last executing test programs: 12.249286772s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x5, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x3, 0x5}, {0x100000, 0x0, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0xdddd1000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x7, 0x10800000000000c5]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000993000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 6) 12.097387515s ago: executing program 4 (id=5): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) (fail_nth: 6) 11.619487957s ago: executing program 1 (id=6): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0xed98, 0x7}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={r2, 0x5}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r3 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) syz_io_uring_setup(0x4aad, &(0x7f0000000340)={0x0, 0xaec3, 0x800, 0x1, 0x2e5}, &(0x7f00000002c0), &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x8, 0x80, 0x7, 0x7ff, 0x4, 0x921, 0x3}, &(0x7f0000000180)=0x9c) accept4(r1, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000480)=0x80, 0x0) 11.41734968s ago: executing program 4 (id=7): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000240)='./control\x00', 0x248) getdents64(r3, &(0x7f0000000340)=""/71, 0x47) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f00000000c0)=0x1) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000340)=0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x9, 0xfff, 0x1, {0x9, @pix_mp={0xf, 0x3, 0x53334b2f, 0x5, 0xb, [{0x80000004, 0x7}, {0x5c8, 0xb325}, {0x10000001}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x7, 0x4}, {0x103, 0x5}], 0x8, 0xc, 0x0, 0x0, 0x3}}, 0xfffffffd}) socket$inet6_mptcp(0xa, 0x1, 0x106) 11.333668029s ago: executing program 1 (id=8): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x4}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001400050126bcbbe1c378aa64aa70007b3e3e71ed07348a604bac5b000003d406a2ebe983290a05d3ce2e39d13756f248a0e33c568709de968fd2c1263fd143ad61967930d59d198f7cced919bb82bbb55617464a62d5020f87d21c578d4432849670352ddc87238614084060f2e98e2f867ba58c9528079dd1df271b5477bde905"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x20f0f002, 0x4}) 11.330055588s ago: executing program 0 (id=1): connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r5, 0x11, 0x0, 0x7c000) 11.24644987s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, 0x0, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x5cfa, 0x40, 0x0, 0x3bd}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x4004550c, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r0, 0xffffffffffffffd4, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="f9", 0x1}], 0x1, 0x3, 0xd4bd) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 10.600754306s ago: executing program 2 (id=3): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x20) poll(&(0x7f0000000040)=[{r0, 0x8150}], 0x1, 0x11ff) shutdown(r0, 0x5000) 10.357494407s ago: executing program 3 (id=4): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0xfffe, 0x8000, 0x2, 0x0, 0x1, 0xa9, 0xfffffff9, 0x8}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) r4 = socket$kcm(0xa, 0x7, 0x0) sendmsg$inet(r4, &(0x7f00000016c0)={&(0x7f0000001000)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r9, 0xc004ae0a, &(0x7f0000000380)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) write$sequencer(r6, &(0x7f0000000180)=[@t={0x81, 0x3, 0x40, 0x7, @generic=0xf}], 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r10, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xab8, 0x6b}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="4768495b829ed028e2fe79d9cbbe8783e0b2e2d9a710331559b2b7"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_PMKID={0x14, 0x55, "5f95c1dd8031548c18e751e57928170a"}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000400)=@arm64={0x34, 0x7, 0x4, '\x00', 0x63c0a2ec}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r11 = accept4(r0, 0x0, 0x0, 0x800) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r12, 0x29, 0x1, 0x0, &(0x7f0000000580)) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) 9.765186709s ago: executing program 3 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000005480)={0x0, 0x20000008, 0x3cdb, {0x0, 0x10000}, 0x0, 0xfffffffe}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0xfc5f}, 0x8) syz_usb_connect(0x3, 0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="120100035f434e40030433fa77390102030109023400e32a0e03000110040904710103f3b17805090506040800970507072501010677000905000cff0301070409050018a701060607d3e6355d3d33e8c38bca8ff7d154d8a146"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000005480)={0x0, 0x20000008, 0x3cdb, {0x0, 0x10000}, 0x0, 0xfffffffe}) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0xfc5f}, 0x8) (async) syz_usb_connect(0x3, 0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="120100035f434e40030433fa77390102030109023400e32a0e03000110040904710103f3b17805090506040800970507072501010677000905000cff0301070409050018a701060607d3e6355d3d33e8c38bca8ff7d154d8a146"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) (async) 9.741892576s ago: executing program 0 (id=11): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) 9.656192719s ago: executing program 1 (id=12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, 0x4, 0x0, 0x0, 0x9, 0x17, 0x1, 0x1, 0x42}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="13ce", 0x2}], 0x1}}], 0x1, 0x20004888) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r4 = eventfd(0x0) io_submit(r3, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r4, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058437"], 0x0) 9.546998285s ago: executing program 0 (id=13): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xd79, 0x40840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = dup3(r4, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = getpgrp(0xffffffffffffffff) syz_open_procfs$pagemap(r7, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$rfkill(r5, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000"], 0x14}}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000b00)=ANY=[], 0x1e0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="8500000061000000440000000000002085000000050000009500000000000000f4670880271e3503200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b1b2d2747c45b0c52087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbf975d9c07d8d3c76e65760ff000000b78860e629b3b200000000000000000000000000008b0000000a449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203370b3fac929a4fc6e625247510bc24e80ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1856a2d4eda31fe098a1da8091b495f77138e438bdc037865f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c496a8d2dab79d4242a326d80260898d4e1ca5050033f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c71a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032e485cc664921b7f9133bdbc2ba3cd845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e4577055528aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed873a76b0dda0a4b4c5f87eef3164a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5174e7ea5dd7f1caa699e4a241291c2f43e9edbf44c0ff38ee32a18b6e8f0b61836146e2eab9a767800c2c91190c96cf88466adf775b4cf515ec5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01d94d5ef793096dab53d3224f245fd5d87984d58dc09d11ba0094ba8c39942be41f362e29bb95cdcf8068a4d8d67d2d6d79aa2d089bc4d475097d7523860ec41dab4fa4b0cfe674c163ac419753bd73882336d42036a179bb33162b31f2a58436ea88fba598fad987a60b1847cc63a77c2bb30477ecbeaaa590cde56be4102d0365987eed64bdf01bbd9aaeb77dde491845e612557f0000000000000046ca2d2f455ab76e4bca74b87ba66caa35b468b41fa9b887ae270b6dd0a23f0500f7ab284ce93cf117309358643a3b53cb5406694d415192714d374d07a0adce126a37559305ca672b90dc0675dd71237f17de33a76cbe944496a0bf55731aec8916d61a9e675152c01005c61c3e4697a6017f38f380be4a0833161b9c37a439a49f3f97712fa33b68ef1a16cf43562e409710c7669448f542d3b3eaa7c969927b5ddb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 9.469040345s ago: executing program 2 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x6bf1c2d5adba8c12}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r0) r4 = fcntl$dupfd(r1, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 2 (id=15): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x50040) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}], 0x1c) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x14, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x400, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x21}, 0x4008000) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000001c0)={@dev, @empty, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0xd1, 0x9, 0x7, 0x24, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8, 0x20, 0xcc72, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x3, 0x0, 0x1000, &(0x7f00002f5000/0x1000)=nil}) syz_kvm_setup_syzos_vm$x86(r13, &(0x7f0000169000/0x400000)=nil) ioctl$KVM_SET_PIT(r13, 0x8048ae66, &(0x7f0000000700)={[{0x1, 0x1, 0x3, 0x0, 0x9, 0x7, 0x3, 0x7b, 0x4, 0x4, 0x3, 0x5, 0x6}, {0x101, 0x1, 0x4, 0xd, 0xb2, 0x9, 0x9, 0x3, 0x8, 0x4, 0x94, 0xc, 0x2}, {0x3, 0x9, 0x0, 0x2, 0x88, 0xd, 0xff, 0x1, 0x6, 0x9b, 0x40, 0x5, 0xffffffffffffffff}], 0x7fffffff}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xe8, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000091}, 0x4801) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000002c0), 0x4) listen(r0, 0xfff) accept4(r0, &(0x7f0000000000)=@sco={0x1f, @none}, 0x0, 0x80800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. [ 80.634638][ T5850] cgroup: Unknown subsys name 'net' [ 80.789929][ T5850] cgroup: Unknown subsys name 'cpuset' [ 80.799954][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.151230][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.371818][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.380865][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.391239][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.396063][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.408014][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.408942][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.417675][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.437786][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.446640][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.454790][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.458492][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.462843][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.475218][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.484165][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.491652][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.499521][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.499752][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.508217][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.515472][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.525047][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.531243][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.548555][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.548741][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.565466][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.579482][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.909145][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 85.003428][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 85.064488][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 85.139543][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 85.162008][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.170589][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.179321][ T5877] bridge_slave_0: entered allmulticast mode [ 85.186632][ T5877] bridge_slave_0: entered promiscuous mode [ 85.215223][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.222726][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.230705][ T5877] bridge_slave_1: entered allmulticast mode [ 85.238817][ T5877] bridge_slave_1: entered promiscuous mode [ 85.319103][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.328033][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.336761][ T5880] bridge_slave_0: entered allmulticast mode [ 85.345278][ T5880] bridge_slave_0: entered promiscuous mode [ 85.357439][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.371811][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.386776][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 85.409281][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.416760][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.425709][ T5880] bridge_slave_1: entered allmulticast mode [ 85.432916][ T5880] bridge_slave_1: entered promiscuous mode [ 85.532692][ T5877] team0: Port device team_slave_0 added [ 85.539242][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.546754][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.556357][ T5878] bridge_slave_0: entered allmulticast mode [ 85.563686][ T5878] bridge_slave_0: entered promiscuous mode [ 85.575215][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.583344][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.591664][ T5879] bridge_slave_0: entered allmulticast mode [ 85.599136][ T5879] bridge_slave_0: entered promiscuous mode [ 85.609595][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.622241][ T5877] team0: Port device team_slave_1 added [ 85.631107][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.638794][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.646421][ T5878] bridge_slave_1: entered allmulticast mode [ 85.654282][ T5878] bridge_slave_1: entered promiscuous mode [ 85.665740][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.673910][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.681731][ T5879] bridge_slave_1: entered allmulticast mode [ 85.689009][ T5879] bridge_slave_1: entered promiscuous mode [ 85.697580][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.760641][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.768052][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.794498][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.837149][ T5880] team0: Port device team_slave_0 added [ 85.843922][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.850967][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.879303][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.896411][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.906814][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.914340][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.921946][ T5881] bridge_slave_0: entered allmulticast mode [ 85.929684][ T5881] bridge_slave_0: entered promiscuous mode [ 85.939174][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.946762][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.954641][ T5881] bridge_slave_1: entered allmulticast mode [ 85.962122][ T5881] bridge_slave_1: entered promiscuous mode [ 85.971099][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.982403][ T5880] team0: Port device team_slave_1 added [ 85.993956][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.037881][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.073828][ T5878] team0: Port device team_slave_0 added [ 86.082231][ T5878] team0: Port device team_slave_1 added [ 86.090794][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.103570][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.122655][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.130079][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.157574][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.194125][ T5879] team0: Port device team_slave_0 added [ 86.201385][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.208662][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.236003][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.275966][ T5879] team0: Port device team_slave_1 added [ 86.292532][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.299827][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.327143][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.340156][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.347382][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.374899][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.388372][ T5881] team0: Port device team_slave_0 added [ 86.398112][ T5877] hsr_slave_0: entered promiscuous mode [ 86.404770][ T5877] hsr_slave_1: entered promiscuous mode [ 86.442540][ T5881] team0: Port device team_slave_1 added [ 86.458281][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.465276][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.492134][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.506631][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.514196][ T5183] Bluetooth: hci0: command tx timeout [ 86.521146][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.548973][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.563271][ T5880] hsr_slave_0: entered promiscuous mode [ 86.569996][ T5880] hsr_slave_1: entered promiscuous mode [ 86.576602][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 86.582611][ T5880] Cannot create hsr debugfs directory [ 86.587628][ T5183] Bluetooth: hci4: command tx timeout [ 86.588279][ T5864] Bluetooth: hci1: command tx timeout [ 86.636580][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.643775][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.671626][ T5183] Bluetooth: hci3: command tx timeout [ 86.671678][ T5864] Bluetooth: hci2: command tx timeout [ 86.681177][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.698825][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.707057][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.736040][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.764283][ T5878] hsr_slave_0: entered promiscuous mode [ 86.772851][ T5878] hsr_slave_1: entered promiscuous mode [ 86.779523][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 86.785474][ T5878] Cannot create hsr debugfs directory [ 86.867742][ T5879] hsr_slave_0: entered promiscuous mode [ 86.874431][ T5879] hsr_slave_1: entered promiscuous mode [ 86.881817][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 86.888724][ T5879] Cannot create hsr debugfs directory [ 86.960315][ T5881] hsr_slave_0: entered promiscuous mode [ 86.968048][ T5881] hsr_slave_1: entered promiscuous mode [ 86.974866][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 86.980983][ T5881] Cannot create hsr debugfs directory [ 87.203895][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.234511][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.249570][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.260049][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.305625][ T5880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.316173][ T5880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.334783][ T5880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.345144][ T5880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.395672][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.412419][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.423318][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.434556][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.509489][ T5879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.531634][ T5879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.541422][ T5879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.553106][ T5879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.585111][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.612014][ T5881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.622800][ T5881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.642294][ T5881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.653759][ T5881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.688102][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.705776][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.742112][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.749672][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.761488][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.795758][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.803313][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.814191][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.821881][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.853551][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.866469][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.874656][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.926333][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.957179][ T5880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.969593][ T5880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.008882][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.018933][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.027300][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.054088][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.066482][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.074695][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.111827][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.122022][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.129309][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.141088][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.148531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.187040][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.204973][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.222233][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.229595][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.250706][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.258671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.273367][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.349561][ T5880] veth0_vlan: entered promiscuous mode [ 88.364810][ T5880] veth1_vlan: entered promiscuous mode [ 88.373891][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.421263][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.433244][ T5877] veth0_vlan: entered promiscuous mode [ 88.469097][ T5880] veth0_macvtap: entered promiscuous mode [ 88.482772][ T5877] veth1_vlan: entered promiscuous mode [ 88.492445][ T5880] veth1_macvtap: entered promiscuous mode [ 88.502140][ T5879] veth0_vlan: entered promiscuous mode [ 88.531718][ T5879] veth1_vlan: entered promiscuous mode [ 88.555201][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.571040][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.588634][ T5864] Bluetooth: hci0: command tx timeout [ 88.601412][ T5877] veth0_macvtap: entered promiscuous mode [ 88.620702][ T5879] veth0_macvtap: entered promiscuous mode [ 88.633194][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.655276][ T5879] veth1_macvtap: entered promiscuous mode [ 88.668662][ T5864] Bluetooth: hci4: command tx timeout [ 88.668765][ T5183] Bluetooth: hci1: command tx timeout [ 88.687899][ T5877] veth1_macvtap: entered promiscuous mode [ 88.703081][ T5878] veth0_vlan: entered promiscuous mode [ 88.712300][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.721643][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.745414][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.747458][ T5183] Bluetooth: hci3: command tx timeout [ 88.753163][ T5864] Bluetooth: hci2: command tx timeout [ 88.762679][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.773097][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.783713][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.794187][ T5881] veth0_vlan: entered promiscuous mode [ 88.816731][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.831804][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.847123][ T5878] veth1_vlan: entered promiscuous mode [ 88.855256][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.865430][ T1142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.879692][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.895801][ T5881] veth1_vlan: entered promiscuous mode [ 88.902592][ T1142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.935509][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.946549][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.965574][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.975639][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.021638][ T694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.031466][ T694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.055317][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.066188][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.081324][ T5878] veth0_macvtap: entered promiscuous mode [ 89.098324][ T5881] veth0_macvtap: entered promiscuous mode [ 89.125681][ T5878] veth1_macvtap: entered promiscuous mode [ 89.135020][ T694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.146215][ T694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.159860][ T5881] veth1_macvtap: entered promiscuous mode [ 89.174104][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.203533][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.217051][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.230694][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.244114][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.255676][ T5879] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.255739][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.278581][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.291153][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.301067][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.320253][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.331929][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.341165][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.368808][ T75] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.372713][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.427032][ T75] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.437779][ T75] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.475836][ T5954] FAULT_INJECTION: forcing a failure. [ 89.475836][ T5954] name failslab, interval 1, probability 0, space 0, times 1 [ 89.491817][ T75] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.518632][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz.1.2 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 89.518665][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.518677][ T5954] Call Trace: [ 89.518685][ T5954] [ 89.518694][ T5954] dump_stack_lvl+0x189/0x250 [ 89.518723][ T5954] ? __pfx____ratelimit+0x10/0x10 [ 89.518749][ T5954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.518772][ T5954] ? __pfx__printk+0x10/0x10 [ 89.518798][ T5954] ? rcu_is_watching+0x15/0xb0 [ 89.518819][ T5954] ? __pfx___might_resched+0x10/0x10 [ 89.518837][ T5954] ? lock_acquire+0x5f/0x360 [ 89.518868][ T5954] should_fail_ex+0x414/0x560 [ 89.518896][ T5954] should_failslab+0xa8/0x100 [ 89.518926][ T5954] __kmalloc_cache_noprof+0x70/0x3d0 [ 89.518953][ T5954] ? kvm_set_memory_region+0x775/0xc00 [ 89.518977][ T5954] kvm_set_memory_region+0x775/0xc00 [ 89.519005][ T5954] kvm_vm_ioctl_set_memory_region+0x6f/0xd0 [ 89.519029][ T5954] kvm_vm_ioctl+0x957/0xc60 [ 89.519050][ T5954] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 89.519083][ T5954] ? lock_release+0x4b/0x3e0 [ 89.519109][ T5954] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 89.519135][ T5954] ? kfree+0x18e/0x440 [ 89.519158][ T5954] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 89.519186][ T5954] ? do_vfs_ioctl+0xbe8/0x1430 [ 89.519220][ T5954] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 89.519245][ T5954] ? __pfx_css_rstat_updated+0x10/0x10 [ 89.519269][ T5954] ? count_memcg_event_mm+0x21/0x260 [ 89.519301][ T5954] ? lock_release+0x4b/0x3e0 [ 89.519328][ T5954] ? rcu_is_watching+0x15/0xb0 [ 89.519348][ T5954] ? __fget_files+0x2a/0x420 [ 89.519365][ T5954] ? __fget_files+0x3a0/0x420 [ 89.519380][ T5954] ? __fget_files+0x2a/0x420 [ 89.519398][ T5954] ? bpf_lsm_file_ioctl+0x9/0x20 [ 89.519423][ T5954] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 89.519442][ T5954] __se_sys_ioctl+0xf9/0x170 [ 89.519466][ T5954] do_syscall_64+0xfa/0x3b0 [ 89.519496][ T5954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.519515][ T5954] ? clear_bhb_loop+0x60/0xb0 [ 89.519537][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.519556][ T5954] RIP: 0033:0x7f295cb8e7eb [ 89.519586][ T5954] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 89.519602][ T5954] RSP: 002b:00007f295d9eb490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.519623][ T5954] RAX: ffffffffffffffda RBX: 00007f295d9ebbe0 RCX: 00007f295cb8e7eb [ 89.519636][ T5954] RDX: 00007f295d9ebbe0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 89.519647][ T5954] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 89.519657][ T5954] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 89.519668][ T5954] R13: 0000200000994000 R14: 0000200000993000 R15: 00000000fec00000 [ 89.519688][ T5954] [ 89.524947][ T5956] FAULT_INJECTION: forcing a failure. [ 89.524947][ T5956] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.836210][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: syz.4.5 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 89.836239][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.836251][ T5956] Call Trace: [ 89.836259][ T5956] [ 89.836267][ T5956] dump_stack_lvl+0x189/0x250 [ 89.836294][ T5956] ? __pfx____ratelimit+0x10/0x10 [ 89.836320][ T5956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.836343][ T5956] ? __pfx__printk+0x10/0x10 [ 89.836372][ T5956] ? rcu_is_watching+0x15/0xb0 [ 89.836392][ T5956] should_fail_ex+0x414/0x560 [ 89.836419][ T5956] _copy_to_user+0x31/0xb0 [ 89.836442][ T5956] simple_read_from_buffer+0xe1/0x170 [ 89.836472][ T5956] proc_fail_nth_read+0x1b3/0x220 [ 89.836500][ T5956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.836523][ T5956] ? rw_verify_area+0x2a6/0x4d0 [ 89.836547][ T5956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.836567][ T5956] vfs_read+0x1fd/0xa30 [ 89.836591][ T5956] ? fdget_pos+0x247/0x320 [ 89.836608][ T5956] ? __pfx___mutex_lock+0x10/0x10 [ 89.836635][ T5956] ? __pfx_vfs_read+0x10/0x10 [ 89.836662][ T5956] ? __fget_files+0x3a0/0x420 [ 89.836677][ T5956] ? __fget_files+0x2a/0x420 [ 89.836697][ T5956] ksys_read+0x145/0x250 [ 89.836723][ T5956] ? __pfx_ksys_read+0x10/0x10 [ 89.836746][ T5956] ? rcu_is_watching+0x15/0xb0 [ 89.836766][ T5956] ? rcu_is_watching+0x15/0xb0 [ 89.836786][ T5956] do_syscall_64+0xfa/0x3b0 [ 89.836815][ T5956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.836834][ T5956] ? clear_bhb_loop+0x60/0xb0 [ 89.836856][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.836875][ T5956] RIP: 0033:0x7fd7b118d5fc [ 89.836892][ T5956] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.836908][ T5956] RSP: 002b:00007fd7b1ffd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.836929][ T5956] RAX: ffffffffffffffda RBX: 00007fd7b13b5fa0 RCX: 00007fd7b118d5fc [ 89.836943][ T5956] RDX: 000000000000000f RSI: 00007fd7b1ffd0a0 RDI: 0000000000000004 [ 89.836955][ T5956] RBP: 00007fd7b1ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 89.836967][ T5956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.836978][ T5956] R13: 00007fd7b13b6038 R14: 00007fd7b13b5fa0 R15: 00007fd7b14dfa28 [ 89.837000][ T5956] [ 89.840630][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.866614][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.207450][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.222333][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.298040][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.319323][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.417525][ T5924] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.708404][ T5864] Bluetooth: hci0: command tx timeout [ 90.731001][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.742403][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.748642][ T5864] Bluetooth: hci1: command tx timeout [ 90.752810][ T5183] Bluetooth: hci4: command tx timeout [ 90.772564][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.786985][ T5924] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.827474][ T5183] Bluetooth: hci3: command tx timeout [ 90.837765][ T5183] Bluetooth: hci2: command tx timeout [ 90.844209][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.862500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.878107][ T5924] usb 5-1: config 0 descriptor?? [ 90.895799][ T5924] pwc: Askey VC010 type 2 USB webcam detected. [ 90.912759][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.945010][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.987547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.067620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.328462][ T5924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 91.445701][ T5982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.477414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.720475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 91.822469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.859047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 91.958129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.001145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #14a!!! [ 92.059942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 92.177416][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.349386][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.388991][ T43] usb 4-1: config 42 has too many interfaces: 227, using maximum allowed: 32 [ 92.440532][ T43] usb 4-1: config 42 has an invalid descriptor of length 1, skipping remainder of the config [ 92.457129][ T43] usb 4-1: config 42 has 0 interfaces, different from the descriptor's value: 227 [ 92.491566][ T43] usb 4-1: New USB device found, idVendor=0403, idProduct=fa33, bcdDevice=39.77 [ 92.507888][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.630796][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.747384][ T5183] Bluetooth: hci0: command tx timeout [ 92.828886][ T5183] Bluetooth: hci1: command tx timeout [ 92.835953][ T5183] Bluetooth: hci4: command tx timeout [ 92.924026][ T5183] Bluetooth: hci2: command tx timeout [ 92.933200][ T5864] Bluetooth: hci3: command tx timeout [ 92.963663][ T43] usb 4-1: Product: syz [ 93.077528][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 93.243185][ T43] usb 4-1: Manufacturer: syz [ 93.268248][ T24] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 93.433739][ T43] usb 4-1: SerialNumber: syz [ 93.726695][ T24] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 94.629433][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 94.795257][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.466269][ T5924] pwc: recv_control_msg error -110 req 02 val 2700 [ 96.831363][ T5924] pwc: recv_control_msg error -32 req 02 val 2c00 [ 97.241321][ T5924] pwc: recv_control_msg error -32 req 04 val 1000 [ 97.840068][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 98.208486][ T5924] pwc: recv_control_msg error -32 req 04 val 1300 [ 98.936980][ T5924] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.526366][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.555341][ T9] cfg80211: failed to load regulatory.db [ 100.010887][ T16] sched: DL replenish lagged too much [ 100.706345][ T5924] pwc: recv_control_msg error -32 req 02 val 2000 [ 107.668165][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 220.947219][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 220.955050][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6005/1:b..l P5221/1:b..l P5232/1:b..l [ 220.965514][ C1] rcu: (detected by 1, t=10502 jiffies, g=11081, q=1436179 ncpus=2) [ 220.973640][ C1] task:udevd state:R running task stack:24424 pid:5232 tgid:5232 ppid:1 task_flags:0x400140 flags:0x00004002 [ 220.987447][ C1] Call Trace: [ 220.990843][ C1] [ 220.993807][ C1] __schedule+0x1798/0x4cc0 [ 220.998381][ C1] ? lock_release+0x4b/0x3e0 [ 221.003198][ C1] ? lock_release+0x4b/0x3e0 [ 221.007881][ C1] ? __pfx___schedule+0x10/0x10 [ 221.012939][ C1] ? __kernel_text_address+0xd/0x40 [ 221.018295][ C1] ? unwind_get_return_address+0x4d/0x90 [ 221.024255][ C1] ? arch_stack_walk+0xfc/0x150 [ 221.029166][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.034235][ C1] preempt_schedule_irq+0xb5/0x150 [ 221.039568][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 221.045809][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.051243][ C1] ? rcu_irq_exit_check_preempt+0xd6/0x210 [ 221.058261][ C1] irqentry_exit+0x6f/0x90 [ 221.063196][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.069813][ C1] RIP: 0010:unwind_next_frame+0xb0/0x2390 [ 221.076283][ C1] Code: 32 02 00 00 89 84 24 84 00 00 00 4c 89 bc 24 90 00 00 00 e8 82 55 34 00 4c 8d 3d 00 00 00 00 48 c7 c7 e0 9e 13 8e 31 f6 31 d2 02 00 00 00 45 31 c0 45 31 c9 41 57 e8 0e 99 2a 00 48 83 c4 08 [ 221.100116][ C1] RSP: 0018:ffffc90002fa7358 EFLAGS: 00000246 [ 221.106825][ C1] RAX: 0000000000000001 RBX: ffffffff8172ea38 RCX: dffffc0000000000 [ 221.116280][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e139ee0 [ 221.124750][ C1] RBP: dffffc0000000000 R08: ffffc90002fa7401 R09: 0000000000000000 [ 221.134664][ C1] R10: ffffc90002fa7488 R11: fffff520005f4e9d R12: 1ffff920005f4e91 [ 221.143467][ C1] R13: ffffc90002fa74c0 R14: ffffc90002fa7488 R15: ffffffff8172c195 [ 221.151843][ C1] ? unwind_next_frame+0xa5/0x2390 [ 221.159117][ C1] ? __unwind_start+0xf8/0x760 [ 221.164311][ C1] ? unwind_next_frame+0x9e/0x2390 [ 221.169868][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.174798][ C1] ? lock_release+0x4b/0x3e0 [ 221.179969][ C1] ? lock_release+0x4b/0x3e0 [ 221.185850][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 221.192489][ C1] __unwind_start+0x5b9/0x760 [ 221.198623][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 221.205793][ C1] arch_stack_walk+0xe4/0x150 [ 221.212460][ C1] ? __unwind_start+0xf8/0x760 [ 221.217697][ C1] stack_trace_save+0x9c/0xe0 [ 221.223404][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 221.229786][ C1] save_stack+0xf5/0x1f0 [ 221.235177][ C1] ? __pfx_save_stack+0x10/0x10 [ 221.240630][ C1] ? lock_release+0x4b/0x3e0 [ 221.245644][ C1] ? page_ext_get+0x22/0x2f0 [ 221.251524][ C1] __reset_page_owner+0x71/0x1f0 [ 221.257204][ C1] __free_frozen_pages+0xbc4/0xd30 [ 221.262555][ C1] __put_partials+0x156/0x1a0 [ 221.269105][ C1] put_cpu_partial+0x17c/0x250 [ 221.274487][ C1] ? put_cpu_partial+0x6d/0x250 [ 221.280003][ C1] __slab_free+0x2d5/0x3c0 [ 221.284751][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 221.291258][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 221.296786][ C1] ? __phys_addr+0xd3/0x180 [ 221.302139][ C1] qlist_free_all+0x97/0x140 [ 221.306872][ C1] kasan_quarantine_reduce+0x148/0x160 [ 221.313050][ C1] __kasan_slab_alloc+0x22/0x80 [ 221.318415][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 221.324120][ C1] ? copy_fs_struct+0x4f/0x270 [ 221.329015][ C1] copy_fs_struct+0x4f/0x270 [ 221.333832][ C1] copy_fs+0x6d/0x150 [ 221.338038][ C1] copy_process+0x15df/0x3c00 [ 221.342871][ C1] ? copy_process+0x97f/0x3c00 [ 221.347963][ C1] ? __pfx_copy_process+0x10/0x10 [ 221.353902][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.358856][ C1] ? sk_setsockopt+0x2076/0x2dc0 [ 221.364455][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 221.371627][ C1] kernel_clone+0x21e/0x840 [ 221.376213][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 221.381443][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 221.387389][ C1] __x64_sys_clone+0x18b/0x1e0 [ 221.392384][ C1] ? __might_fault+0xcc/0x130 [ 221.397393][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 221.403552][ C1] ? do_sock_setsockopt+0x185/0x1b0 [ 221.409026][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.413947][ C1] do_syscall_64+0xfa/0x3b0 [ 221.418592][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.423527][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.429674][ C1] ? clear_bhb_loop+0x60/0xb0 [ 221.434694][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.440643][ C1] RIP: 0033:0x7f9d1f8f1636 [ 221.445290][ C1] RSP: 002b:00007fff763fd1c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 221.454267][ C1] RAX: ffffffffffffffda RBX: 00007fff763fd1c8 RCX: 00007f9d1f8f1636 [ 221.462649][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 221.470925][ C1] RBP: 00005574a3ab0910 R08: 0000000000000000 R09: 0000000000000210 [ 221.478940][ C1] R10: 00007f9d1ff73b50 R11: 0000000000000246 R12: 00007fff763fd580 [ 221.486955][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.495095][ C1] [ 221.498163][ C1] task:klogd state:R running task stack:24232 pid:5221 tgid:5221 ppid:1 task_flags:0x400100 flags:0x00004002 [ 221.512234][ C1] Call Trace: [ 221.515632][ C1] [ 221.518858][ C1] __schedule+0x1798/0x4cc0 [ 221.523420][ C1] ? __pfx___switch_to+0x10/0x10 [ 221.528513][ C1] ? __pfx___schedule+0x10/0x10 [ 221.533882][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.539899][ C1] preempt_schedule_irq+0xb5/0x150 [ 221.545872][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 221.552146][ C1] ? __schedule+0x17ae/0x4cc0 [ 221.557060][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.562091][ C1] ? rcu_irq_exit_check_preempt+0xd6/0x210 [ 221.568141][ C1] irqentry_exit+0x6f/0x90 [ 221.572605][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.579148][ C1] RIP: 0010:lock_release+0x2c0/0x3e0 [ 221.584594][ C1] Code: 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 7b e1 02 11 48 3b 44 24 28 0f 85 8b 00 00 00 <48> 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f [ 221.605024][ C1] RSP: 0018:ffffc900030b7190 EFLAGS: 00000246 [ 221.611111][ C1] RAX: 73070c6b9cbc3e00 RBX: ffffffff90c55701 RCX: 73070c6b9cbc3e00 [ 221.619122][ C1] RDX: ffffc900030b7301 RSI: ffffffff8be334e0 RDI: ffffffff8be334a0 [ 221.627212][ C1] RBP: dffffc0000000000 R08: ffffc900030b7c70 R09: 0000000000000000 [ 221.635231][ C1] R10: ffffc900030b7318 R11: fffff52000616e65 R12: ffffc900030b7c80 [ 221.643239][ C1] R13: ffffffff8172c195 R14: ffffffff8e139ee0 R15: ffffffff8172c195 [ 221.651246][ C1] ? unwind_next_frame+0xa5/0x2390 [ 221.656406][ C1] ? unwind_next_frame+0xa5/0x2390 [ 221.661561][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 221.666995][ C1] ? deref_stack_reg+0x19f/0x230 [ 221.671988][ C1] ? unwind_next_frame+0xa5/0x2390 [ 221.677138][ C1] unwind_next_frame+0x19a9/0x2390 [ 221.682320][ C1] ? unwind_next_frame+0xa5/0x2390 [ 221.687474][ C1] ? unix_dgram_sendmsg+0x461/0x1850 [ 221.692889][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 221.699092][ C1] arch_stack_walk+0x11c/0x150 [ 221.704253][ C1] ? __sock_sendmsg+0x219/0x270 [ 221.709808][ C1] stack_trace_save+0x9c/0xe0 [ 221.714741][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 221.720175][ C1] save_stack+0xf5/0x1f0 [ 221.724509][ C1] ? __pfx_save_stack+0x10/0x10 [ 221.729400][ C1] ? page_ext_get+0x22/0x2f0 [ 221.734040][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 221.739385][ C1] ? __put_partials+0x156/0x1a0 [ 221.744365][ C1] ? put_cpu_partial+0x17c/0x250 [ 221.749334][ C1] ? __slab_free+0x2d5/0x3c0 [ 221.753954][ C1] ? qlist_free_all+0x97/0x140 [ 221.758837][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 221.764527][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 221.769622][ C1] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 221.775742][ C1] ? __alloc_skb+0x112/0x2d0 [ 221.780378][ C1] ? alloc_skb_with_frags+0xca/0x890 [ 221.785785][ C1] ? sock_alloc_send_pskb+0x857/0x990 [ 221.791287][ C1] ? unix_dgram_sendmsg+0x461/0x1850 [ 221.796616][ C1] ? lock_release+0x4b/0x3e0 [ 221.801242][ C1] ? page_ext_get+0x22/0x2f0 [ 221.805876][ C1] __reset_page_owner+0x71/0x1f0 [ 221.810850][ C1] __free_frozen_pages+0xbc4/0xd30 [ 221.816206][ C1] __put_partials+0x156/0x1a0 [ 221.821006][ C1] put_cpu_partial+0x17c/0x250 [ 221.825802][ C1] ? put_cpu_partial+0x6d/0x250 [ 221.830724][ C1] __slab_free+0x2d5/0x3c0 [ 221.835173][ C1] ? __phys_addr+0xd3/0x180 [ 221.839710][ C1] qlist_free_all+0x97/0x140 [ 221.844333][ C1] kasan_quarantine_reduce+0x148/0x160 [ 221.849832][ C1] __kasan_slab_alloc+0x22/0x80 [ 221.854722][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 221.860678][ C1] ? __might_fault+0xb0/0x130 [ 221.865457][ C1] ? __alloc_skb+0x112/0x2d0 [ 221.870088][ C1] __alloc_skb+0x112/0x2d0 [ 221.874545][ C1] alloc_skb_with_frags+0xca/0x890 [ 221.879702][ C1] sock_alloc_send_pskb+0x857/0x990 [ 221.884950][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 221.890705][ C1] ? lock_release+0x4b/0x3e0 [ 221.895329][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.900121][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 221.906224][ C1] unix_dgram_sendmsg+0x461/0x1850 [ 221.911363][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.916191][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 221.921804][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 221.928260][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.933657][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 221.939243][ C1] __sock_sendmsg+0x219/0x270 [ 221.943953][ C1] __sys_sendto+0x3bd/0x520 [ 221.948582][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 221.953718][ C1] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 221.959984][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.964793][ C1] __x64_sys_sendto+0xde/0x100 [ 221.969614][ C1] do_syscall_64+0xfa/0x3b0 [ 221.974183][ C1] ? rcu_is_watching+0x15/0xb0 [ 221.978983][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.985090][ C1] ? clear_bhb_loop+0x60/0xb0 [ 221.989810][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.995742][ C1] RIP: 0033:0x7fd02750c407 [ 222.000180][ C1] RSP: 002b:00007fffdab506e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 222.008623][ C1] RAX: ffffffffffffffda RBX: 00007fd0273bcc80 RCX: 00007fd02750c407 [ 222.016670][ C1] RDX: 0000000000000058 RSI: 00007fffdab50820 RDI: 0000000000000003 [ 222.024673][ C1] RBP: 00007fffdab50c50 R08: 0000000000000000 R09: 0000000000000000 [ 222.032672][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffdab50c68 [ 222.040680][ C1] R13: 00007fffdab50820 R14: 000000000000003d R15: 00007fffdab50820 [ 222.048801][ C1] [ 222.051858][ C1] task:syz.3.10 state:R running task stack:25480 pid:6005 tgid:5986 ppid:5881 task_flags:0x40054c flags:0x00004006 [ 222.066079][ C1] Call Trace: [ 222.069389][ C1] [ 222.072348][ C1] __schedule+0x1798/0x4cc0 [ 222.076891][ C1] ? free_pages_and_swap_cache+0x4be/0x520 [ 222.082915][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 222.089114][ C1] ? __pfx___schedule+0x10/0x10 [ 222.094090][ C1] ? do_raw_spin_lock+0x121/0x290 [ 222.099254][ C1] ? preempt_schedule+0xae/0xc0 [ 222.104157][ C1] preempt_schedule_common+0x83/0xd0 [ 222.109493][ C1] preempt_schedule+0xae/0xc0 [ 222.114228][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 222.120073][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.124869][ C1] preempt_schedule_thunk+0x16/0x30 [ 222.130110][ C1] _raw_spin_unlock+0x3f/0x50 [ 222.135184][ C1] unmap_page_range+0x3a79/0x4370 [ 222.140263][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 222.145670][ C1] ? mas_find+0xb0e/0xd30 [ 222.150212][ C1] unmap_vmas+0x399/0x580 [ 222.154730][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 222.160057][ C1] exit_mmap+0x248/0xb50 [ 222.164356][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 222.169212][ C1] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 222.174935][ C1] ? __pfx_exit_aio+0x10/0x10 [ 222.179663][ C1] ? uprobe_clear_state+0x274/0x290 [ 222.184902][ C1] __mmput+0x118/0x420 [ 222.189010][ C1] exit_mm+0x1da/0x2c0 [ 222.193120][ C1] ? __pfx_exit_mm+0x10/0x10 [ 222.197834][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.202765][ C1] do_exit+0x648/0x2300 [ 222.207339][ C1] ? __pfx___might_resched+0x10/0x10 [ 222.212764][ C1] ? do_raw_spin_lock+0x121/0x290 [ 222.217924][ C1] ? __pfx_do_exit+0x10/0x10 [ 222.222734][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.227760][ C1] do_group_exit+0x21c/0x2d0 [ 222.232405][ C1] get_signal+0x1286/0x1340 [ 222.237436][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 222.243028][ C1] ? __x64_sys_sendmsg+0x230/0x260 [ 222.248353][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.254941][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.260289][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.265193][ C1] exit_to_user_mode_loop+0x75/0x110 [ 222.270702][ C1] do_syscall_64+0x2bd/0x3b0 [ 222.275340][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.281535][ C1] ? clear_bhb_loop+0x60/0xb0 [ 222.286629][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.292560][ C1] RIP: 0033:0x7f9912f8ebe9 [ 222.297188][ C1] RSP: 002b:00007f9913d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.306204][ C1] RAX: 00000000000000cc RBX: 00007f99131b6090 RCX: 00007f9912f8ebe9 [ 222.314286][ C1] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 222.322302][ C1] RBP: 00007f9913011e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.330712][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.338748][ C1] R13: 00007f99131b6128 R14: 00007f99131b6090 R15: 00007f99132dfa28 [ 222.346855][ C1] [ 222.349987][ C1] rcu: rcu_preempt kthread starved for 8857 jiffies! g11081 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 222.361742][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 222.372142][ C1] rcu: RCU grace-period kthread stack dump: [ 222.378206][ C1] task:rcu_preempt state:R running task stack:27464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 222.391830][ C1] Call Trace: [ 222.396624][ C1] [ 222.399592][ C1] __schedule+0x1798/0x4cc0 [ 222.404148][ C1] ? __pfx___schedule+0x10/0x10 [ 222.409126][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 222.415074][ C1] ? schedule+0x91/0x360 [ 222.419402][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.424449][ C1] ? lock_release+0x4b/0x3e0 [ 222.429175][ C1] schedule+0x165/0x360 [ 222.433496][ C1] schedule_timeout+0x12b/0x270 [ 222.438377][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 222.443954][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.448765][ C1] ? __pfx_process_timeout+0x10/0x10 [ 222.454622][ C1] ? prepare_to_swait_event+0x341/0x380 [ 222.460200][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 222.465304][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 222.471616][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 222.476950][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 222.482368][ C1] rcu_gp_kthread+0x99/0x390 [ 222.487012][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 222.492800][ C1] ? __kthread_parkme+0x7b/0x200 [ 222.497875][ C1] ? __kthread_parkme+0x1a1/0x200 [ 222.502939][ C1] kthread+0x70e/0x8a0 [ 222.507157][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 222.512592][ C1] ? __pfx_kthread+0x10/0x10 [ 222.517237][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.522580][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.527856][ C1] ? __pfx_kthread+0x10/0x10 [ 222.532724][ C1] ret_from_fork+0x3f9/0x770 [ 222.537452][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 222.542664][ C1] ? __switch_to_asm+0x39/0x70 [ 222.547734][ C1] ? __switch_to_asm+0x33/0x70 [ 222.552539][ C1] ? __pfx_kthread+0x10/0x10 [ 222.557442][ C1] ret_from_fork_asm+0x1a/0x30 [ 222.562595][ C1] [ 222.565779][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 222.572229][ C1] Sending NMI from CPU 1 to CPUs 0: [ 222.577541][ C0] NMI backtrace for cpu 0 [ 222.577569][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 222.577589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.577599][ C0] RIP: 0010:unwind_next_frame+0x173c/0x2390 [ 222.577625][ C0] Code: e8 89 0c 00 00 e9 f7 01 00 00 48 8b 54 24 08 48 8d 5a 02 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 19 0b 00 00 <48> 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 2b 0b 00 00 48 0f bf [ 222.577639][ C0] RSP: 0018:ffffc90000006bb8 EFLAGS: 00000246 [ 222.577654][ C0] RAX: 0000000000000000 RBX: ffffffff90c227f8 RCX: 0000000000000000 [ 222.577665][ C0] RDX: ffffffff90c227f9 RSI: 0000000000000001 RDI: ffffc90000006ce8 [ 222.577677][ C0] RBP: dffffc0000000000 R08: ffffc90000006ce7 R09: 0000000000000000 [ 222.577688][ C0] R10: ffffc90000006cd8 R11: fffff52000000d9d R12: ffffc900000079f8 [ 222.577700][ C0] R13: ffffc90000006cd8 R14: ffffc90000006c88 R15: 1ffffffff21844ff [ 222.577713][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 222.577726][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.577745][ C0] CR2: 00002000000db030 CR3: 000000000df36000 CR4: 00000000003526f0 [ 222.577771][ C0] Call Trace: [ 222.577778][ C0] [ 222.577787][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.577807][ C0] ? NF_HOOK+0x30c/0x3a0 [ 222.577832][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 222.577854][ C0] arch_stack_walk+0x11c/0x150 [ 222.577876][ C0] ? __netif_receive_skb+0x143/0x380 [ 222.577900][ C0] stack_trace_save+0x9c/0xe0 [ 222.577919][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 222.577940][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.577958][ C0] ? common_startup_64+0x13e/0x147 [ 222.577982][ C0] kasan_save_track+0x3e/0x80 [ 222.578002][ C0] ? kasan_save_track+0x3e/0x80 [ 222.578021][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 222.578043][ C0] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 222.578065][ C0] ? __alloc_skb+0x112/0x2d0 [ 222.578088][ C0] ? synproxy_send_client_synack+0x16c/0xe20 [ 222.578114][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 222.578132][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 222.578149][ C0] ? nft_do_chain+0x409/0x1920 [ 222.578165][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 222.578182][ C0] ? nf_hook_slow+0xc2/0x220 [ 222.578206][ C0] ? NF_HOOK+0x206/0x3a0 [ 222.578227][ C0] ? NF_HOOK+0x30c/0x3a0 [ 222.578265][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 222.578282][ C0] __kasan_slab_alloc+0x6c/0x80 [ 222.578305][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 222.578327][ C0] ? __alloc_skb+0x112/0x2d0 [ 222.578353][ C0] __alloc_skb+0x112/0x2d0 [ 222.578379][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 222.578408][ C0] ? rcu_is_watching+0x15/0xb0 [ 222.578424][ C0] ? synproxy_pernet+0x45/0x270 [ 222.578442][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 222.578467][ C0] ? __asan_memset+0x22/0x50 [ 222.578485][ C0] ? synproxy_pernet+0x45/0x270 [ 222.578505][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 222.578527][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 222.578547][ C0] ? nf_ip_checksum+0x13c/0x510 [ 222.578566][ C0] nft_synproxy_do_eval+0x345/0x570 [ 222.578584][ C0] ? rcu_is_watching+0x15/0xb0 [ 222.578601][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 222.578626][ C0] nft_do_chain+0x409/0x1920 [ 222.578648][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 222.578669][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.578692][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.578710][ C0] ? unwind_next_frame+0xa5/0x2390 [ 222.578731][ C0] nft_do_chain_inet+0x25d/0x340 [ 222.578748][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 222.578772][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 222.578792][ C0] ? NF_HOOK+0x9a/0x3a0 [ 222.578813][ C0] ? rcu_is_watching+0x15/0xb0 [ 222.578829][ C0] ? lock_acquire+0x5f/0x360 [ 222.578852][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 222.578869][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 222.578887][ C0] nf_hook_slow+0xc2/0x220 [ 222.578913][ C0] NF_HOOK+0x206/0x3a0 [ 222.578935][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 222.578959][ C0] ? NF_HOOK+0x9a/0x3a0 [ 222.578980][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 222.579001][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 222.579026][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 222.579050][ C0] ? skb_dst+0x4f/0xd0 [ 222.579073][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 222.579097][ C0] NF_HOOK+0x30c/0x3a0 [ 222.579121][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 222.579144][ C0] ? NF_HOOK+0x9a/0x3a0 [ 222.579165][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 222.579187][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 222.579211][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 222.579237][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 222.579259][ C0] __netif_receive_skb+0x143/0x380 [ 222.579282][ C0] ? process_backlog+0x2d5/0x14f0 [ 222.579306][ C0] process_backlog+0x60e/0x14f0 [ 222.579335][ C0] ? __pfx_process_backlog+0x10/0x10 [ 222.579359][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 222.579380][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.579403][ C0] __napi_poll+0xc7/0x360 [ 222.579422][ C0] ? rcu_is_watching+0x15/0xb0 [ 222.579439][ C0] net_rx_action+0x707/0xe30 [ 222.579461][ C0] ? debug_object_activate+0x2e2/0x420 [ 222.579490][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 222.579528][ C0] handle_softirqs+0x283/0x870 [ 222.579545][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 222.579563][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 222.579581][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 222.579603][ C0] __irq_exit_rcu+0xca/0x1f0 [ 222.579618][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 222.579638][ C0] irq_exit_rcu+0x9/0x30 [ 222.579652][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 222.579675][ C0] [ 222.579680][ C0] [ 222.579686][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.579704][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 222.579726][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 222.579739][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 222.579762][ C0] RAX: 6dd2db6b9b7e4800 RBX: ffffffff81968308 RCX: 6dd2db6b9b7e4800 [ 222.579774][ C0] RDX: 0000000000000001 RSI: ffffffff8be334e0 RDI: ffffffff81968308 [ 222.579786][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 222.579798][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38130 [ 222.579810][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 222.579822][ C0] ? do_idle+0x1e8/0x510 [ 222.579839][ C0] ? do_idle+0x1e8/0x510 [ 222.579854][ C0] default_idle+0x13/0x20 [ 222.579868][ C0] default_idle_call+0x74/0xb0 [ 222.579883][ C0] do_idle+0x1e8/0x510 [ 222.579900][ C0] ? __pfx_do_idle+0x10/0x10 [ 222.579919][ C0] ? do_idle+0x8/0x510 [ 222.579934][ C0] cpu_startup_entry+0x44/0x60 [ 222.579949][ C0] rest_init+0x2de/0x300 [ 222.579966][ C0] start_kernel+0x3a9/0x410 [ 222.579985][ C0] x86_64_start_reservations+0x24/0x30 [ 222.580008][ C0] x86_64_start_kernel+0x143/0x1c0 [ 222.580030][ C0] common_startup_64+0x13e/0x147 [ 222.580058][ C0]