last executing test programs: 23.220226278s ago: executing program 4 (id=141): open(0x0, 0x0, 0x244) socket$key(0xf, 0x3, 0x2) 20.61055412s ago: executing program 4 (id=145): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000002180)={[0xfffffffffffffff7]}, 0x8, 0x80000) syz_clone3(&(0x7f00000021c0)={0x281881100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.090696585s ago: executing program 1 (id=149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0) 18.261829105s ago: executing program 1 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0xf118, 0x40, 0x3, 0x112}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x10, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) close_range(r1, 0xffffffffffffffff, 0x0) 17.921693603s ago: executing program 4 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040600) signalfd4(r0, &(0x7f0000000100)={[0x4]}, 0x8, 0x80000) 17.675233832s ago: executing program 2 (id=156): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 17.626872664s ago: executing program 4 (id=157): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 16.461989139s ago: executing program 4 (id=159): r0 = io_uring_setup(0x667, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r8, r7, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.456960806s ago: executing program 1 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 15.320127777s ago: executing program 4 (id=163): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x26020400) capset(0x0, &(0x7f0000000240)={0x201000, 0x200000, 0x0, 0x0, 0x8001, 0xfffffffd}) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24048814) sendmsg$NFT_BATCH(r3, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x4059, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@appraise}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_gt}, {@uid_gt}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_eq}]}}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000044) 15.289380385s ago: executing program 2 (id=164): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 15.141723564s ago: executing program 0 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) 14.727306497s ago: executing program 2 (id=166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) 14.346241646s ago: executing program 3 (id=168): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x8000}, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb39, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 12.991298842s ago: executing program 3 (id=169): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 12.870049601s ago: executing program 0 (id=170): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) 12.650103203s ago: executing program 1 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x60}}, 0x0) 12.571264389s ago: executing program 3 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x0) 12.334145457s ago: executing program 0 (id=173): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x10, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) 12.318093292s ago: executing program 1 (id=174): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 12.257112483s ago: executing program 3 (id=175): io_uring_setup(0x667, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) 12.042664623s ago: executing program 2 (id=176): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 11.757913868s ago: executing program 0 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 11.041791989s ago: executing program 3 (id=178): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002700)=@newtfilter={0x34, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x800) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x900) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 10.905101536s ago: executing program 2 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getrusage(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r4, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0xa, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) 9.619610332s ago: executing program 2 (id=180): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x8000}, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb39, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 9.60764021s ago: executing program 3 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 9.451856148s ago: executing program 0 (id=182): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 8.245496108s ago: executing program 0 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) 8.183898518s ago: executing program 1 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x60}}, 0x0) 0s ago: executing program 32 (id=163): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x26020400) capset(0x0, &(0x7f0000000240)={0x201000, 0x200000, 0x0, 0x0, 0x8001, 0xfffffffd}) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24048814) sendmsg$NFT_BATCH(r3, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x4059, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@appraise}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_gt}, {@uid_gt}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_eq}]}}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 69.476692][ T5582] cgroup: Unknown subsys name 'net' [ 69.737670][ T5582] cgroup: Unknown subsys name 'cpuset' [ 69.783162][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.317679][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.317767][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.458972][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.640268][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.669119][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.670511][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.671640][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.672433][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.676707][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.684177][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.685198][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.686208][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.687376][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.703814][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.716252][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.717601][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.719771][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.722683][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.858025][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.882407][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.883733][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.885477][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.886169][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.889103][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.903689][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.929617][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.933815][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.936002][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.783603][ T5599] Bluetooth: hci2: command tx timeout [ 75.942840][ T5599] Bluetooth: hci3: command tx timeout [ 75.942880][ T5610] Bluetooth: hci1: command tx timeout [ 75.943339][ T5610] Bluetooth: hci0: command tx timeout [ 76.022743][ T5599] Bluetooth: hci4: command tx timeout [ 76.083917][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.084562][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.084681][ T5595] bridge_slave_0: entered allmulticast mode [ 76.086162][ T5595] bridge_slave_0: entered promiscuous mode [ 76.124807][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.124920][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.125062][ T5605] bridge_slave_0: entered allmulticast mode [ 76.126814][ T5605] bridge_slave_0: entered promiscuous mode [ 76.139938][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.140040][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.140174][ T5595] bridge_slave_1: entered allmulticast mode [ 76.142453][ T5595] bridge_slave_1: entered promiscuous mode [ 76.165113][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.165232][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.165713][ T5603] bridge_slave_0: entered allmulticast mode [ 76.168090][ T5603] bridge_slave_0: entered promiscuous mode [ 76.171379][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.171493][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.171636][ T5605] bridge_slave_1: entered allmulticast mode [ 76.175790][ T5605] bridge_slave_1: entered promiscuous mode [ 76.236358][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.236476][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.236611][ T5603] bridge_slave_1: entered allmulticast mode [ 76.239708][ T5603] bridge_slave_1: entered promiscuous mode [ 76.286848][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.286961][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.287405][ T5596] bridge_slave_0: entered allmulticast mode [ 76.289084][ T5596] bridge_slave_0: entered promiscuous mode [ 76.343587][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.343832][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.343963][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.344107][ T5596] bridge_slave_1: entered allmulticast mode [ 76.345651][ T5596] bridge_slave_1: entered promiscuous mode [ 76.391285][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.391512][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.391642][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.391784][ T5607] bridge_slave_0: entered allmulticast mode [ 76.424147][ T5607] bridge_slave_0: entered promiscuous mode [ 76.429318][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.451358][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.456806][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.457187][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.457307][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.457498][ T5607] bridge_slave_1: entered allmulticast mode [ 76.459849][ T5607] bridge_slave_1: entered promiscuous mode [ 76.503432][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.541342][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.717188][ T5595] team0: Port device team_slave_0 added [ 76.719379][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.738849][ T5605] team0: Port device team_slave_0 added [ 76.743077][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.747774][ T5595] team0: Port device team_slave_1 added [ 76.767152][ T5603] team0: Port device team_slave_0 added [ 76.769742][ T5605] team0: Port device team_slave_1 added [ 76.771652][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.802538][ T5603] team0: Port device team_slave_1 added [ 76.837048][ T5596] team0: Port device team_slave_0 added [ 76.875083][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.875093][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.875107][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.879038][ T5596] team0: Port device team_slave_1 added [ 76.898311][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.898325][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.898347][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.904322][ T5607] team0: Port device team_slave_0 added [ 76.906015][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.906027][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.906050][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.953573][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.953594][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.953618][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.956430][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.956442][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.956464][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.961724][ T5607] team0: Port device team_slave_1 added [ 77.026721][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.026736][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.026760][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.051449][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.051464][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.051487][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.093113][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.093127][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.093151][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.096967][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.096979][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.097003][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.149474][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.149489][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.149512][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.232952][ T5595] hsr_slave_0: entered promiscuous mode [ 77.234385][ T5595] hsr_slave_1: entered promiscuous mode [ 77.245953][ T5605] hsr_slave_0: entered promiscuous mode [ 77.247088][ T5605] hsr_slave_1: entered promiscuous mode [ 77.248488][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 77.248603][ T5605] Cannot create hsr debugfs directory [ 77.285762][ T5603] hsr_slave_0: entered promiscuous mode [ 77.287292][ T5603] hsr_slave_1: entered promiscuous mode [ 77.288087][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 77.288107][ T5603] Cannot create hsr debugfs directory [ 77.401061][ T5596] hsr_slave_0: entered promiscuous mode [ 77.401793][ T5596] hsr_slave_1: entered promiscuous mode [ 77.402266][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 77.402288][ T5596] Cannot create hsr debugfs directory [ 77.459938][ T5607] hsr_slave_0: entered promiscuous mode [ 77.460625][ T5607] hsr_slave_1: entered promiscuous mode [ 77.461142][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 77.461158][ T5607] Cannot create hsr debugfs directory [ 77.863960][ T5599] Bluetooth: hci2: command tx timeout [ 78.025023][ T5599] Bluetooth: hci3: command tx timeout [ 78.025053][ T5599] Bluetooth: hci1: command tx timeout [ 78.025074][ T5599] Bluetooth: hci0: command tx timeout [ 78.112960][ T5610] Bluetooth: hci4: command tx timeout [ 78.479123][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.525595][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.530802][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.561824][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.569268][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.607155][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.628489][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.656192][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.755323][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.796611][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.810041][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.836886][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.840248][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.865304][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.889701][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.927371][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.019682][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.046150][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.059284][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.085907][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.101782][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.126846][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.175314][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.206185][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.329550][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.355944][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.361133][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.386673][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.407315][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.436640][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.457899][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.497681][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.577802][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.648066][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.675822][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.682458][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.726221][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.736438][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.765276][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.775830][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.776568][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.805486][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.833822][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.847933][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.848143][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.901055][ T1429] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.901181][ T1429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.942758][ T5610] Bluetooth: hci2: command tx timeout [ 79.955005][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.991952][ T1429] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.992054][ T1429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.018628][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.041366][ T2254] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.041452][ T2254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.103138][ T5599] Bluetooth: hci1: command tx timeout [ 80.103166][ T5599] Bluetooth: hci3: command tx timeout [ 80.103240][ T5610] Bluetooth: hci0: command tx timeout [ 80.147769][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.194372][ T5610] Bluetooth: hci4: command tx timeout [ 80.237063][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.237495][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.302288][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.320533][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.320659][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.429388][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.520122][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.525086][ T491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.544619][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.570697][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.570886][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.675900][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.726177][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.726378][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.773898][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.774601][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.432861][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.658033][ T1823] cfg80211: failed to load regulatory.db [ 81.890946][ T5595] veth0_vlan: entered promiscuous mode [ 81.971511][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.985956][ T5595] veth1_vlan: entered promiscuous mode [ 82.023358][ T5610] Bluetooth: hci2: command tx timeout [ 82.162278][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.183280][ T5604] Bluetooth: hci1: command tx timeout [ 82.183308][ T5604] Bluetooth: hci3: command tx timeout [ 82.183354][ T5610] Bluetooth: hci0: command tx timeout [ 82.264298][ T5610] Bluetooth: hci4: command tx timeout [ 82.352481][ T5595] veth0_macvtap: entered promiscuous mode [ 82.404824][ T5595] veth1_macvtap: entered promiscuous mode [ 82.468213][ T5603] veth0_vlan: entered promiscuous mode [ 82.528965][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.531136][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.550030][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.573941][ T5603] veth1_vlan: entered promiscuous mode [ 82.586609][ T5605] veth0_vlan: entered promiscuous mode [ 82.602233][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.656693][ T1511] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.659723][ T5605] veth1_vlan: entered promiscuous mode [ 82.678072][ T1511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.687240][ T1511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.711730][ T1511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.912742][ T5603] veth0_macvtap: entered promiscuous mode [ 83.037633][ T5603] veth1_macvtap: entered promiscuous mode [ 83.080579][ T5596] veth0_vlan: entered promiscuous mode [ 83.094463][ T5605] veth0_macvtap: entered promiscuous mode [ 83.126521][ T5605] veth1_macvtap: entered promiscuous mode [ 83.171514][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.171861][ T5596] veth1_vlan: entered promiscuous mode [ 83.200985][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.201007][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.224712][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.290904][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.309876][ T491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.321912][ T5607] veth0_vlan: entered promiscuous mode [ 83.328623][ T491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.346535][ T491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.352364][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.364172][ T491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.365645][ T2254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.365660][ T2254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.523085][ T5607] veth1_vlan: entered promiscuous mode [ 83.531560][ T491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.541311][ T491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626088][ T1457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.669796][ T1457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.723268][ T5596] veth0_macvtap: entered promiscuous mode [ 83.851775][ T5596] veth1_macvtap: entered promiscuous mode [ 84.130372][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.130389][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.243346][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.136416][ T5607] veth0_macvtap: entered promiscuous mode [ 85.150879][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.210924][ T491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.210942][ T491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.231478][ T5607] veth1_macvtap: entered promiscuous mode [ 85.619885][ T1530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.765582][ T1530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.781807][ T1530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.828271][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.828290][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.828837][ T1530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.945730][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.945748][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.999692][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.160646][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.436717][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.440686][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.504281][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.548594][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.943189][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.943207][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.869048][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.988643][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.988663][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.306078][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.306098][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.620714][ T36] IPVS: starting estimator thread 0... [ 89.716520][ T5859] IPVS: using max 7 ests per chain, 16800 per kthread [ 91.786444][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.786461][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.268550][ T5876] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19'. [ 92.436997][ T5610] Bluetooth: hci1: unexpected event 0x04 length: 245 > 10 [ 92.437466][ T5610] Bluetooth: hci1: connection err: -111 [ 93.192606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.079507][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 95.331402][ T5711] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.612844][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 95.636906][ T5711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.636958][ T5711] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 95.636982][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.676985][ T5711] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 95.677013][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 95.677033][ T5711] usb 1-1: Product: syz [ 95.677046][ T5711] usb 1-1: Manufacturer: syz [ 95.677059][ T5711] usb 1-1: SerialNumber: syz [ 95.741214][ T5711] usb 1-1: config 0 descriptor?? [ 95.923926][ T5711] rc_core: IR keymap rc-imon-rsc not found [ 95.923946][ T5711] Registered IR keymap rc-empty [ 96.016341][ T5711] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 96.046736][ T5711] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 96.565646][ T5711] usb 1-1: USB disconnect, device number 2 [ 96.997184][ T37] audit: type=1326 audit(1777513381.461:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5942 comm="syz.3.40" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45a1fdcdd9 code=0x0 [ 97.616330][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.763858][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.44'. [ 97.998216][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.998254][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.998277][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.998320][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.998343][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.308715][ T9] usb 3-1: config 0 descriptor?? [ 99.117241][ T5970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.103225][ T5976] fuse: Bad value for 'fd' [ 100.472596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.848703][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 101.022050][ T9] usb 3-1: USB disconnect, device number 2 [ 101.851324][ T5997] input: syz1 as /devices/virtual/input/input6 [ 104.624721][ T6021] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 104.624735][ T6021] netlink: 224 bytes leftover after parsing attributes in process `syz.1.64'. [ 104.866751][ T6032] fuse: Bad value for 'fd' [ 105.843667][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.995022][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 105.997530][ T36] usb 5-1: config 0 has no interfaces? [ 105.997562][ T36] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 105.997584][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.000770][ T36] usb 5-1: config 0 descriptor?? [ 107.518658][ T5711] usb 5-1: USB disconnect, device number 2 [ 107.626666][ T6051] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 107.626682][ T6051] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.640497][ T31] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 107.748399][ T6051] vhci_hcd vhci_hcd.0: Device attached [ 107.886344][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.886394][ T31] usb 3-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.886420][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.886440][ T31] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 107.886451][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.919451][ T6052] vhci_hcd: connection closed [ 107.962055][ T31] usb 3-1: config 0 descriptor?? [ 107.978484][ T1457] vhci_hcd vhci_hcd.1: stop threads [ 107.979154][ T1457] vhci_hcd vhci_hcd.1: release socket [ 107.979251][ T1457] vhci_hcd vhci_hcd.1: disconnect device [ 108.223242][ T5584] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 108.227011][ T31] usb 3-1: USB disconnect, device number 3 [ 108.256510][ T5719] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 108.256603][ T5719] usb 35-1: enqueue for inactive port 0 [ 108.353587][ T5719] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 108.380490][ T5584] usb 1-1: config 0 has no interfaces? [ 108.388560][ T5584] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.388585][ T5584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.388604][ T5584] usb 1-1: Product: syz [ 108.388618][ T5584] usb 1-1: Manufacturer: syz [ 108.388631][ T5584] usb 1-1: SerialNumber: syz [ 108.446882][ T5584] usb 1-1: config 0 descriptor?? [ 108.840814][ T5718] usb 1-1: USB disconnect, device number 3 [ 110.968555][ T5718] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.751656][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.866338][ T5718] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 111.866398][ T5718] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 111.866457][ T5718] usb 2-1: config 63 has no interface number 0 [ 111.866558][ T5718] usb 2-1: config 63 interface 66 has no altsetting 0 [ 112.487085][ T5718] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 112.487115][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.487134][ T5718] usb 2-1: Product: syz [ 112.487148][ T5718] usb 2-1: Manufacturer: syz [ 112.487161][ T5718] usb 2-1: SerialNumber: syz [ 112.835382][ T6092] netlink: 48 bytes leftover after parsing attributes in process `syz.3.84'. [ 112.845926][ T6092] netlink: 48 bytes leftover after parsing attributes in process `syz.3.84'. [ 112.846075][ T6092] Zero length message leads to an empty skb [ 112.939074][ T5718] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 112.968712][ T5718] usb 2-1: USB disconnect, device number 2 [ 113.202579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.505871][ T6102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.598035][ T6113] netlink: 48 bytes leftover after parsing attributes in process `syz.1.91'. [ 117.212593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.242582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.615881][ T6152] netlink: 64 bytes leftover after parsing attributes in process `syz.1.103'. [ 118.936516][ T6156] netlink: 48 bytes leftover after parsing attributes in process `syz.4.105'. [ 118.948180][ T6156] netlink: 48 bytes leftover after parsing attributes in process `syz.4.105'. [ 123.554415][ T6137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.99'. [ 124.083849][ T6191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.116'. [ 124.086788][ T6191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.116'. [ 125.681899][ T6203] io-wq is not configured for unbound workers [ 126.423498][ T6222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.513482][ T6242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.135'. [ 128.515487][ T6242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.135'. [ 132.386392][ T6256] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 132.386430][ T6256] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 132.386470][ T6256] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 132.391250][ T6256] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.403861][ T6256] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 133.272666][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.970866][ T6302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.954438][ T6328] capability: warning: `syz.2.164' uses deprecated v2 capabilities in a way that may be insecure [ 139.295588][ T6320] syzkaller0: entered promiscuous mode [ 139.295613][ T6320] syzkaller0: entered allmulticast mode [ 139.319758][ T6315] tipc: Started in network mode [ 139.319785][ T6315] tipc: Node identity 02d8d907fcab, cluster identity 4711 [ 139.320436][ T6315] tipc: Enabled bearer , priority 0 [ 139.412912][ T6314] tipc: Resetting bearer [ 139.701737][ T6314] tipc: Disabling bearer [ 139.703805][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.864402][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 139.869039][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.869083][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 139.869106][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.958175][ T9] usb 3-1: config 0 descriptor?? [ 141.284129][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.284170][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.284196][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.284221][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.284246][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.284271][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.284296][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.284322][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.284344][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.284359][ T9] hid-corsair-void 0003:1B1C:1B27.0002: unknown main item tag 0x0 [ 141.371926][ T9] hid-corsair-void 0003:1B1C:1B27.0002: hidraw0: USB HID v0.08 Device [HID 1b1c:1b27] on usb-dummy_hcd.2-1/input0 [ 141.530628][ T9] usb 3-1: USB disconnect, device number 4 [ 141.562042][ T5718] hid-corsair-void 0003:1B1C:1B27.0002: failed to request battery (reason: -19) [ 141.671431][ T5728] hid-corsair-void 0003:1B1C:1B27.0002: failed to request firmware (reason: -19) [ 143.438061][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 144.641729][ T6377] syzkaller0: entered promiscuous mode [ 144.641754][ T6377] syzkaller0: entered allmulticast mode [ 145.672984][ T6378] tipc: Started in network mode [ 145.673011][ T6378] tipc: Node identity 5aa34526541a, cluster identity 4711 [ 145.673436][ T6378] tipc: Enabled bearer , priority 0 [ 250.682503][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 250.682518][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1490/1:b..l P29/2:b..l [ 250.682545][ C1] rcu: (detected by 1, t=10502 jiffies, g=13633, q=386 ncpus=2) [ 250.682561][ C1] task:ktimers/1 state:R running task stack:22440 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 250.682597][ C1] Call Trace: [ 250.682601][ C1] [ 250.682608][ C1] __schedule+0x1681/0x54c0 [ 250.682649][ C1] ? __pfx___schedule+0x10/0x10 [ 250.682666][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.682676][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.682684][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 250.682697][ C1] preempt_schedule_common+0x82/0xd0 [ 250.682710][ C1] preempt_schedule_thunk+0x16/0x30 [ 250.682726][ C1] rt_mutex_slowunlock+0x681/0x8b0 [ 250.682737][ C1] ? rt_spin_lock+0x1e0/0x400 [ 250.682750][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 250.682765][ C1] ? rt_spin_unlock+0x160/0x200 [ 250.682777][ C1] snd_seq_timer_interrupt+0x31d/0x430 [ 250.682789][ C1] ? rt_spin_unlock+0x160/0x200 [ 250.682801][ C1] ? __pfx_snd_seq_timer_interrupt+0x10/0x10 [ 250.682811][ C1] snd_timer_interrupt+0x108d/0x1330 [ 250.682832][ C1] snd_hrtimer_callback+0x21e/0x390 [ 250.682844][ C1] ? __pfx_snd_hrtimer_callback+0x10/0x10 [ 250.682854][ C1] __hrtimer_run_queues+0x405/0xb10 [ 250.682873][ C1] hrtimer_run_softirq+0x18f/0x260 [ 250.682885][ C1] handle_softirqs+0x1de/0x6d0 [ 250.682900][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 250.682926][ C1] run_ktimerd+0x69/0x100 [ 250.682937][ C1] smpboot_thread_fn+0x541/0xa50 [ 250.682948][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 250.682962][ C1] kthread+0x388/0x470 [ 250.682974][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 250.682984][ C1] ? __pfx_kthread+0x10/0x10 [ 250.682995][ C1] ret_from_fork+0x514/0xb70 [ 250.683007][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 250.683017][ C1] ? __switch_to+0xc79/0x1410 [ 250.683031][ C1] ? __pfx_kthread+0x10/0x10 [ 250.683043][ C1] ret_from_fork_asm+0x1a/0x30 [ 250.683061][ C1] [ 250.683067][ C1] task:kworker/u8:14 state:R running task stack:20888 pid:1490 tgid:1490 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 250.683095][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 250.683110][ C1] Call Trace: [ 250.683113][ C1] [ 250.683118][ C1] __schedule+0x1681/0x54c0 [ 250.683145][ C1] ? __pfx___schedule+0x10/0x10 [ 250.683157][ C1] ? unwind_next_frame+0xa6/0x2550 [ 250.683175][ C1] preempt_schedule_irq+0x4d/0xa0 [ 250.683188][ C1] irqentry_exit+0x14f/0x730 [ 250.683196][ C1] ? trace_irq_disable+0x3b/0x140 [ 250.683209][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.683219][ C1] RIP: 0010:lock_release+0x7f/0x3c0 [ 250.683231][ C1] Code: 26 77 e8 0d 00 0f 84 1c 02 00 00 65 8b 05 f9 17 ca 10 85 c0 0f 85 0d 02 00 00 65 4c 8b 3d 01 d1 c9 10 41 83 bf f4 0b 00 00 00 <0f> 85 f7 01 00 00 49 81 3e 40 f3 2d 93 0f 84 ea 01 00 00 9c 5b fa [ 250.683238][ C1] RSP: 0018:ffffc90006b0f630 EFLAGS: 00000246 [ 250.683245][ C1] RAX: 0000000000000000 RBX: ffff88801a00ab00 RCX: 0000000080000001 [ 250.683251][ C1] RDX: ffffea000190d810 RSI: ffffffff8ba74c40 RDI: ffffffff8ba74c00 [ 250.683258][ C1] RBP: ffffc90006b0f788 R08: ffffffff8b1e5760 R09: ffffffff8dfc8140 [ 250.683263][ C1] R10: dffffc0000000000 R11: fffffbfff1f11a5f R12: ffff88805f435800 [ 250.683269][ C1] R13: ffffffff8220c154 R14: ffff88801a00ab58 R15: ffff888029b38000 [ 250.683276][ C1] ? __refill_objects_node+0x4f4/0x560 [ 250.683291][ C1] ? rt_spin_lock+0x1e0/0x400 [ 250.683309][ C1] rt_spin_unlock+0x29/0x200 [ 250.683321][ C1] __refill_objects_node+0x4f4/0x560 [ 250.683332][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.683348][ C1] refill_objects+0x62/0x3d0 [ 250.683362][ C1] ? rt_spin_unlock+0x160/0x200 [ 250.683374][ C1] __pcs_replace_empty_main+0x373/0x720 [ 250.683386][ C1] ? rt_spin_trylock+0x13a/0x2b0 [ 250.683399][ C1] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 250.683411][ C1] ? batadv_skb_head_push+0x169/0x200 [ 250.683423][ C1] pskb_expand_head+0x230/0x1390 [ 250.683437][ C1] ? __asan_memcpy+0x40/0x70 [ 250.683453][ C1] batadv_skb_head_push+0x169/0x200 [ 250.683465][ C1] batadv_send_skb_packet+0xc8/0x690 [ 250.683476][ C1] ? skb_clone+0x246/0x3a0 [ 250.683487][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x631/0x7e0 [ 250.683505][ C1] ? process_scheduled_works+0xa70/0x1860 [ 250.683517][ C1] process_scheduled_works+0xb5d/0x1860 [ 250.683540][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.683553][ C1] ? assign_work+0x3d5/0x5e0 [ 250.683565][ C1] worker_thread+0xa53/0xfc0 [ 250.683587][ C1] kthread+0x388/0x470 [ 250.683598][ C1] ? __pfx_worker_thread+0x10/0x10 [ 250.683606][ C1] ? __pfx_kthread+0x10/0x10 [ 250.683618][ C1] ret_from_fork+0x514/0xb70 [ 250.683629][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 250.683639][ C1] ? __switch_to+0xc79/0x1410 [ 250.683652][ C1] ? __pfx_kthread+0x10/0x10 [ 250.683664][ C1] ret_from_fork_asm+0x1a/0x30 [ 250.683682][ C1] [ 250.683686][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10497 jiffies! g13633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 250.683696][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=5224 [ 250.683700][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g13633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 250.683710][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 250.683714][ C1] rcu: RCU grace-period kthread stack dump: [ 250.683717][ C1] task:rcu_preempt state:I stack:27432 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 250.683740][ C1] Call Trace: [ 250.683743][ C1] [ 250.683748][ C1] __schedule+0x1681/0x54c0 [ 250.683760][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 250.683784][ C1] ? __pfx___schedule+0x10/0x10 [ 250.683800][ C1] ? schedule+0x90/0x360 [ 250.683814][ C1] schedule+0x164/0x360 [ 250.683827][ C1] schedule_timeout+0x158/0x2c0 [ 250.683840][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 250.683853][ C1] ? __pfx_process_timeout+0x10/0x10 [ 250.683864][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.683873][ C1] ? prepare_to_swait_event+0x340/0x370 [ 250.683886][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 250.683903][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 250.683919][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 250.683932][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.683943][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 250.683955][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 250.683965][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.683974][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 250.683984][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 250.683996][ C1] kthread+0x388/0x470 [ 250.684007][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 250.684017][ C1] ? __pfx_kthread+0x10/0x10 [ 250.684029][ C1] ret_from_fork+0x514/0xb70 [ 250.684039][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 250.684049][ C1] ? __switch_to+0xc79/0x1410 [ 250.684062][ C1] ? __pfx_kthread+0x10/0x10 [ 250.684074][ C1] ret_from_fork_asm+0x1a/0x30 [ 250.684091][ C1] [ 250.684094][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 250.684107][ C1] Sending NMI from CPU 1 to CPUs 0: [ 250.684138][ C0] NMI backtrace for cpu 0 [ 250.684164][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.684181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.684189][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 250.684211][ C0] Code: ab 6e 02 e9 43 c8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 6b 2d 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 250.684223][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 00000246 [ 250.684234][ C0] RAX: 00000000001e5165 RBX: ffffffff819953aa RCX: 0000000080000001 [ 250.684244][ C0] RDX: 0000000000000001 RSI: ffffffff8d60269b RDI: ffffffff8ba74c60 [ 250.684254][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b8833e9b R09: 1ffff110171067d3 [ 250.684265][ C0] R10: dffffc0000000000 R11: ffffed10171067d4 R12: 0000000000000000 [ 250.684275][ C0] R13: 1ffffffff1b9fdd8 R14: 0000000000000000 R15: 1ffffffff1b9fdd8 [ 250.684284][ C0] FS: 0000000000000000(0000) GS:ffff88812617c000(0000) knlGS:0000000000000000 [ 250.684296][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.684306][ C0] CR2: 00007f9a9cf8fff8 CR3: 000000003189e000 CR4: 00000000003526f0 [ 250.684320][ C0] Call Trace: [ 250.684325][ C0] [ 250.684331][ C0] default_idle+0x9/0x20 [ 250.684345][ C0] default_idle_call+0x72/0xb0 [ 250.684361][ C0] do_idle+0x36a/0x5f0 [ 250.684373][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 250.684391][ C0] ? __pfx_do_idle+0x10/0x10 [ 250.684408][ C0] cpu_startup_entry+0x43/0x60 [ 250.684422][ C0] rest_init+0x2de/0x300 [ 250.684439][ C0] start_kernel+0x38a/0x3e0 [ 250.684461][ C0] x86_64_start_reservations+0x24/0x30 [ 250.684479][ C0] x86_64_start_kernel+0x143/0x1c0 [ 250.684496][ C0] common_startup_64+0x13e/0x147 [ 250.684522][ C0]