia32_compat_sys_ioctl+0x543/0x840 [ 214.806518][ C0] ? unwind_next_frame+0xa5/0x2390 [ 214.811632][ C0] unwind_next_frame+0xc2/0x2390 [ 214.816572][ C0] ? unwind_next_frame+0xa5/0x2390 [ 214.821777][ C0] ? unwind_next_frame+0xa5/0x2390 [ 214.827156][ C0] ? kvm_dev_ioctl+0x151b/0x18e0 [ 214.832191][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 214.838435][ C0] arch_stack_walk+0x11c/0x150 [ 214.843221][ C0] ? __ia32_compat_sys_ioctl+0x543/0x840 [ 214.848863][ C0] stack_trace_save+0x9c/0xe0 [ 214.853539][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 214.859626][ C0] kasan_save_track+0x3e/0x80 [ 214.864309][ C0] ? kasan_save_track+0x3e/0x80 [ 214.869157][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 214.873917][ C0] ? __kmalloc_node_noprof+0x276/0x4e0 [ 214.879377][ C0] ? allocate_slab+0x16a/0x370 [ 214.884134][ C0] ? ___slab_alloc+0xbeb/0x1410 [ 214.889072][ C0] ? kmem_cache_alloc_lru_noprof+0x288/0x3d0 [ 214.895226][ C0] ? alloc_inode+0x67/0x1b0 [ 214.899728][ C0] ? new_inode+0x22/0x170 [ 214.904070][ C0] ? __debugfs_create_file+0x14d/0x4f0 [ 214.909877][ C0] ? debugfs_create_file_full+0x3f/0x60 [ 214.915512][ C0] ? kvm_create_vm_debugfs+0x6b6/0x900 [ 214.921056][ C0] ? kvm_dev_ioctl+0x151b/0x18e0 [ 214.925994][ C0] ? __ia32_compat_sys_ioctl+0x543/0x840 [ 214.931674][ C0] __kasan_kmalloc+0x93/0xb0 [ 214.936269][ C0] __kmalloc_node_noprof+0x276/0x4e0 [ 214.941559][ C0] ? allocate_slab+0x16a/0x370 [ 214.946408][ C0] allocate_slab+0x16a/0x370 [ 214.950995][ C0] ___slab_alloc+0xbeb/0x1410 [ 214.955679][ C0] ? alloc_inode+0x67/0x1b0 [ 214.960191][ C0] kmem_cache_alloc_lru_noprof+0x288/0x3d0 [ 214.966002][ C0] ? alloc_inode+0x67/0x1b0 [ 214.970511][ C0] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 214.976147][ C0] alloc_inode+0x67/0x1b0 [ 214.980654][ C0] new_inode+0x22/0x170 [ 214.984824][ C0] __debugfs_create_file+0x14d/0x4f0 [ 214.990118][ C0] debugfs_create_file_full+0x3f/0x60 [ 214.995617][ C0] kvm_create_vm_debugfs+0x6b6/0x900 [ 215.000912][ C0] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 215.006734][ C0] kvm_dev_ioctl+0x151b/0x18e0 [ 215.011509][ C0] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 215.016621][ C0] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 215.022172][ C0] __ia32_compat_sys_ioctl+0x543/0x840 [ 215.027753][ C0] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 215.033768][ C0] ? __se_sys_futex_time32+0x360/0x3e0 [ 215.039272][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.044493][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 215.049625][ C0] do_fast_syscall_32+0x34/0x80 [ 215.054522][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.060871][ C0] RIP: 0023:0xf711e539 [ 215.064957][ C0] RSP: 002b:00000000f485b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 215.073569][ C0] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ae01 [ 215.081577][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.089566][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.097554][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.105530][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.113524][ C0] [ 215.116549][ C0] rcu: rcu_preempt kthread starved for 10542 jiffies! g12313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 215.127911][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 215.138141][ C0] rcu: RCU grace-period kthread stack dump: [ 215.144025][ C0] task:rcu_preempt state:R running task stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 215.157779][ C0] Call Trace: [ 215.161054][ C0] [ 215.164161][ C0] __schedule+0x1798/0x4cc0 [ 215.168784][ C0] ? __lock_acquire+0xab9/0xd20 [ 215.173825][ C0] ? __pfx___schedule+0x10/0x10 [ 215.178779][ C0] ? schedule+0x91/0x360 [ 215.183116][ C0] schedule+0x165/0x360 [ 215.187361][ C0] schedule_timeout+0x12b/0x270 [ 215.192210][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 215.197636][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 215.203645][ C0] ? __pfx_process_timeout+0x10/0x10 [ 215.208946][ C0] ? prepare_to_swait_event+0x341/0x380 [ 215.214624][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 215.219586][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.224792][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 215.230953][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 215.236251][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 215.241548][ C0] ? finish_swait+0xcd/0x1f0 [ 215.246144][ C0] rcu_gp_kthread+0x99/0x390 [ 215.250748][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 215.255954][ C0] ? __kthread_parkme+0x7b/0x200 [ 215.260897][ C0] ? __kthread_parkme+0x1a1/0x200 [ 215.265942][ C0] kthread+0x70e/0x8a0 [ 215.270017][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 215.275443][ C0] ? __pfx_kthread+0x10/0x10 [ 215.280037][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.285238][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.290444][ C0] ? __pfx_kthread+0x10/0x10 [ 215.295303][ C0] ret_from_fork+0x3f9/0x770 [ 215.299900][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 215.305198][ C0] ? __switch_to_asm+0x39/0x70 [ 215.309959][ C0] ? __switch_to_asm+0x33/0x70 [ 215.314722][ C0] ? __pfx_kthread+0x10/0x10 [ 215.319317][ C0] ret_from_fork_asm+0x1a/0x30 [ 215.324118][ C0] [ 215.327234][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 215.333574][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 215.345234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.355297][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 215.361041][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 215.380996][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00000246 [ 215.387097][ C0] RAX: ffffffff8172213d RBX: 0000000000000003 RCX: ffffffff8de95100 [ 215.395064][ C0] RDX: 0000000000000100 RSI: ffffffff8d9b6da5 RDI: ffffffff8be33400 [ 215.403045][ C0] RBP: ffffc90000007890 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 215.411016][ C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000 [ 215.419161][ C0] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000000efc [ 215.427221][ C0] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 215.436198][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.442788][ C0] CR2: 0000000080029018 CR3: 000000002964c000 CR4: 00000000003526f0 [ 215.450763][ C0] Call Trace: [ 215.454045][ C0] [ 215.456901][ C0] kvm_wait+0x232/0x290 [ 215.461147][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.466348][ C0] ? __pfx_kvm_wait+0x10/0x10 [ 215.471040][ C0] __pv_queued_spin_lock_slowpath+0x7bf/0xb60 [ 215.477532][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 215.484134][ C0] ? __lock_acquire+0xab9/0xd20 [ 215.488993][ C0] queued_spin_lock_slowpath+0x43/0x50 [ 215.494461][ C0] do_raw_spin_lock+0x21f/0x290 [ 215.499583][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 215.504998][ C0] __xfrm_state_delete+0xba/0xca0 [ 215.510064][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 215.515478][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 215.520851][ C0] ? do_raw_spin_lock+0x121/0x290 [ 215.526337][ C0] xfrm_timer_handler+0x18f/0xa00 [ 215.531379][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 215.536929][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 215.542832][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.548036][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 215.553927][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.560261][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 215.565814][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 215.571361][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 215.576777][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 215.582508][ C0] ? read_tsc+0x9/0x20 [ 215.586659][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 215.592468][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 215.597592][ C0] handle_softirqs+0x283/0x870 [ 215.602358][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 215.607124][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 215.612408][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 215.617609][ C0] __irq_exit_rcu+0xca/0x1f0 [ 215.622194][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 215.627408][ C0] irq_exit_rcu+0x9/0x30 [ 215.632202][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 215.637857][ C0] [ 215.640885][ C0] [ 215.643840][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.649852][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 215.655611][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 215.675312][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 215.681386][ C0] RAX: e60951a0d3cb2d00 RBX: ffffffff81968308 RCX: e60951a0d3cb2d00 [ 215.689354][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b6da5 RDI: ffffffff8be33400 [ 215.697320][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 215.705300][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa37e30 [ 215.713362][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 215.721342][ C0] ? do_idle+0x1e8/0x510 [ 215.725599][ C0] default_idle+0x13/0x20 [ 215.729925][ C0] default_idle_call+0x74/0xb0 [ 215.734689][ C0] do_idle+0x1e8/0x510 [ 215.738768][ C0] ? __pfx_do_idle+0x10/0x10 [ 215.743370][ C0] cpu_startup_entry+0x44/0x60 [ 215.748127][ C0] rest_init+0x2de/0x300 [ 215.752377][ C0] start_kernel+0x3a9/0x410 [ 215.756881][ C0] x86_64_start_reservations+0x24/0x30 [ 215.762439][ C0] x86_64_start_kernel+0x143/0x1c0 [ 215.767582][ C0] common_startup_64+0x13e/0x147 [ 215.772538][ C0]