last executing test programs: 15.077417503s ago: executing program 2 (id=295): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = io_uring_setup(0x58e1, &(0x7f0000000440)={0x0, 0x61d6, 0x2000, 0x1, 0x258}) r4 = socket$inet6(0xa, 0x3, 0xff) write$binfmt_aout(r4, 0x0, 0xfdef) syz_io_uring_setup(0x487, &(0x7f0000000380)={0x0, 0x8009010, 0x100, 0x4, 0x165, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000080)) 12.749045333s ago: executing program 2 (id=297): socket$inet6(0xa, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x7, 0x0, 0xfffffffe, 0x3fffe, 0xfffffffd, 0xfefffffc}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 12.110415905s ago: executing program 2 (id=298): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r2, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) 12.04563776s ago: executing program 3 (id=300): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) lseek(0xffffffffffffffff, 0x851, 0x0) 11.103356377s ago: executing program 0 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xcfe8, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x110, @tick=0x1, 0x78, {0x4, 0x1}, 0x3a, 0x0, 0x2}) 10.554254501s ago: executing program 2 (id=303): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r5 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 10.017026995s ago: executing program 3 (id=304): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd448d1e7cbdaf3657d0f34e790c85bdba7931791f6d13318815e115000000000000000242f5b01bc4834608a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "2063569a"}}) 9.520683825s ago: executing program 0 (id=305): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = io_uring_setup(0x58e1, &(0x7f0000000440)={0x0, 0x61d6, 0x2000, 0x1, 0x258}) r4 = socket$inet6(0xa, 0x3, 0xff) write$binfmt_aout(r4, 0x0, 0xfdef) syz_io_uring_setup(0x487, &(0x7f0000000380)={0x0, 0x8009010, 0x100, 0x4, 0x165, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000080)) 8.561215824s ago: executing program 3 (id=306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff90b, 0x7, 0x2, 0x0, 0xfffffff7, 0x1, 0x8, 0x1, 0x80000000}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.560207144s ago: executing program 2 (id=307): socket$inet6(0xa, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x7, 0x0, 0xfffffffe, 0x3fffe, 0xfffffffd, 0xfefffffc}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 8.2379625s ago: executing program 1 (id=308): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800002, 0x10, 0xffffffffffffffff, 0x61083000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd(0x1a52) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0xe2, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0xb, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x200, 0x0, 0x5, 0x1, 0x1, 0x2}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r5}, 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) open_tree(0xffffffffffffffff, 0x0, 0x89901) r6 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r6, 0x8001af71, &(0x7f0000000180)) sendfile(r4, r4, 0x0, 0x200000) 8.087272402s ago: executing program 3 (id=309): setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ppoll(&(0x7f0000000000)=[{r6, 0xa}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) 6.041097919s ago: executing program 0 (id=310): write(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x420001, 0x187) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 5.558924908s ago: executing program 1 (id=311): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r2, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) 4.418196421s ago: executing program 0 (id=312): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d000400"], 0x4c}}, 0x0) sendto$packet(r1, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4.417566511s ago: executing program 1 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xcfe8, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x110, @tick=0x1, 0x78, {0x4, 0x1}, 0x3a, 0x0, 0x2}) 3.460799359s ago: executing program 0 (id=314): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x58e1, &(0x7f0000000440)={0x0, 0x61d6, 0x2000, 0x1, 0x258}) r3 = socket$inet6(0xa, 0x3, 0xff) write$binfmt_aout(r3, 0x0, 0xfdef) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r4) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000080)) socket(0x200000000000011, 0x2, 0x1) 3.418838942s ago: executing program 1 (id=315): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd448d1e7cbdaf3657d0f34e790c85bdba7931791f6d13318815e115000000000000000242f5b01bc4834608a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "2063569a"}}) 3.333286439s ago: executing program 2 (id=316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = io_uring_setup(0x58e1, &(0x7f0000000440)={0x0, 0x61d6, 0x2000, 0x1, 0x258}) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c) syz_io_uring_setup(0x487, &(0x7f0000000380)={0x0, 0x8009010, 0x100, 0x4, 0x165, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000080)) socket(0x200000000000011, 0x2, 0x1) 3.31840265s ago: executing program 3 (id=317): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, r2}) 2.176432473s ago: executing program 1 (id=318): socket$kcm(0x10, 0x2, 0x0) fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x807ffd, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x10001, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0xf6e0, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce4, 0x1ff, 0xffff, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x2, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8a75e69ef6d55a55, '\x00', 0x0, @flow_dissector=0x7c9ad37a5afa30db, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500003000000000000102"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mlockall(0x7) 848.877811ms ago: executing program 1 (id=319): socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, r1}) 129.10945ms ago: executing program 3 (id=320): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x60, 0x0) 0s ago: executing program 0 (id=321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 64.762886][ T5778] cgroup: Unknown subsys name 'net' [ 64.923428][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.251715][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.290349][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.314732][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.322370][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.334074][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.344956][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.345973][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.353635][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.367157][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.374856][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.383726][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.384245][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.390986][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.408011][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.413195][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.415460][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.424153][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.430035][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.443288][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.450866][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.452159][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.466083][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.477873][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.485459][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.492576][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.871839][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 68.925144][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 69.084093][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.092676][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.100726][ T5788] bridge_slave_0: entered allmulticast mode [ 69.108930][ T5788] bridge_slave_0: entered promiscuous mode [ 69.120816][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.128032][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.135159][ T5788] bridge_slave_1: entered allmulticast mode [ 69.142681][ T5788] bridge_slave_1: entered promiscuous mode [ 69.170065][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 69.201901][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.223105][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 69.242064][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.259981][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.267699][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.275091][ T5794] bridge_slave_0: entered allmulticast mode [ 69.282009][ T5794] bridge_slave_0: entered promiscuous mode [ 69.294449][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.302111][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.309484][ T5794] bridge_slave_1: entered allmulticast mode [ 69.316190][ T5794] bridge_slave_1: entered promiscuous mode [ 69.368367][ T5788] team0: Port device team_slave_0 added [ 69.406070][ T5788] team0: Port device team_slave_1 added [ 69.419820][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.431945][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.523144][ T5794] team0: Port device team_slave_0 added [ 69.531539][ T5794] team0: Port device team_slave_1 added [ 69.538852][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.545960][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.553383][ T5793] bridge_slave_0: entered allmulticast mode [ 69.560568][ T5793] bridge_slave_0: entered promiscuous mode [ 69.568856][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.575948][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.583384][ T5793] bridge_slave_1: entered allmulticast mode [ 69.590938][ T5793] bridge_slave_1: entered promiscuous mode [ 69.598182][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.605133][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.632288][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.685025][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.693013][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.719238][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.735900][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.743602][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.750916][ T5789] bridge_slave_0: entered allmulticast mode [ 69.758209][ T5789] bridge_slave_0: entered promiscuous mode [ 69.765435][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.772529][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.798502][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.824454][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.831996][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.839303][ T5789] bridge_slave_1: entered allmulticast mode [ 69.845966][ T5789] bridge_slave_1: entered promiscuous mode [ 69.853000][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.860299][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.886312][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.913529][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.953075][ T5788] hsr_slave_0: entered promiscuous mode [ 69.959415][ T5788] hsr_slave_1: entered promiscuous mode [ 69.969533][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.002314][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.035432][ T5794] hsr_slave_0: entered promiscuous mode [ 70.042918][ T5794] hsr_slave_1: entered promiscuous mode [ 70.050342][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.059223][ T5794] Cannot create hsr debugfs directory [ 70.074769][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.107201][ T5793] team0: Port device team_slave_0 added [ 70.131759][ T5789] team0: Port device team_slave_0 added [ 70.140429][ T5789] team0: Port device team_slave_1 added [ 70.147718][ T5793] team0: Port device team_slave_1 added [ 70.239762][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.246744][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.273202][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.301601][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.308747][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.335315][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.347286][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.354261][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.380331][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.411321][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.418488][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.444509][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.515749][ T5789] hsr_slave_0: entered promiscuous mode [ 70.522584][ T5789] hsr_slave_1: entered promiscuous mode [ 70.527855][ T5796] Bluetooth: hci2: command tx timeout [ 70.528465][ T5791] Bluetooth: hci3: command tx timeout [ 70.533817][ T5796] Bluetooth: hci1: command tx timeout [ 70.539525][ T5803] Bluetooth: hci0: command tx timeout [ 70.551288][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.559919][ T5789] Cannot create hsr debugfs directory [ 70.591807][ T5793] hsr_slave_0: entered promiscuous mode [ 70.598204][ T5793] hsr_slave_1: entered promiscuous mode [ 70.604471][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.612197][ T5793] Cannot create hsr debugfs directory [ 70.880439][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.899812][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.914523][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.937466][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.974851][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.000255][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.023314][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.034557][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.080317][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.111772][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.134671][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.171255][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.189937][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.210022][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.220420][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.239377][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.288233][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.376083][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.390907][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.414650][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.422029][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.449792][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.457015][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.485561][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.523546][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.530732][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.540989][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.548134][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.570221][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.586139][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.593813][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.633402][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.693659][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.710723][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.729150][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.736276][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.752267][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.773981][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.781109][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.823340][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.830532][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.842835][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.850053][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.981593][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.170537][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.291313][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.309568][ T5794] veth0_vlan: entered promiscuous mode [ 72.360013][ T5794] veth1_vlan: entered promiscuous mode [ 72.396679][ T5788] veth0_vlan: entered promiscuous mode [ 72.435834][ T5788] veth1_vlan: entered promiscuous mode [ 72.461369][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.493239][ T5794] veth0_macvtap: entered promiscuous mode [ 72.505179][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.519848][ T5794] veth1_macvtap: entered promiscuous mode [ 72.553859][ T5788] veth0_macvtap: entered promiscuous mode [ 72.563120][ T5788] veth1_macvtap: entered promiscuous mode [ 72.598630][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.607546][ T5796] Bluetooth: hci1: command tx timeout [ 72.607794][ T5804] Bluetooth: hci0: command tx timeout [ 72.612954][ T5796] Bluetooth: hci2: command tx timeout [ 72.624012][ T5791] Bluetooth: hci3: command tx timeout [ 72.635053][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.642943][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.656099][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.669282][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.701630][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.713054][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.724944][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.746092][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.755072][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.764444][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.780381][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.801299][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.810340][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.819175][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.828368][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.856423][ T5789] veth0_vlan: entered promiscuous mode [ 72.873797][ T5793] veth0_vlan: entered promiscuous mode [ 72.883334][ T5789] veth1_vlan: entered promiscuous mode [ 72.945438][ T5793] veth1_vlan: entered promiscuous mode [ 73.024286][ T5789] veth0_macvtap: entered promiscuous mode [ 73.036757][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.045914][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.069354][ T5789] veth1_macvtap: entered promiscuous mode [ 73.087147][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.096582][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.136186][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.142757][ T5793] veth0_macvtap: entered promiscuous mode [ 73.147591][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.188301][ T5793] veth1_macvtap: entered promiscuous mode [ 73.202232][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.220120][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.231219][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.242215][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.253777][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.279393][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.290822][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.301792][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.312833][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.326666][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.340509][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.352490][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.358708][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.375362][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.386339][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.396695][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.396902][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.407931][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.441550][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.478979][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.492886][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.504044][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.516094][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.531272][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.543148][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.620882][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.663478][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.703960][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.738800][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.778063][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.960963][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.005105][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.059611][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.097542][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.299810][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.329349][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.410891][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.419147][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.674715][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.689491][ T5791] Bluetooth: hci2: command tx timeout [ 74.689528][ T5796] Bluetooth: hci0: command tx timeout [ 74.694924][ T5803] Bluetooth: hci1: command tx timeout [ 74.700872][ T5796] Bluetooth: hci3: command tx timeout [ 74.718210][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.767926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.814824][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.843480][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.125802][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.254632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.334841][ T5888] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.357068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 75.459337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.561710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.664160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.664228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.766510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.868858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.971791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.287597][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 76.323486][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.337453][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.348043][ T5888] usb 4-1: Product: syz [ 76.352316][ T5888] usb 4-1: Manufacturer: syz [ 76.358184][ T5888] usb 4-1: SerialNumber: syz [ 76.961956][ T5803] Bluetooth: hci3: command tx timeout [ 76.967500][ T5804] Bluetooth: hci1: command tx timeout [ 76.973512][ T5791] Bluetooth: hci0: command tx timeout [ 76.973578][ T5796] Bluetooth: hci2: command tx timeout [ 77.008562][ T5888] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 78.639666][ T9] usb 4-1: USB disconnect, device number 2 [ 78.707447][ T9] usblp0: removed [ 79.883688][ T5949] wg2: entered allmulticast mode [ 79.928691][ T5949] capability: warning: `syz.1.22' uses 32-bit capabilities (legacy support in use) [ 81.396886][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.134996][ T34] cfg80211: failed to load regulatory.db [ 82.382835][ T5974] dvmrp8: entered allmulticast mode [ 82.932257][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 82.950815][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 83.043528][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.053022][ T8] usb 2-1: Product: syz [ 83.057477][ T8] usb 2-1: Manufacturer: syz [ 83.063310][ T8] usb 2-1: SerialNumber: syz [ 83.286564][ T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 83.287221][ T5532] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.498128][ T5532] usb 4-1: Using ep0 maxpacket: 8 [ 83.596217][ T5990] wg2: entered allmulticast mode [ 84.523250][ T5532] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 84.950155][ T5532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.958277][ T5532] usb 4-1: Product: syz [ 84.962450][ T5532] usb 4-1: Manufacturer: syz [ 84.967087][ T5532] usb 4-1: SerialNumber: syz [ 85.065149][ T9] usb 2-1: USB disconnect, device number 2 [ 85.437070][ T5532] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 85.486365][ T9] usblp0: removed [ 87.931694][ T9] usb 4-1: USB disconnect, device number 3 [ 87.940120][ T9] usblp1: removed [ 90.396248][ T6034] wg2: entered allmulticast mode [ 92.297028][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.370265][ T6050] dvmrp8: entered allmulticast mode [ 92.496993][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 92.608793][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 94.477248][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.506882][ T8] usb 4-1: Product: syz [ 94.526963][ T8] usb 4-1: Manufacturer: syz [ 94.537056][ T8] usb 4-1: SerialNumber: syz [ 94.784967][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 96.916664][ T9] usb 4-1: USB disconnect, device number 4 [ 96.938741][ T9] usblp0: removed [ 102.077117][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.369394][ T9] usb 2-1: config 0 has no interfaces? [ 102.375990][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 102.388362][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 102.411019][ T9] usb 2-1: Manufacturer: syz [ 102.428703][ T9] usb 2-1: config 0 descriptor?? [ 104.945076][ T787] usb 2-1: USB disconnect, device number 3 [ 108.966998][ T5854] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.610999][ T6195] fuse: Bad value for 'fd' [ 109.739348][ T5854] usb 1-1: config 0 has no interfaces? [ 109.757469][ T5854] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 109.767749][ T5854] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 109.775841][ T5854] usb 1-1: Manufacturer: syz [ 109.789085][ T5854] usb 1-1: config 0 descriptor?? [ 109.897120][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.147003][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 111.062270][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 111.071587][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.082574][ T787] usb 3-1: Product: syz [ 111.088616][ T787] usb 3-1: Manufacturer: syz [ 111.093530][ T787] usb 3-1: SerialNumber: syz [ 111.483306][ T787] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.607430][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 111.919738][ T6223] tipc: Enabling of bearer rejected, failed to enable media [ 112.264604][ T9] usb 1-1: USB disconnect, device number 2 [ 112.463334][ T6235] fuse: Bad value for 'fd' [ 113.382206][ T5532] usb 3-1: USB disconnect, device number 2 [ 113.426431][ T5532] usblp0: removed [ 113.830863][ T6254] process 'syz.2.109' launched './file0' with NULL argv: empty string added [ 114.085063][ T6242] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 114.091808][ T6242] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.100064][ T6242] vhci_hcd vhci_hcd.0: Device attached [ 114.318006][ T5532] vhci_hcd: vhci_device speed not set [ 114.387016][ T5532] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 114.650760][ T6255] vhci_hcd: connection reset by peer [ 114.658241][ T2972] vhci_hcd: stop threads [ 114.666003][ T2972] vhci_hcd: release socket [ 114.693823][ T2972] vhci_hcd: disconnect device [ 116.466479][ T6269] fuse: Bad value for 'fd' [ 116.471105][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.679013][ T5881] usb 3-1: config 0 has no interfaces? [ 116.686114][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.698408][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 116.726934][ T5881] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.745384][ T5881] usb 3-1: Manufacturer: syz [ 116.753336][ T5881] usb 3-1: config 0 descriptor?? [ 118.047319][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.326936][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 118.340518][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.353405][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.403541][ T8] usb 4-1: Product: syz [ 118.415161][ T8] usb 4-1: Manufacturer: syz [ 118.421625][ T9] usb 3-1: USB disconnect, device number 3 [ 118.429835][ T8] usb 4-1: SerialNumber: syz [ 119.011045][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.919653][ T5532] vhci_hcd: vhci_device speed not set [ 122.361259][ T5532] usb 4-1: USB disconnect, device number 5 [ 122.376562][ T5532] usblp0: removed [ 122.766914][ T5881] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.551375][ T5881] usb 1-1: config 0 has no interfaces? [ 123.571055][ T5881] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.592471][ T5881] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.619677][ T5881] usb 1-1: Manufacturer: syz [ 123.626331][ T5881] usb 1-1: config 0 descriptor?? [ 126.647672][ T6358] wg2: entered allmulticast mode [ 126.716897][ T5881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.747237][ T5796] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 126.755988][ T5796] Bluetooth: hci2: Injecting HCI hardware error event [ 126.764809][ T6244] usb 1-1: USB disconnect, device number 3 [ 126.764932][ T5804] Bluetooth: hci2: hardware error 0x00 [ 126.936941][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 127.044044][ T5881] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.054327][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.115929][ T5881] usb 3-1: Product: syz [ 127.122122][ T5881] usb 3-1: Manufacturer: syz [ 127.133477][ T5881] usb 3-1: SerialNumber: syz [ 129.796975][ T5804] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 129.804358][ T5881] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 129.845287][ T5881] usb 3-1: USB disconnect, device number 4 [ 129.861812][ T5881] usblp0: removed [ 129.889715][ T6375] netlink: 44 bytes leftover after parsing attributes in process `syz.3.143'. [ 132.733519][ T6402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.152'. [ 132.747436][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.937260][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 133.344427][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.352289][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.370417][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 133.387575][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.395802][ T8] usb 3-1: Product: syz [ 133.410510][ T8] usb 3-1: Manufacturer: syz [ 133.473798][ T8] usb 3-1: SerialNumber: syz [ 133.962973][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 136.441141][ T5880] usb 3-1: USB disconnect, device number 5 [ 136.758879][ T5880] usblp0: removed [ 137.208397][ T6446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.161'. [ 137.801233][ T5881] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.759540][ T5881] usb 3-1: config 0 has no interfaces? [ 139.537444][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 139.567078][ T5881] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 139.575311][ T5881] usb 3-1: Manufacturer: syz [ 139.601099][ T5881] usb 3-1: config 0 descriptor?? [ 140.151402][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 141.148458][ T6477] tipc: Enabling of bearer rejected, failed to enable media [ 141.172661][ T6479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.173'. [ 142.745493][ T5881] usb 3-1: USB disconnect, device number 6 [ 142.915051][ T6507] dvmrp8: entered allmulticast mode [ 144.079812][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 144.934533][ T6529] tipc: Enabling of bearer rejected, failed to enable media [ 148.309397][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.518740][ T8] usb 4-1: config 0 has no interfaces? [ 148.539753][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 148.622439][ T8] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 148.651947][ T8] usb 4-1: Manufacturer: syz [ 148.660774][ T8] usb 4-1: config 0 descriptor?? [ 150.870978][ T787] usb 4-1: USB disconnect, device number 6 [ 154.386951][ T5880] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.576941][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 154.641480][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.687462][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.038954][ T5880] usb 3-1: Product: syz [ 155.043278][ T5880] usb 3-1: Manufacturer: syz [ 155.048410][ T5880] usb 3-1: SerialNumber: syz [ 155.147171][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.376040][ T5880] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 155.470109][ T5881] usb 2-1: config 0 has no interfaces? [ 155.477581][ T5881] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 155.490784][ T5881] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 155.499727][ T5881] usb 2-1: Manufacturer: syz [ 155.537254][ T5881] usb 2-1: config 0 descriptor?? [ 157.903067][ T787] usb 3-1: USB disconnect, device number 7 [ 157.926503][ T5839] usb 2-1: USB disconnect, device number 4 [ 157.940980][ T9] usblp0: removed [ 160.044140][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 162.506885][ T5839] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.706845][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 162.765512][ T5839] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 162.777171][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.795089][ T5839] usb 3-1: Product: syz [ 162.805292][ T5839] usb 3-1: Manufacturer: syz [ 162.824811][ T5839] usb 3-1: SerialNumber: syz [ 162.884713][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 163.064320][ T5839] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.188237][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 166.245042][ T5839] usb 3-1: USB disconnect, device number 8 [ 166.347378][ T8] usblp0: removed [ 167.919387][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 169.526975][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.000957][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 170.205591][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.349967][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.396811][ T8] usb 4-1: Product: syz [ 170.401398][ T8] usb 4-1: Manufacturer: syz [ 170.408890][ T8] usb 4-1: SerialNumber: syz [ 170.640803][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 171.791135][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 172.607413][ T5880] usb 4-1: USB disconnect, device number 7 [ 172.687065][ T5881] usblp0: removed [ 176.886022][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 177.886999][ T5839] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 178.766942][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 179.572652][ T5839] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 179.582191][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.590808][ T5839] usb 3-1: Product: syz [ 179.594997][ T5839] usb 3-1: Manufacturer: syz [ 179.600225][ T5839] usb 3-1: SerialNumber: syz [ 180.081063][ T5839] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.782959][ T8] usb 3-1: USB disconnect, device number 9 [ 181.792388][ T8] usblp0: removed [ 182.719510][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 186.028569][ T6929] syzkaller0: entered promiscuous mode [ 186.034139][ T6929] syzkaller0: entered allmulticast mode [ 186.777161][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 187.058013][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 187.113310][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.803407][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.844659][ T8] usb 2-1: Product: syz [ 187.852241][ T8] usb 2-1: Manufacturer: syz [ 187.859470][ T8] usb 2-1: SerialNumber: syz [ 189.099210][ T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 191.350159][ T23] usb 2-1: USB disconnect, device number 5 [ 191.407976][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 191.414937][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 191.749891][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 191.817834][ T23] usblp0: removed [ 193.626171][ T6982] syzkaller0: entered promiscuous mode [ 193.644785][ T6982] syzkaller0: entered allmulticast mode [ 195.767604][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.791371][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.704347][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 255.892912][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.386836][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.395918][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.456815][ C0] ------------[ cut here ]------------ [ 322.463069][ C0] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 322.473340][ C0] Modules linked in: [ 322.477235][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.100-syzkaller #0 [ 322.484936][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.494977][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 322.501298][ C0] Code: ff ff ff 48 c7 c7 a0 c4 ee 96 be 04 00 00 00 e8 2a a8 6c 00 48 89 df b8 01 00 00 00 87 05 5c 8f 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 54 d3 8c 74 47 48 c7 c0 5c b2 4a 8e 48 c1 e8 03 [ 322.520887][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 322.526937][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35400 RCX: ffffffff81703536 [ 322.534887][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35400 [ 322.542926][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 322.550876][ C0] R10: dffffc0000000000 R11: fffffbfff2ddd894 R12: 0000000000002904 [ 322.558856][ C0] R13: 1ffff110171c7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 322.566811][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 322.575721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.582281][ C0] CR2: 00007fef619872b4 CR3: 0000000023f8b000 CR4: 00000000003506f0 [ 322.590237][ C0] Call Trace: [ 322.593499][ C0] [ 322.596336][ C0] rcu_core+0x612/0x1720 [ 322.600563][ C0] ? lock_chain_count+0x20/0x20 [ 322.605393][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 322.610754][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.615936][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 322.621121][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 322.626297][ C0] ? __run_timers+0x781/0x7d0 [ 322.630953][ C0] ? __run_timers+0x74e/0x7d0 [ 322.635615][ C0] ? detach_timer+0x2b0/0x2b0 [ 322.640274][ C0] ? detach_timer+0x2b0/0x2b0 [ 322.644931][ C0] ? lock_chain_count+0x20/0x20 [ 322.649768][ C0] handle_softirqs+0x280/0x820 [ 322.654517][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 322.659264][ C0] ? do_softirq+0x180/0x180 [ 322.663770][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 322.668953][ C0] __irq_exit_rcu+0xc7/0x190 [ 322.673526][ C0] ? irq_exit_rcu+0x20/0x20 [ 322.678012][ C0] irq_exit_rcu+0x9/0x20 [ 322.682232][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 322.687850][ C0] [ 322.690766][ C0] [ 322.693680][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.699651][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 322.705356][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 322.724946][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 322.730995][ C0] RAX: d1a67707fe81e000 RBX: ffffffff81619a5b RCX: d1a67707fe81e000 [ 322.738948][ C0] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6700 [ 322.746898][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 322.754850][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a7da8 [ 322.762806][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 322.770763][ C0] ? do_idle+0x1eb/0x510 [ 322.774997][ C0] default_idle+0x13/0x20 [ 322.779312][ C0] default_idle_call+0x6c/0xa0 [ 322.784063][ C0] do_idle+0x1eb/0x510 [ 322.788114][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 322.793293][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 322.799441][ C0] cpu_startup_entry+0x43/0x60 [ 322.804207][ C0] rest_init+0x2e2/0x300 [ 322.808434][ C0] ? time_init+0x40/0x40 [ 322.812660][ C0] arch_call_rest_init+0xe/0x10 [ 322.817503][ C0] start_kernel+0x459/0x4e0 [ 322.822019][ C0] x86_64_start_reservations+0x2a/0x30 [ 322.827459][ C0] x86_64_start_kernel+0x60/0x60 [ 322.832823][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 322.838908][ C0] [ 322.841919][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.849178][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.100-syzkaller #0 [ 322.856870][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.866902][ C0] Call Trace: [ 322.870164][ C0] [ 322.872988][ C0] dump_stack_lvl+0x16c/0x230 [ 322.877646][ C0] ? show_regs_print_info+0x20/0x20 [ 322.882839][ C0] ? load_image+0x3b0/0x3b0 [ 322.887328][ C0] panic+0x2c0/0x710 [ 322.891206][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 322.895696][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 322.901934][ C0] __warn+0x2e0/0x470 [ 322.905897][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 322.911610][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 322.917321][ C0] report_bug+0x2be/0x4f0 [ 322.921628][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 322.927345][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 322.933066][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 322.938779][ C0] handle_bug+0xcf/0x120 [ 322.943008][ C0] exc_invalid_op+0x1a/0x50 [ 322.947506][ C0] asm_exc_invalid_op+0x1a/0x20 [ 322.952358][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 322.958693][ C0] Code: ff ff ff 48 c7 c7 a0 c4 ee 96 be 04 00 00 00 e8 2a a8 6c 00 48 89 df b8 01 00 00 00 87 05 5c 8f 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 54 d3 8c 74 47 48 c7 c0 5c b2 4a 8e 48 c1 e8 03 [ 322.978312][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 322.984367][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35400 RCX: ffffffff81703536 [ 322.992333][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35400 [ 323.000284][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 323.008335][ C0] R10: dffffc0000000000 R11: fffffbfff2ddd894 R12: 0000000000002904 [ 323.016287][ C0] R13: 1ffff110171c7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 323.024248][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 323.029963][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 323.035685][ C0] rcu_core+0x612/0x1720 [ 323.039914][ C0] ? lock_chain_count+0x20/0x20 [ 323.044751][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 323.050107][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.055291][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 323.060470][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 323.065646][ C0] ? __run_timers+0x781/0x7d0 [ 323.070320][ C0] ? __run_timers+0x74e/0x7d0 [ 323.074979][ C0] ? detach_timer+0x2b0/0x2b0 [ 323.079632][ C0] ? detach_timer+0x2b0/0x2b0 [ 323.084287][ C0] ? lock_chain_count+0x20/0x20 [ 323.089137][ C0] handle_softirqs+0x280/0x820 [ 323.093882][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 323.098641][ C0] ? do_softirq+0x180/0x180 [ 323.103123][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 323.108405][ C0] __irq_exit_rcu+0xc7/0x190 [ 323.112990][ C0] ? irq_exit_rcu+0x20/0x20 [ 323.117478][ C0] irq_exit_rcu+0x9/0x20 [ 323.121699][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 323.127319][ C0] [ 323.130234][ C0] [ 323.133242][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.139238][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 323.144950][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 323.164624][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 323.170673][ C0] RAX: d1a67707fe81e000 RBX: ffffffff81619a5b RCX: d1a67707fe81e000 [ 323.178625][ C0] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6700 [ 323.186574][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 323.194524][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a7da8 [ 323.202490][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 323.210443][ C0] ? do_idle+0x1eb/0x510 [ 323.214675][ C0] default_idle+0x13/0x20 [ 323.218986][ C0] default_idle_call+0x6c/0xa0 [ 323.223759][ C0] do_idle+0x1eb/0x510 [ 323.227813][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 323.232990][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 323.239137][ C0] cpu_startup_entry+0x43/0x60 [ 323.243879][ C0] rest_init+0x2e2/0x300 [ 323.248104][ C0] ? time_init+0x40/0x40 [ 323.252327][ C0] arch_call_rest_init+0xe/0x10 [ 323.257163][ C0] start_kernel+0x459/0x4e0 [ 323.261653][ C0] x86_64_start_reservations+0x2a/0x30 [ 323.267094][ C0] x86_64_start_kernel+0x60/0x60 [ 323.272010][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 323.278065][ C0] [ 324.377241][ C0] Shutting down cpus with NMI [ 324.382229][ C0] Kernel Offset: disabled [ 324.386831][ C0] Rebooting in 86400 seconds..