last executing test programs: 52.367869114s ago: executing program 1 (id=91): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000007f000001000000000000000000000000fffd0006000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 52.203357407s ago: executing program 1 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500006400040000fe019078ac1e0001ac1414aa05009078e00100e0400400000000000200110000ac1414bbffffffff640a81bb5d105fbf008e0703fd441c0003e000000600000000ac141400000000007f0000810000000000000096909f6f11af9a2e"], 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000340)="f7790066baa00066b86b42c7442400ac000000c7442402f52f0000ff2c2466ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b80100000f01d9c4033921820f47a753fd", 0x59}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0x88, 0xff, '\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$midi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000140)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sched_setattr(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008094}, 0x4) 51.09968407s ago: executing program 1 (id=99): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a010400000000000000000200002809"], 0xdc}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010fc0d010103000000000109022400010000800009040002010300010009210000000122f804090581034000040000"], 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x23, &(0x7f00000003c0)=@string={0x23, 0x3, "160d5093c7b6a6c05251472daf51ce0756fa343e8caa0150aed5b4a855bea9398f"}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r2, 0x8918, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 50.536044905s ago: executing program 0 (id=102): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0xfffffff5}, 0x0) 50.380486959s ago: executing program 0 (id=103): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x7, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xb, 0x4, 0x0, 0x80000000, 0x100000000006, 0x5, 0x4, 0x40000000000000}, {0x5, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x33}, 0x2, @in6=@mcast2, 0x34ff, 0x4, 0x3, 0x0, 0x4, 0xfffffffd, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty, 0xfffffffd}, 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121c83, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000000)) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x4000000) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x601, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000240)=[0x401, 0x7], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x80}) 49.58613068s ago: executing program 4 (id=111): socket(0x400000000010, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000380)=0xffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a2, 0xc}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f0000000240)) io_setup(0x81, &(0x7f0000001440)) r3 = syz_io_uring_setup(0x2af8, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x5}, &(0x7f00000000c0), &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x1a, 0x1, {0x7, 0x7}}]}]}}}, @IFLA_LINK={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000082) r5 = syz_open_dev$loop(&(0x7f0000000340), 0x101, 0x101000) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) io_uring_enter(r3, 0x2226, 0x24dc, 0x44, 0x0, 0x0) 49.007966098s ago: executing program 1 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x13, 0x12}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xf}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x94}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f00000002c0)=""/211, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 48.836219465s ago: executing program 1 (id=116): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x2, &(0x7f0000000040)=[r2, 0x0], &(0x7f0000000200), 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000004c0)={0x0, 0x0, 0x100000000000002, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r3) 48.511875651s ago: executing program 3 (id=118): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000001100050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 48.245776166s ago: executing program 3 (id=120): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x80086601, 0x0) (async) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b00010000000009040000"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x11, 0xf9, {0xf9, 0x22, "0f037a44faac936df46b6f4c461f1566d02dd5a83197850f03c06d8fe3d9dd140ee3fef91ff928c6e5da54fcb319df2234c81a83632420a63382b6376f4724898ecb4ce440ab628cc584e920e05f227591c4fb1a35b0892ea007e4bd46ae01e0f52c72d1204c38adb37aa27748fd51266c0cee5126392e5fe94d27ecf7bd819b233736993ebc3d84799edd806d7b12a2e9e2d2d9d546b98c436d87698a947736f6a1429df69ec327894f22a007d6cb6a84a9f3239936eea37458d2424809eac2541a0fa06481386ebc935fed503263423dfb208dd4f889c4748f07eb44fc289b7ec769bd92667c1b448f48c0324817708fea50315f760b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000140)={0x0, 0xf, 0xe7, {0x5, 0xf, 0xe7, 0x3, [@generic={0xce, 0x10, 0xb, "ada8674cb71502ac01019081db4d7a3e0351fab9753b79474262c0d61587c7a33e40af082068f3bf2b7096a1aba6a3af2740d3d3cd24511062b004652ef4140fc3aa9870f4d14b432a18389949ec0be37444b7f9f1750e678cc6efbe9df50951934b9852a8296fceab3dec1eb580f1353f33ceb939ab63fdc178d4c9303531bed11e13c07c1375119a3f4c450baa5e9130d22d522ef758ba4e81c461be10f5dc1a3b0df8ff3012e06b48548b9fac76ba0287f034a27af24d9aee58cbf64a35af4d0b9e572400d9d1459328"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x1e7d52b63965fd5f, 0x8, 0x80, 0x7, 0x34}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf2, 0x2, 0xf9, 0x9, "807cbcbf", "94a647cc"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x9, 0x4, 0x6, 0x0, 0x7}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0xe, 0x91, "127aa5b4b89db49445568b5b02522d937c94f68079d7e0b40340108a7437b99b97f0347a195453b92835810783dd8e3ce53dafa8b71a1987cb6d538b85328992572c5555d7f153d44b30c438fe9f658b3086b60dea56b5bc4e328e19cd4b137cde976f99247d211fca3fae32f2d597bb26acebe5236d7d2a687ca0cc19b9a7ddaaf1307995989a338b4fe18174f57dcac2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1e0, 0x2}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000500)={0x40, 0x9, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "c979"}, &(0x7f0000000580)={0x40, 0xf, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @random="8b1ccb832dd0"}, &(0x7f0000000600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x9ffbbfe526f50ee7}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "aac3"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xf}}) 48.135878962s ago: executing program 0 (id=121): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a9400000000002025096688000000000001090224000100000800"/42], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2087, 0x703, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x616}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x0, 0x5}}}}}]}}]}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x80) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000001c0)={0x5b, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x40, 0x21, 0x53, {0x53, 0x0, "25209677a684236f7559a9bbbbbf2f20ab4585aaae41f2591488ced88a4e89614f7eba83e7b263ee7152943f527b896da0440c1ea10aeddf3d31fb6675c0cc5ca3c18fc010b35fd06e58509cdb1c6f9d6a"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000880)={0x40, 0x2e, 0x2, "67e4"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x35}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000940)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000980)={0x40, 0xa0, 0x4, 0x40}, &(0x7f00000009c0)={0xc0, 0xa2, 0x2f, "397244b2d97520039f6fe6957116946887965c48c95d8feb2989e8cb9b0cb60f866564751d9f3ade4877c64c289fd2"}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000280)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1, 0x200000000002, 0x20}}, 0x111000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f00000006c0)={0x40, 0xf, 0x11, {0x11, 0x6, "3b069599d5e3863b5180c9e4ebc29d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000011002d08030000000020000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008c00000140003"], 0x34}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f00000000c0)={0x0, 0x27, 0xcb, {0xcb, 0x22, "800127c1d16a4207e440f36054b72af192e037a133dc73bc9caff0d87e47190e491e21de963960bb67818f2f9f3856b7d7c4903bc4036af790af80813f3820a27ed1c8e317079154d025d41e52bc8c511186472e87f01d454ab74d48157931fd768dc59159611f56afb0977545cc0bb97e0dc306a956da8b71d43664a9ad68143c38a04a39e3f884d9176c5fbc82eb21513da8f7e551876a56890e25d3efad58fce9d946a0d97b84879056a711ebe45bb688a41880fd9fc169a47c9e399f211c7fef04785a7e7bbac3"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000680)={0x1c, &(0x7f00000001c0)={0x20, 0xc, 0x10, "250070bb99fdb83c42cdf3b2d7c62bfe"}, &(0x7f0000000200)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000640)={0x21, 0x0, 0x3, "c0e009"}}) 46.430456279s ago: executing program 4 (id=126): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 46.12375852s ago: executing program 2 (id=128): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32={[0xfbffffff]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) 46.085588871s ago: executing program 2 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 45.999471934s ago: executing program 4 (id=130): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005001500020000000500010006000000050005000200000005"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a3000000000090003f573797a300000000008000c4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 45.940010736s ago: executing program 2 (id=131): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006750d920e70451668aba0102030309021b00010000000009040000070202"], 0x0) 45.907230752s ago: executing program 4 (id=132): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40702) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x4000) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r0, 0x0, r1) memfd_create(&(0x7f0000000300)='{-)$\x00', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x200000000000000) 45.787939486s ago: executing program 4 (id=133): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x7660, &(0x7f0000000040)={0x0, 0x766b, 0x2, 0x1, 0x138}, &(0x7f0000000100), 0x0) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r6, 0x540b, 0x0) socket(0x1d, 0x2, 0x6) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000028c0)={0x9, 0x1, 0x0, &(0x7f00000027c0)=[{&(0x7f00000003c0)=""/85, 0x55}, {0x0}, {&(0x7f0000000280)=""/31, 0x1f}, {0x0}, {&(0x7f0000000340)}, {&(0x7f0000001600)=""/150, 0x96}, {&(0x7f00000016c0)=""/230, 0xe6}, {0x0}, {&(0x7f0000000440)}], &(0x7f0000002880)=[0x80, 0x1c8, 0x2, 0xbdf]}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="4000baab0a000200ff"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) userfaultfd(0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 45.056075621s ago: executing program 0 (id=134): mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000301000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 45.037125673s ago: executing program 3 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a7, 0xc}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) bind$inet(r1, 0x0, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000500)=""/7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000140007800800114000000000050015000480000005000100060000000500050002000000f7ff0400000000e46a83d70073797a30000000001600030068617368"], 0x64}, 0x1, 0x0, 0x0, 0x48e4}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ef4a800f218e92b7d82c5d4d32cdbd5b4927470085a679b4000000000000000000", @ANYRES64=r1], 0x20}}, 0x0) sendmmsg(r1, 0x0, 0x0, 0x40008d0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10122, 0x0) 44.801540243s ago: executing program 0 (id=136): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x900, 0x0) read(r0, 0x0, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000140)=0x200, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r4, 0x8971, &(0x7f0000000440)={'tunl0\x00', @ifru_ivalue=0x9}) rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r5, 0x0) msync(&(0x7f000081e000/0x3000)=nil, 0x3000, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r6, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x20044171) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x2, 0xd, 0x1, 0x7f, 0x0, 0x6, 0x8d, 0x0, 0xf, 0xd8, 0x6, 0x5, 0xf1, 0x7}, 0xe) write$6lowpan_enable(r1, &(0x7f0000000100)='1', 0x1) 44.756702652s ago: executing program 3 (id=137): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) (async) r2 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x450000) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x4008872, 0xffffffffffffffff, 0xad758000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) dup3(r4, r2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r5, r5) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, r6, 0x0) (async) setpgid(r5, r7) (async) setpgid(r5, r7) (async) wait4(r7, 0x0, 0x2, 0x0) migrate_pages(r7, 0x4, 0x0, 0x0) (async) setpgid(0x0, r5) (async) wait4(r5, 0x0, 0x2, 0x0) 44.649057125s ago: executing program 0 (id=138): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x2b, 0x80801, 0x1) r3 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x0, r3) capset(&(0x7f0000000000)={0x20080522, r3}, &(0x7f0000000200)={0x5f, 0x4, 0x3, 0x5, 0xc433, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3100f5000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0xc0884123, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc8a}, 0x94) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 44.247857508s ago: executing program 2 (id=139): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="e5ff0000000000004e00000000001c004000740000000000950000000000000041cca068850255544d211b541796"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x301}, 0x23) 44.020169544s ago: executing program 2 (id=140): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="6502000002fd0a4f0524012800001f00000000000000000007000000000037c8f8b92ec3c931dd00000000000000000c00000001040000000000007dff0a"], 0xfd85) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x17, &(0x7f0000000200)=@raw=[@exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @generic={0x8, 0x4, 0x1, 0x5c5a, 0x6}, @map_fd, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8}, @generic={0x6, 0x3, 0x9, 0x8000, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000000)='GPL\x00', 0xac5c, 0xaf, &(0x7f0000000340)=""/175, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xe, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000140)="daf98a84a47ba2617235f7867eddd9b57f5ab0a7073ec29b5784fcab962274cb9ab23a203ca09340b9e803a130d33ea8224fcc284609", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) 43.828287003s ago: executing program 3 (id=141): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32={[0xfffffff5]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) 43.735814309s ago: executing program 4 (id=142): syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r0 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r9) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500640012800e00010069703667726574617000000050000280140007000000000000000000fffffffffffffffe1400060000000000000000000000ffff"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) 43.678610453s ago: executing program 3 (id=143): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x5002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x0, 0x1e}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0xffffffffffffff92, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x3}, 0x0}, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x11, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x38}, {0x0}], 0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001a0001008000000000060000810080000000ee"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x848) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x10, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x15, 0x1, {0x0, r5}}) 43.658926602s ago: executing program 2 (id=144): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40702) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x4000) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r0, 0x0, r1) memfd_create(&(0x7f0000000300)='{-)$\x00', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x400000000000000) 41.436603961s ago: executing program 1 (id=145): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000100000000aa4e200e22"], 0x0) 0s ago: executing program 32 (id=138): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x2b, 0x80801, 0x1) r3 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x0, r3) capset(&(0x7f0000000000)={0x20080522, r3}, &(0x7f0000000200)={0x5f, 0x4, 0x3, 0x5, 0xc433, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3100f5000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0xc0884123, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc8a}, 0x94) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 85.665772][ T5819] cgroup: Unknown subsys name 'net' [ 85.822941][ T5819] cgroup: Unknown subsys name 'cpuset' [ 85.832760][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.647993][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.089641][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.100373][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.110202][ T24] cfg80211: failed to load regulatory.db [ 92.147217][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.154744][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.162572][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.171237][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.180647][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.199533][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.207928][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.220208][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.236051][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.239314][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.245361][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.256960][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.263357][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.266607][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.271498][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.279337][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.287030][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.301425][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.301547][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.318043][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.332157][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.344173][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.364110][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.975217][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 93.177470][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 93.242711][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 93.274250][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 93.394468][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.401790][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.409679][ T5852] bridge_slave_0: entered allmulticast mode [ 93.417639][ T5852] bridge_slave_0: entered promiscuous mode [ 93.439902][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 93.484071][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.491353][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.499862][ T5852] bridge_slave_1: entered allmulticast mode [ 93.507178][ T5852] bridge_slave_1: entered promiscuous mode [ 93.533280][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.540660][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.547817][ T5857] bridge_slave_0: entered allmulticast mode [ 93.555237][ T5857] bridge_slave_0: entered promiscuous mode [ 93.597342][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.604789][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.612054][ T5857] bridge_slave_1: entered allmulticast mode [ 93.619570][ T5857] bridge_slave_1: entered promiscuous mode [ 93.684606][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.741267][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.782300][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.789744][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.796903][ T5854] bridge_slave_0: entered allmulticast mode [ 93.804774][ T5854] bridge_slave_0: entered promiscuous mode [ 93.814971][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.837004][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.844323][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.851796][ T5858] bridge_slave_0: entered allmulticast mode [ 93.859132][ T5858] bridge_slave_0: entered promiscuous mode [ 93.876780][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.884052][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.891483][ T5854] bridge_slave_1: entered allmulticast mode [ 93.898753][ T5854] bridge_slave_1: entered promiscuous mode [ 93.908009][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.932750][ T5852] team0: Port device team_slave_0 added [ 93.939307][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.946552][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.953955][ T5858] bridge_slave_1: entered allmulticast mode [ 93.961270][ T5858] bridge_slave_1: entered promiscuous mode [ 94.010346][ T5852] team0: Port device team_slave_1 added [ 94.018352][ T5857] team0: Port device team_slave_0 added [ 94.078043][ T5857] team0: Port device team_slave_1 added [ 94.097042][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.104850][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.113273][ T5856] bridge_slave_0: entered allmulticast mode [ 94.120758][ T5856] bridge_slave_0: entered promiscuous mode [ 94.131393][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.170174][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.179896][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.187041][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.199531][ T5856] bridge_slave_1: entered allmulticast mode [ 94.206809][ T5856] bridge_slave_1: entered promiscuous mode [ 94.215897][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.240743][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.247824][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.273909][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.300625][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.335315][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.342654][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.369972][ T5845] Bluetooth: hci1: command tx timeout [ 94.370288][ T5836] Bluetooth: hci3: command tx timeout [ 94.375863][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.393698][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.400822][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.427506][ T5836] Bluetooth: hci0: command tx timeout [ 94.427515][ T5845] Bluetooth: hci4: command tx timeout [ 94.427869][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.433271][ T5836] Bluetooth: hci2: command tx timeout [ 94.456792][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.463852][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.489989][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.541257][ T5854] team0: Port device team_slave_0 added [ 94.562600][ T5858] team0: Port device team_slave_0 added [ 94.572757][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.583806][ T5854] team0: Port device team_slave_1 added [ 94.607667][ T5858] team0: Port device team_slave_1 added [ 94.616789][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.737431][ T5857] hsr_slave_0: entered promiscuous mode [ 94.744589][ T5857] hsr_slave_1: entered promiscuous mode [ 94.765408][ T5856] team0: Port device team_slave_0 added [ 94.772659][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.779742][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.805755][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.821837][ T5852] hsr_slave_0: entered promiscuous mode [ 94.828227][ T5852] hsr_slave_1: entered promiscuous mode [ 94.834712][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 94.840787][ T5852] Cannot create hsr debugfs directory [ 94.848391][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.855599][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.881745][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.894764][ T5856] team0: Port device team_slave_1 added [ 94.901451][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.908390][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.934351][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.953733][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.960781][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.986741][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.072659][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.079704][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.105667][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.176457][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.183643][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.210008][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.230563][ T5854] hsr_slave_0: entered promiscuous mode [ 95.236927][ T5854] hsr_slave_1: entered promiscuous mode [ 95.243441][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 95.249259][ T5854] Cannot create hsr debugfs directory [ 95.356234][ T5858] hsr_slave_0: entered promiscuous mode [ 95.362718][ T5858] hsr_slave_1: entered promiscuous mode [ 95.368948][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 95.374718][ T5858] Cannot create hsr debugfs directory [ 95.498349][ T5856] hsr_slave_0: entered promiscuous mode [ 95.504816][ T5856] hsr_slave_1: entered promiscuous mode [ 95.511274][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 95.517203][ T5856] Cannot create hsr debugfs directory [ 95.847272][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.887371][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.911546][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.940317][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.998103][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.010929][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.022465][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.049239][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.118540][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.130082][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.155425][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.167538][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.258509][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.292188][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.304638][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.316402][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.422515][ T5845] Bluetooth: hci3: command tx timeout [ 96.428008][ T5845] Bluetooth: hci1: command tx timeout [ 96.438439][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.451527][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.462859][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.473378][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.499436][ T5836] Bluetooth: hci4: command tx timeout [ 96.504966][ T5836] Bluetooth: hci0: command tx timeout [ 96.510912][ T5845] Bluetooth: hci2: command tx timeout [ 96.557200][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.586959][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.662477][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.675510][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.689058][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.696331][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.725430][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.732611][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.744530][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.751792][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.780852][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.788030][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.807622][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.852574][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.887769][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.925466][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.944912][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.982407][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.994065][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.001267][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.011811][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.019119][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.044164][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.051516][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.062770][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.069999][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.102189][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.110863][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.118004][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.156854][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.164030][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.292758][ T5857] veth0_vlan: entered promiscuous mode [ 97.311109][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.326543][ T5857] veth1_vlan: entered promiscuous mode [ 97.356384][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.415472][ T5857] veth0_macvtap: entered promiscuous mode [ 97.440123][ T5857] veth1_macvtap: entered promiscuous mode [ 97.480977][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.523988][ T5852] veth0_vlan: entered promiscuous mode [ 97.536883][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.555638][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.571412][ T5852] veth1_vlan: entered promiscuous mode [ 97.585801][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.616692][ T2931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.627775][ T2931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.652490][ T2931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.661505][ T2931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.673278][ T5858] veth0_vlan: entered promiscuous mode [ 97.737214][ T5858] veth1_vlan: entered promiscuous mode [ 97.803125][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.811775][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.826042][ T5852] veth0_macvtap: entered promiscuous mode [ 97.870572][ T5854] veth0_vlan: entered promiscuous mode [ 97.881184][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.886335][ T5856] veth0_vlan: entered promiscuous mode [ 97.895602][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.907001][ T5852] veth1_macvtap: entered promiscuous mode [ 97.934497][ T5856] veth1_vlan: entered promiscuous mode [ 97.946888][ T5854] veth1_vlan: entered promiscuous mode [ 97.955844][ T5858] veth0_macvtap: entered promiscuous mode [ 97.975292][ T5858] veth1_macvtap: entered promiscuous mode [ 98.013634][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.024055][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.073550][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.102415][ T5856] veth0_macvtap: entered promiscuous mode [ 98.122193][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.157934][ T3000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.179825][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.200440][ T5856] veth1_macvtap: entered promiscuous mode [ 98.208730][ T3000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.219748][ T3000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.235126][ T3000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.250938][ T5854] veth0_macvtap: entered promiscuous mode [ 98.265438][ T3000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.283645][ T5854] veth1_macvtap: entered promiscuous mode [ 98.313218][ T3000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.330896][ T3000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.365986][ T3000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.470682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.480835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.501643][ T5845] Bluetooth: hci1: command tx timeout [ 98.507156][ T5845] Bluetooth: hci3: command tx timeout [ 98.519425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.528087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.536966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 98.583650][ T5836] Bluetooth: hci2: command tx timeout [ 98.603859][ T52] Bluetooth: hci4: command tx timeout [ 98.625411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.644327][ T5845] Bluetooth: hci0: command tx timeout [ 98.788564][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.899374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.072395][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.101285][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.156623][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.177353][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.200270][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.210171][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.304245][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.350747][ T1170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.385424][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.422018][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.435746][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.457724][ T1170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.467834][ T1170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.495717][ T1170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.505638][ T1170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.542059][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.553447][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.598747][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.611931][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.743871][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.774375][ T5934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.780186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.798452][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.837134][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.869892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.882784][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.929645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.941640][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.965921][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.026917][ T5939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'. [ 100.107463][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.147148][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.358514][ T5945] mmap: syz.3.8 (5945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.599033][ T5836] Bluetooth: hci1: command tx timeout [ 100.604707][ T52] Bluetooth: hci3: command tx timeout [ 100.623687][ T5838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.693322][ T5951] xt_l2tp: invalid flags combination: 0 [ 100.749316][ T52] Bluetooth: hci0: command tx timeout [ 100.822930][ T52] Bluetooth: hci2: command tx timeout [ 100.828431][ T5836] Bluetooth: hci4: command tx timeout [ 100.834191][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 100.847153][ T5838] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 100.862913][ T5838] usb 5-1: config 1 interface 0 has no altsetting 0 [ 100.911275][ T5951] wireguard0: entered promiscuous mode [ 100.916873][ T5951] wireguard0: entered allmulticast mode [ 100.954209][ T5838] usb 5-1: New USB device found, idVendor=046d, idProduct=4024, bcdDevice= 0.40 [ 100.963716][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.994932][ T5838] usb 5-1: Product: syz [ 101.012214][ T5838] usb 5-1: Manufacturer: syz [ 101.025869][ T5838] usb 5-1: SerialNumber: syz [ 101.039707][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.269150][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 101.276863][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 101.291795][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 101.369763][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.431144][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 101.458779][ T5838] usbhid 5-1:1.0: can't add hid device: -71 [ 101.499289][ T5838] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 101.499295][ T5957] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.530700][ T5838] usb 5-1: USB disconnect, device number 2 [ 101.534575][ T43] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 101.577038][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.588743][ T43] usb 1-1: Product: syz [ 101.607672][ T43] usb 1-1: Manufacturer: syz [ 101.623755][ T43] usb 1-1: SerialNumber: syz [ 101.646925][ T43] usb 1-1: config 0 descriptor?? [ 101.668211][ T5950] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.695549][ T43] port100 1-1:0.0: NFC: Could not get supported command types [ 101.740935][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 101.742260][ T5957] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 101.767665][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.804322][ T5957] usb 4-1: config 0 descriptor?? [ 101.819181][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 102.052606][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.062699][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.093750][ T5957] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 102.307717][ T5957] [drm:udl_init] *ERROR* Selecting channel failed [ 102.375560][ T5957] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 102.409841][ T5957] [drm] Initialized udl on minor 2 [ 102.435310][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.463510][ T5957] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 102.581348][ T5957] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 102.620823][ T5922] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 102.682747][ T5957] usb 4-1: USB disconnect, device number 2 [ 102.692515][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.703230][ T24] usb 2-1: config 0 interface 0 altsetting 40 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 102.722766][ T5922] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 102.785835][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.848130][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c733, bcdDevice= 0.00 [ 102.898206][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.027507][ T24] usb 2-1: config 0 descriptor?? [ 103.272763][ T5969] xt_TCPMSS: Only works on TCP SYN packets [ 103.280316][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.290034][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.315504][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.324590][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.341639][ T5969] geneve2: entered promiscuous mode [ 103.520579][ T24] usb 2-1: string descriptor 0 read error: -71 [ 103.547763][ T24] usb 2-1: USB disconnect, device number 2 [ 104.310331][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.753691][ T5957] usb 1-1: USB disconnect, device number 2 [ 104.790910][ T5838] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.799903][ T5838] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.814080][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.883195][ T5838] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 104.915677][ T5838] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.925047][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.935714][ T5838] usb 3-1: Product: syz [ 104.948397][ T5838] usb 3-1: Manufacturer: syz [ 104.983011][ T5838] cdc_wdm 3-1:1.0: skipping garbage [ 104.991715][ T5838] cdc_wdm 3-1:1.0: skipping garbage [ 105.002540][ T5838] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 105.556932][ T6011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.878989][ T5957] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.932057][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 105.948607][ T6021] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.274778][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 106.298522][ T5957] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 106.308995][ T5957] usb 4-1: config 0 has no interface number 0 [ 106.371217][ T5957] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 106.382672][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.391001][ T5957] usb 4-1: Product: syz [ 106.395179][ T5957] usb 4-1: Manufacturer: syz [ 106.400228][ T5957] usb 4-1: SerialNumber: syz [ 106.429164][ T5957] usb 4-1: config 0 descriptor?? [ 106.445685][ T5957] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.69/input/input5 [ 106.554464][ T5838] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.989538][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 107.010165][ T5838] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.029025][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.037175][ T5838] usb 2-1: Product: syz [ 107.047980][ T5838] usb 2-1: Manufacturer: syz [ 107.074233][ T5838] usb 2-1: SerialNumber: syz [ 107.343450][ T5922] usb 3-1: USB disconnect, device number 2 [ 107.364612][ T5838] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 107.694813][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29'. [ 107.769260][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'. [ 108.408582][ T5922] usb 2-1: USB disconnect, device number 3 [ 108.481563][ T5922] usblp0: removed [ 108.711026][ T5188] bcm5974 4-1:0.69: could not read from device [ 108.825150][ T5188] bcm5974 4-1:0.69: could not read from device [ 108.854583][ T5957] usb 4-1: USB disconnect, device number 3 [ 108.873137][ T5188] bcm5974 4-1:0.69: could not read from device [ 109.106738][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 109.169704][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.208228][ T6047] hub 9-0:1.0: USB hub found [ 109.214161][ T6047] hub 9-0:1.0: 1 port detected [ 109.371703][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 109.382649][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 109.398504][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.427071][ T10] usb 3-1: Product: syz [ 109.437157][ T10] usb 3-1: Manufacturer: syz [ 109.447254][ T10] usb 3-1: SerialNumber: syz [ 109.740057][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 109.821332][ T10] usb 3-1: USB disconnect, device number 3 [ 109.850181][ T10] usblp0: removed [ 110.671983][ T6066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.37'. [ 110.816771][ T6063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.37'. [ 112.272725][ T5915] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.409831][ T6082] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 112.421581][ T6082] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 112.458668][ T6087] netlink: 128 bytes leftover after parsing attributes in process `syz.4.43'. [ 112.552523][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 112.559847][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 112.571178][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 112.604249][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.648039][ T30] audit: type=1326 audit(1760488619.171:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 112.690549][ T30] audit: type=1326 audit(1760488619.171:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 112.737607][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.815361][ T30] audit: type=1326 audit(1760488619.171:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 112.942743][ T5915] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 112.953579][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.991819][ T5915] usb 1-1: Product: syz [ 113.043346][ T5915] usb 1-1: Manufacturer: syz [ 113.053490][ T30] audit: type=1326 audit(1760488619.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 113.082422][ T5915] usb 1-1: SerialNumber: syz [ 113.128553][ T5915] usb 1-1: config 0 descriptor?? [ 113.135714][ T30] audit: type=1326 audit(1760488619.171:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 113.145071][ T6081] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.171674][ T30] audit: type=1326 audit(1760488619.171:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 113.263615][ T30] audit: type=1326 audit(1760488619.181:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 113.272992][ T5915] port100 1-1:0.0: NFC: Could not get supported command types [ 113.406532][ T30] audit: type=1326 audit(1760488619.181:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 113.429682][ T30] audit: type=1326 audit(1760488619.181:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 113.455920][ T30] audit: type=1326 audit(1760488619.181:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed35f8eec9 code=0x7ffc0000 [ 113.606175][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.615803][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.531440][ T6111] netlink: 64 bytes leftover after parsing attributes in process `syz.2.51'. [ 114.549643][ T5915] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.624014][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.746064][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.789354][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.827591][ T5915] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 114.868160][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.879492][ T10] usb 4-1: config 0 interface 0 altsetting 40 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.893141][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.907014][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.915086][ T5915] usb 5-1: config 0 descriptor?? [ 114.938523][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c733, bcdDevice= 0.00 [ 115.009869][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.031495][ T10] usb 4-1: config 0 descriptor?? [ 115.262436][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.273867][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.291937][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.301896][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.320449][ T6108] geneve2: entered promiscuous mode [ 115.329652][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.341701][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.361920][ T10] usb 4-1: string descriptor 0 read error: -71 [ 115.376565][ T10] usb 4-1: USB disconnect, device number 4 [ 116.026816][ T5915] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71 [ 116.038291][ T5915] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 116.061788][ T10] usb 1-1: USB disconnect, device number 3 [ 116.111558][ T5915] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 116.145428][ T5915] usb 5-1: USB disconnect, device number 3 [ 116.238375][ T6125] process 'syz.0.56' launched './file0' with NULL argv: empty string added [ 116.631208][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 116.641740][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 116.684187][ T6145] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 116.703260][ T6145] bond1 (unregistering): Released all slaves [ 116.878959][ T5915] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.912336][ T6139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.049685][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 117.065101][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 117.078378][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 117.093353][ T5915] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 117.105215][ T5915] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 117.113944][ T5915] usb 2-1: Product: syz [ 117.120472][ T5915] usb 2-1: Manufacturer: syz [ 117.127492][ T5915] usb 2-1: SerialNumber: syz [ 117.151676][ T5915] usb 2-1: config 0 descriptor?? [ 117.297236][ T5915] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 117.438986][ T5957] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.458361][ T5915] usb 2-1: USB disconnect, device number 4 [ 117.483081][ T13] usb 2-1: Failed to submit usb control message: -71 [ 117.499196][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 117.519868][ T13] usb 2-1: unable to get target info from device [ 117.539606][ T13] usb 2-1: could not get target info (-71) [ 117.602106][ T13] usb 2-1: could not probe fw (-71) [ 117.623973][ T6160] vlan0: entered promiscuous mode [ 117.660282][ T5957] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.672620][ T5957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.701963][ T5957] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.731293][ T5957] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 117.740646][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.750102][ T5957] usb 4-1: Product: syz [ 117.754386][ T5957] usb 4-1: Manufacturer: syz [ 117.759626][ T5957] usb 4-1: SerialNumber: syz [ 117.834104][ T5957] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 117.853044][ T6164] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[6164] [ 117.916722][ T5957] cdc_ncm 4-1:1.0: bind() failure [ 117.989867][ T5957] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 118.038116][ T6164] netlink: 'syz.4.66': attribute type 6 has an invalid length. [ 118.419894][ T5957] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 119.581379][ T5957] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.603301][ T6183] netlink: 64 bytes leftover after parsing attributes in process `syz.1.75'. [ 119.740741][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 119.758091][ T5957] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 119.767506][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.783872][ T5957] usb 3-1: Product: syz [ 119.840389][ T5957] usb 3-1: Manufacturer: syz [ 119.848674][ T5957] usb 3-1: SerialNumber: syz [ 120.076996][ T5957] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 120.116866][ T5957] usb 3-1: USB disconnect, device number 4 [ 120.174903][ T5957] usblp0: removed [ 120.316430][ T5824] usb 4-1: USB disconnect, device number 5 [ 120.792191][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'. [ 120.832827][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 120.887577][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'. [ 121.219011][ T5957] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.442793][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 121.450257][ T5957] usb 1-1: config 6 has an invalid interface number: 227 but max is 0 [ 121.491703][ T5957] usb 1-1: config 6 has no interface number 0 [ 121.578379][ T5957] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 7.79 [ 121.578412][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.578434][ T5957] usb 1-1: Product: syz [ 121.578451][ T5957] usb 1-1: Manufacturer: syz [ 121.578468][ T5957] usb 1-1: SerialNumber: syz [ 121.588584][ T5957] kalmia 1-1:6.227: probe with driver kalmia failed with error -22 [ 121.912036][ T5915] usb 1-1: USB disconnect, device number 4 [ 121.995451][ T6239] netlink: 64 bytes leftover after parsing attributes in process `syz.3.96'. [ 122.638925][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.789268][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 122.800040][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.807410][ T10] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.03 [ 122.889014][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.919594][ T10] usb 2-1: config 0 descriptor?? [ 123.393723][ T6277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.107'. [ 123.490968][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.498450][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.518075][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.526655][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.538949][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.550712][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.580160][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.588173][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.627120][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.644985][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 123.656328][ T10] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 123.677220][ T10] hid-generic 0003:0DFC:0101.0002: collection stack underflow [ 123.684868][ T5923] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.718980][ T10] hid-generic 0003:0DFC:0101.0002: item 0 0 0 12 parsing failed [ 123.740980][ T10] hid-generic 0003:0DFC:0101.0002: probe with driver hid-generic failed with error -22 [ 123.793453][ T10] usb 2-1: USB disconnect, device number 5 [ 123.951554][ T6294] netlink: 128 bytes leftover after parsing attributes in process `syz.3.112'. [ 123.978250][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 123.978269][ T30] audit: type=1326 audit(1760488630.631:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.090323][ T30] audit: type=1326 audit(1760488630.631:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.112379][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.150090][ T30] audit: type=1326 audit(1760488630.631:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.173791][ T30] audit: type=1326 audit(1760488630.631:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.195725][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.233050][ T30] audit: type=1326 audit(1760488630.641:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.255417][ T30] audit: type=1326 audit(1760488630.641:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.277431][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.283839][ T30] audit: type=1326 audit(1760488630.641:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.306296][ T30] audit: type=1326 audit(1760488630.641:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.328396][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.335823][ T30] audit: type=1326 audit(1760488630.641:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.358662][ T30] audit: type=1326 audit(1760488630.651:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5b918eec9 code=0x7ffc0000 [ 124.461962][ T6300] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 124.502041][ T6300] macvtap1: entered promiscuous mode [ 124.547066][ T6300] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 125.019317][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.234002][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 125.266255][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 125.295096][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 125.315913][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 125.329847][ T10] usb 2-1: Product: syz [ 125.334082][ T10] usb 2-1: Manufacturer: syz [ 125.420727][ T10] usb 2-1: SerialNumber: syz [ 125.432670][ T10] usb 2-1: config 0 descriptor?? [ 125.440049][ T6304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.561993][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 125.568065][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 125.598941][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.606654][ T5957] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.739606][ T5957] usb 1-1: device descriptor read/64, error -71 [ 125.762414][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.777031][ T24] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 125.787281][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.799289][ T24] usb 4-1: Product: syz [ 125.803577][ T24] usb 4-1: Manufacturer: syz [ 125.808261][ T24] usb 4-1: SerialNumber: syz [ 125.825948][ T24] usb 4-1: config 0 descriptor?? [ 125.883340][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.979050][ T5957] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.127750][ T24] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 126.158947][ T5957] usb 1-1: device descriptor read/64, error -71 [ 126.242332][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.269381][ T5957] usb usb1-port1: attempt power cycle [ 126.623373][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.122'. [ 126.658232][ T5957] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.689222][ T10] raw-gadget.0 gadget.1: failed to queue suspend event [ 126.689692][ T5957] usb 1-1: device descriptor read/8, error -71 [ 126.743568][ T6304] raw-gadget.0 gadget.1: failed to queue disconnect event [ 126.856667][ T6327] netlink: 128 bytes leftover after parsing attributes in process `syz.2.124'. [ 126.960497][ T5957] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.990371][ T5957] usb 1-1: device descriptor read/8, error -71 [ 127.101202][ T5957] usb usb1-port1: unable to enumerate USB device [ 127.418594][ T6338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'. [ 127.589834][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.132'. [ 127.599299][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.132'. [ 127.614016][ T6344] ip6gretap0: entered promiscuous mode [ 127.621388][ T6344] syz_tun: entered promiscuous mode [ 127.758933][ T5957] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.918928][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 127.926312][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.936612][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 127.957138][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.967688][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 127.983445][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.994189][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 128.041860][ T6348] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 128.048593][ T6348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.057968][ T6348] vhci_hcd vhci_hcd.0: Device attached [ 128.071790][ T5957] usb 3-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 128.081081][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.091658][ T5957] usb 3-1: Product: syz [ 128.140643][ T6348] netdevsim netdevsim4: Direct firmware load for x failed with error -2 [ 128.150996][ T6348] netdevsim netdevsim4: Falling back to sysfs fallback for: x [ 128.175142][ T5957] usb 3-1: Manufacturer: syz [ 128.180110][ T5957] usb 3-1: SerialNumber: syz [ 128.202177][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 128.230571][ T5957] usb 3-1: config 0 descriptor?? [ 128.242850][ T5957] cdc_acm 3-1:0.0: Zero length descriptor references [ 128.250940][ T5957] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 128.309152][ T24] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 128.410727][ T5957] usb 4-1: USB disconnect, device number 6 [ 128.488070][ T6356] netlink: 128 bytes leftover after parsing attributes in process `syz.3.135'. [ 128.652121][ T5824] usb 3-1: USB disconnect, device number 5 [ 129.093942][ T6350] vhci_hcd: connection reset by peer [ 129.101835][ T3028] vhci_hcd: stop threads [ 129.106555][ T3028] vhci_hcd: release socket [ 129.111750][ T3028] vhci_hcd: disconnect device [ 129.955561][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.4.142'. [ 130.099603][ T10] usb 2-1: USB disconnect, device number 6 [ 130.125596][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 130.177338][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 130.243436][ T5824] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 134.378875][ C1] sched: DL replenish lagged too much [ 134.643769][ T24] vhci_hcd: vhci_device speed not set [ 137.235798][ T6381] ip6gretap0: entered promiscuous mode [ 139.116162][ T5824] usb 4-1: device descriptor read/all, error -110 [ 140.176882][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.198574][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.287915][ T6381] syz_tun: entered promiscuous mode [ 155.153839][ T5824] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 181.975022][ T6381] debugfs: 'hsr1' already exists in 'hsr' [ 193.391725][ T6381] Cannot create hsr debugfs directory [ 199.891643][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.916615][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 230.054066][ T5153] Bluetooth: hci2: command tx timeout [ 230.079366][ T5153] Bluetooth: hci3: command tx timeout [ 230.084861][ T5153] Bluetooth: hci0: command tx timeout [ 230.533781][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 230.560522][ T5153] Bluetooth: hci4: command 0x0406 tx timeout [ 261.296456][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.622646][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.491323][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.191160][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 355.648799][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 355.655817][ C0] rcu: (detected by 0, t=10502 jiffies, g=14601, q=967547 ncpus=2) [ 355.663808][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 8957 (4294972660-4294963703), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 355.677127][ C0] rcu: rcu_preempt kthread starved for 8958 jiffies! g14601 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 355.688267][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 355.698352][ C0] rcu: RCU grace-period kthread stack dump: [ 355.704263][ C0] task:rcu_preempt state:R running task stack:26856 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 355.717818][ C0] Call Trace: [ 355.721113][ C0] [ 355.724079][ C0] __schedule+0x1798/0x4cc0 [ 355.728673][ C0] ? __lock_acquire+0xab9/0xd20 [ 355.733605][ C0] ? __pfx___schedule+0x10/0x10 [ 355.738506][ C0] ? schedule+0x91/0x360 [ 355.742778][ C0] schedule+0x165/0x360 [ 355.746980][ C0] schedule_timeout+0x12b/0x270 [ 355.751873][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 355.757280][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 355.763201][ C0] ? __pfx_process_timeout+0x10/0x10 [ 355.768536][ C0] ? prepare_to_swait_event+0x341/0x380 [ 355.774123][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 355.779028][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 355.785225][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 355.790547][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 355.795805][ C0] rcu_gp_kthread+0x99/0x390 [ 355.800439][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.805677][ C0] ? __kthread_parkme+0x7b/0x200 [ 355.810666][ C0] ? __kthread_parkme+0x1a1/0x200 [ 355.815749][ C0] kthread+0x711/0x8a0 [ 355.819863][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.825104][ C0] ? __pfx_kthread+0x10/0x10 [ 355.829750][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.834994][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.840218][ C0] ? __pfx_kthread+0x10/0x10 [ 355.844844][ C0] ret_from_fork+0x4bc/0x870 [ 355.849477][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 355.854643][ C0] ? __switch_to_asm+0x39/0x70 [ 355.859443][ C0] ? __switch_to_asm+0x33/0x70 [ 355.864333][ C0] ? __pfx_kthread+0x10/0x10 [ 355.868954][ C0] ret_from_fork_asm+0x1a/0x30 [ 355.873773][ C0] [ 355.876817][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 355.883215][ C0] Sending NMI from CPU 0 to CPUs 1: [ 355.888476][ C1] NMI backtrace for cpu 1 [ 355.888508][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 355.888527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.888541][ C1] RIP: 0010:kasan_check_range+0x1d6/0x2c0 [ 355.888569][ C1] Code: 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c <41> 5d 41 5e 41 5f 5d e9 3e 17 29 09 cc 45 84 ff 75 63 41 f7 c7 00 [ 355.888583][ C1] RSP: 0018:ffffc90000a075d0 EFLAGS: 00000256 [ 355.888599][ C1] RAX: 1ffff92000140e01 RBX: 0000000000000010 RCX: ffffffff8173d918 [ 355.888612][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000a07738 [ 355.888623][ C1] RBP: 0000000000000000 R08: ffffc90000a07747 R09: 1ffff92000140ee8 [ 355.888634][ C1] R10: dffffc0000000000 R11: fffff52000140ee9 R12: ffffc90000a08900 [ 355.888647][ C1] R13: ffffc90000a07738 R14: fffff52000140ee9 R15: 1ffff92000140ee7 [ 355.888660][ C1] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 355.888673][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.888684][ C1] CR2: 0000555558e675c8 CR3: 00000000779a8000 CR4: 00000000003526f0 [ 355.888734][ C1] Call Trace: [ 355.888760][ C1] [ 355.888769][ C1] __asan_memset+0x22/0x50 [ 355.888788][ C1] unwind_next_frame+0xc98/0x2390 [ 355.888819][ C1] ? unwind_next_frame+0xa5/0x2390 [ 355.888845][ C1] ? NF_HOOK+0x206/0x3a0 [ 355.888874][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 355.888893][ C1] arch_stack_walk+0x11c/0x150 [ 355.888924][ C1] ? NF_HOOK+0x30c/0x3a0 [ 355.888951][ C1] stack_trace_save+0x9c/0xe0 [ 355.888969][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 355.888989][ C1] ? unwind_next_frame+0xa5/0x2390 [ 355.889016][ C1] ? common_startup_64+0x13e/0x147 [ 355.889035][ C1] kasan_save_track+0x3e/0x80 [ 355.889052][ C1] ? kasan_save_track+0x3e/0x80 [ 355.889070][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 355.889089][ C1] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 355.889107][ C1] ? ref_tracker_alloc+0x133/0x460 [ 355.889125][ C1] ? dst_init+0xd9/0x450 [ 355.889141][ C1] ? dst_alloc+0x12a/0x170 [ 355.889157][ C1] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 355.889178][ C1] ? ip_route_output_key_hash+0x174/0x280 [ 355.889197][ C1] ? ip_route_output_flow+0x2a/0x150 [ 355.889214][ C1] ? ip_route_me_harder+0x6c4/0xf10 [ 355.889236][ C1] ? synproxy_send_tcp+0x3a7/0x700 [ 355.889262][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 355.889288][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 355.889307][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 355.889325][ C1] ? nft_do_chain+0x40c/0x1920 [ 355.889342][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 355.889360][ C1] ? nf_hook_slow+0xc5/0x220 [ 355.889384][ C1] ? NF_HOOK+0x206/0x3a0 [ 355.889431][ C1] __kasan_kmalloc+0x93/0xb0 [ 355.889453][ C1] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 355.889471][ C1] ? default_idle_call+0x73/0xb0 [ 355.889492][ C1] ? do_idle+0x1e7/0x510 [ 355.889515][ C1] ? ref_tracker_alloc+0x133/0x460 [ 355.889532][ C1] ? start_secondary+0x101/0x110 [ 355.889552][ C1] ? common_startup_64+0x13e/0x147 [ 355.889572][ C1] ref_tracker_alloc+0x133/0x460 [ 355.889591][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 355.889622][ C1] dst_init+0xd9/0x450 [ 355.889641][ C1] dst_alloc+0x12a/0x170 [ 355.889661][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 355.889687][ C1] ? ip_route_output_key_hash+0xc1/0x280 [ 355.889715][ C1] ip_route_output_key_hash+0x174/0x280 [ 355.889736][ C1] ? __lock_acquire+0xab9/0xd20 [ 355.889759][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 355.889790][ C1] ip_route_output_flow+0x2a/0x150 [ 355.889807][ C1] ? ip_route_me_harder+0x6ae/0xf10 [ 355.889832][ C1] ip_route_me_harder+0x6c4/0xf10 [ 355.889861][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 355.889894][ C1] ? rcu_is_watching+0x15/0xb0 [ 355.889919][ C1] ? siphash_2u64+0x25/0x2a0 [ 355.889941][ C1] synproxy_send_tcp+0x3a7/0x700 [ 355.889975][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 355.890010][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 355.890037][ C1] ? nft_socket_cgroup_subtree_level+0x58/0x340 [ 355.890057][ C1] ? synproxy_pernet+0x45/0x270 [ 355.890079][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 355.890103][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 355.890125][ C1] ? nf_ip_checksum+0x13c/0x510 [ 355.890146][ C1] nft_synproxy_do_eval+0x345/0x570 [ 355.890170][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 355.890190][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 355.890225][ C1] nft_do_chain+0x40c/0x1920 [ 355.890252][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 355.890288][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 355.890310][ C1] nft_do_chain_inet+0x25d/0x340 [ 355.890328][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 355.890348][ C1] ? ipt_do_table+0x2a3/0x1640 [ 355.890365][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 355.890392][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 355.890412][ C1] nf_hook_slow+0xc5/0x220 [ 355.890441][ C1] NF_HOOK+0x206/0x3a0 [ 355.890468][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 355.890494][ C1] ? NF_HOOK+0x9a/0x3a0 [ 355.890519][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 355.890543][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 355.890571][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 355.890599][ C1] ? skb_dst+0x4f/0xd0 [ 355.890625][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 355.890653][ C1] NF_HOOK+0x30c/0x3a0 [ 355.890679][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 355.890704][ C1] ? NF_HOOK+0x9a/0x3a0 [ 355.890748][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 355.890772][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 355.890798][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 355.890828][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 355.890852][ C1] __netif_receive_skb+0x143/0x380 [ 355.890875][ C1] ? process_backlog+0x2d5/0x14f0 [ 355.890899][ C1] process_backlog+0x60e/0x14f0 [ 355.890930][ C1] ? __pfx_process_backlog+0x10/0x10 [ 355.890959][ C1] __napi_poll+0xc7/0x360 [ 355.890979][ C1] ? skb_defer_free_flush+0x229/0x250 [ 355.891001][ C1] net_rx_action+0x5f7/0xdf0 [ 355.891023][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.891039][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 355.891071][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 355.891113][ C1] handle_softirqs+0x286/0x870 [ 355.891139][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 355.891165][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 355.891191][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 355.891210][ C1] __irq_exit_rcu+0xca/0x1f0 [ 355.891233][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 355.891261][ C1] irq_exit_rcu+0x9/0x30 [ 355.891283][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 355.891310][ C1] [ 355.891316][ C1] [ 355.891322][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.891341][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 355.891357][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 355.891370][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 355.891384][ C1] RAX: 8d379e136b725d00 RBX: ffffffff8196bc07 RCX: 8d379e136b725d00 [ 355.891397][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e8390 RDI: ffffffff8bc076e0 [ 355.891409][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 355.891421][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e1170 [ 355.891434][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100385ab58 [ 355.891447][ C1] ? do_idle+0x1e7/0x510 [ 355.891477][ C1] default_idle+0x13/0x20 [ 355.891495][ C1] default_idle_call+0x73/0xb0 [ 355.891515][ C1] do_idle+0x1e7/0x510 [ 355.891541][ C1] ? __pfx_do_idle+0x10/0x10 [ 355.891564][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 355.891594][ C1] ? complete+0xb1/0x1b0 [ 355.891621][ C1] cpu_startup_entry+0x44/0x60 [ 355.891645][ C1] start_secondary+0x101/0x110 [ 355.891665][ C1] common_startup_64+0x13e/0x147 [ 355.891691][ C1]