last executing test programs: 8.360323815s ago: executing program 2 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x24) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r3, 0x609, 0xe, 0x0, &(0x7f0000000b40)="dd80feffffff0002000400000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.290759636s ago: executing program 1 (id=819): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) 7.945896548s ago: executing program 1 (id=822): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d", 0x80}, {&(0x7f0000000c00)="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", 0x1a3}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3e", 0xdd}, {&(0x7f0000000440)="fff5c0", 0x3}], 0x4}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a48ddda58f0c3202e4331de15e27c2f6b69ccda5c86d79ec8171a6447231bbf9a1a064d718209a1013baec29196d3ae2707e8d813dc1c962f5edc8a102000000684ba48796800608d791fcd2b838e7735cf89f00ed2121ae7146135b1d4f15bc73c4057b2601adaa2d899114ca12ffc32ac806d560415a55d3f6dd24c9bba19109eb46", 0x83}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbf2930f3151214ef6fdee25bdb2d1873ce347c7b623dd3140cfb20100a1bf9f1d", 0x2c}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e2", 0x25}], 0x2}, 0x24000090) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6.586940437s ago: executing program 3 (id=825): unshare(0x20400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) bind$inet(r0, 0x0, 0x0) 6.509168151s ago: executing program 1 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000014000905000000000000000002010000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 6.407910377s ago: executing program 0 (id=827): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.095224792s ago: executing program 3 (id=828): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.052498547s ago: executing program 1 (id=829): socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) socket$netlink(0x10, 0x3, 0x0) epoll_create(0x1ff) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 6.008032464s ago: executing program 2 (id=830): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x144, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x7}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0x108, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0x88, 0x4, [@m_simple={0x84, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, ':*&\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'skbmod\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}]}, {0x36, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c79"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x144}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.61981155s ago: executing program 0 (id=831): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(r0, 0x560d, &(0x7f0000001000)) 5.618956596s ago: executing program 3 (id=832): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 5.521924287s ago: executing program 4 (id=833): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a0069ae00000000000000000a0000000000000000000000080004"], 0x24}}, 0x0) 5.439501327s ago: executing program 2 (id=834): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.392147294s ago: executing program 0 (id=835): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x88081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2909e8dbe108598948224ad54afac11d87539702002d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000000000000200"}}) 5.276077193s ago: executing program 4 (id=836): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB='1-6:5/', @ANYRESOCT=r1], 0x31) 4.648094672s ago: executing program 0 (id=837): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010400000000000000000500000005000100070000000500040000000000140007800500150000000000080012400000000005000500020000000900020073797a3000001e0011000300686173683a69702c706f7274"], 0x60}}, 0x0) 4.501148139s ago: executing program 2 (id=838): unshare(0x20400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) bind$inet(r0, 0x0, 0x0) 4.474303471s ago: executing program 3 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000009c0)={r4, &(0x7f0000000080), 0x0}, 0x20) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x40, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, 0x0}, @flat=@weak_binder, @flat=@weak_handle}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0100001200f3"], 0x14c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000c40)={'erspan0\x00', 0x0, 0x20, 0x7, 0xef, 0x5, {{0x3f, 0x4, 0x2, 0x3, 0xfc, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x34, 0xcf, 0x1, 0x1, [{@loopback, 0x8000}, {@multicast1, 0x8}, {@local, 0x8}, {@multicast2, 0x8}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0xf, [{@loopback, 0x6}, {@multicast2, 0x47f2332e}, {@private=0xa010101, 0xeb5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@empty, 0x1}]}, @lsrr={0x83, 0xf, 0xa4, [@dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101, @private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x1, [{@empty, 0x32}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x80000000}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0xe, "788b2a757f141798fe97db8c"}]}, @timestamp={0x44, 0x18, 0x3f, 0x0, 0x6, [0x0, 0x2, 0x4, 0xcad, 0x5]}, @timestamp_prespec={0x44, 0x1c, 0x28, 0x3, 0x4, [{@loopback, 0xa}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x9}, {@empty, 0x1}]}, @generic={0x7, 0x2}]}}}}}) 4.36399234s ago: executing program 1 (id=840): r0 = socket$kcm(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) socket(0x840000000002, 0x3, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) socket(0x1d, 0x2, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 4.351969385s ago: executing program 4 (id=841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setownex(r0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x4208, r1) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x4, 0xffffffbf, 'syz0\x00', 0x587}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061118000000000001800"/29], &(0x7f0000000000)='GPL\x00'}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 4.311904214s ago: executing program 0 (id=842): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.891978565s ago: executing program 2 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffff7e, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8040080) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.234159706s ago: executing program 4 (id=844): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) 2.004215124s ago: executing program 3 (id=845): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x144, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x7}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0x108, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0x88, 0x4, [@m_simple={0x84, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, ':*&\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'skbmod\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}]}, {0x36, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c79"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x144}}, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.930695065s ago: executing program 1 (id=846): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r0, 0x609, 0xe, 0x0, &(0x7f0000000b40)="dd80feffffff0002000400000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.097382271s ago: executing program 4 (id=847): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffda2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x6, [@typedef={0xd}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x7, 0x2}, {0xb, 0x5}, {0xd5, 0x2}, {0xa, 0x1}, {0x4}, {0x3, 0x2}, {0x9, 0x4}]}, @union={0xc, 0x4, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x0, 0x9}, {0x3, 0x2, 0x6}, {0x1, 0x1, 0x7e72bf1e}, {0xb, 0x1, 0xffff}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x5}, {0xf, 0x5}, {0xf, 0x5}, {0x5}, {0xb, 0x1}, {0x2}]}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xfff}, @func_proto, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x30, 0x2e, 0x30, 0x30]}}, &(0x7f0000000580)=""/132, 0x112, 0x84, 0x1, 0x22a3}, 0x20) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000004ec0)=ANY=[], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) chown(&(0x7f0000000000)='./cgroup\x00', r2, 0xee01) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r4, 0xffffffffffffffff, 0xe, 0x0, 0x0, @prog_id}, 0x20) r5 = syz_open_dev$loop(0x0, 0x75f, 0x0) r6 = open(0x0, 0x14113e, 0x0) write$binfmt_script(r6, &(0x7f00000009c0)={'#! ', './file1/file1'}, 0x11) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000000000)=""/5) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x800) 1.001428631s ago: executing program 0 (id=848): syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1c, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x4c, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x87, 0xfc, 0x4b}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x2a, &(0x7f0000000300)=@string={0x2a, 0x3, "d65186517dddc79580bfcfe67a60223d78cae2ea57e419c7d1d9e5289e3ef7d64d08ddf8dddee5de"}}]}) 925.095065ms ago: executing program 3 (id=849): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 188.252145ms ago: executing program 2 (id=850): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 0s ago: executing program 4 (id=851): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @ipv4}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 75.303926][ T5212] cgroup: Unknown subsys name 'net' [ 75.504840][ T5212] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.197661][ T5212] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.174823][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.187176][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.200966][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.209366][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.219383][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.227395][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.236356][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.244757][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.252617][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.263338][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.272598][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.300805][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.303870][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.313325][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.323688][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.332311][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.332684][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.340347][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.357189][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.361227][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.365293][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.375046][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.379437][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.385954][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.403050][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.420028][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.420035][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.437591][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.453444][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.465628][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.012570][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 82.225892][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 82.281908][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 82.388056][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 82.405280][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 82.584857][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.593309][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.607861][ T5222] bridge_slave_0: entered allmulticast mode [ 82.616254][ T5222] bridge_slave_0: entered promiscuous mode [ 82.634055][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.641299][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.649244][ T5222] bridge_slave_1: entered allmulticast mode [ 82.656521][ T5222] bridge_slave_1: entered promiscuous mode [ 82.763703][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.770861][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.779257][ T5229] bridge_slave_0: entered allmulticast mode [ 82.786497][ T5229] bridge_slave_0: entered promiscuous mode [ 82.795284][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.802518][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.810289][ T5229] bridge_slave_1: entered allmulticast mode [ 82.818975][ T5229] bridge_slave_1: entered promiscuous mode [ 82.862249][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.875503][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.921954][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.929328][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.936730][ T5225] bridge_slave_0: entered allmulticast mode [ 82.944862][ T5225] bridge_slave_0: entered promiscuous mode [ 82.953423][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.960849][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.968557][ T5225] bridge_slave_1: entered allmulticast mode [ 82.976528][ T5225] bridge_slave_1: entered promiscuous mode [ 83.009876][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.064838][ T5222] team0: Port device team_slave_0 added [ 83.073666][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.135881][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.143157][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.151044][ T5236] bridge_slave_0: entered allmulticast mode [ 83.158409][ T5236] bridge_slave_0: entered promiscuous mode [ 83.168655][ T5222] team0: Port device team_slave_1 added [ 83.202439][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.216077][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.225480][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.232624][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.240193][ T5223] bridge_slave_0: entered allmulticast mode [ 83.247726][ T5223] bridge_slave_0: entered promiscuous mode [ 83.257056][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.264656][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.271957][ T5236] bridge_slave_1: entered allmulticast mode [ 83.280839][ T5236] bridge_slave_1: entered promiscuous mode [ 83.304570][ T5229] team0: Port device team_slave_0 added [ 83.323171][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.330507][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.338398][ T5223] bridge_slave_1: entered allmulticast mode [ 83.347079][ T5223] bridge_slave_1: entered promiscuous mode [ 83.397291][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.404358][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.430542][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.445511][ T5234] Bluetooth: hci3: command tx timeout [ 83.445532][ T5237] Bluetooth: hci1: command tx timeout [ 83.448039][ T5229] team0: Port device team_slave_1 added [ 83.479122][ T5225] team0: Port device team_slave_0 added [ 83.510936][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.518325][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.544865][ T5234] Bluetooth: hci4: command tx timeout [ 83.547055][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.561578][ T5234] Bluetooth: hci2: command tx timeout [ 83.561811][ T5234] Bluetooth: hci0: command tx timeout [ 83.595108][ T5225] team0: Port device team_slave_1 added [ 83.604690][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.617319][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.632166][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.646206][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.669642][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.677436][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.703828][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.766238][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.773247][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.800050][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.824958][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.831946][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.858092][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.888948][ T5223] team0: Port device team_slave_0 added [ 83.922641][ T5236] team0: Port device team_slave_0 added [ 83.932575][ T5236] team0: Port device team_slave_1 added [ 83.958291][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.965526][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.991927][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.012861][ T5223] team0: Port device team_slave_1 added [ 84.036946][ T5222] hsr_slave_0: entered promiscuous mode [ 84.045355][ T5222] hsr_slave_1: entered promiscuous mode [ 84.071392][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.078451][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.104703][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.130075][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.138006][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.164554][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.211979][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.219102][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.245998][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.308169][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.319129][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.345928][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.400089][ T5229] hsr_slave_0: entered promiscuous mode [ 84.412420][ T5229] hsr_slave_1: entered promiscuous mode [ 84.419076][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.428074][ T5229] Cannot create hsr debugfs directory [ 84.506811][ T5225] hsr_slave_0: entered promiscuous mode [ 84.513241][ T5225] hsr_slave_1: entered promiscuous mode [ 84.520956][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.528777][ T5225] Cannot create hsr debugfs directory [ 84.627616][ T5236] hsr_slave_0: entered promiscuous mode [ 84.635200][ T5236] hsr_slave_1: entered promiscuous mode [ 84.641529][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.650555][ T5236] Cannot create hsr debugfs directory [ 84.667542][ T5223] hsr_slave_0: entered promiscuous mode [ 84.674457][ T5223] hsr_slave_1: entered promiscuous mode [ 84.680748][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.688858][ T5223] Cannot create hsr debugfs directory [ 85.096762][ T5222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.110178][ T5222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.142630][ T5222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.161023][ T5222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.248882][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.269131][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.281250][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.314330][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.390299][ T5223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.403430][ T5223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.417742][ T5223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.428977][ T5223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.526032][ T5237] Bluetooth: hci1: command tx timeout [ 85.532043][ T5234] Bluetooth: hci3: command tx timeout [ 85.561129][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.572470][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.583454][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.604365][ T5234] Bluetooth: hci0: command tx timeout [ 85.610147][ T5234] Bluetooth: hci2: command tx timeout [ 85.616054][ T5237] Bluetooth: hci4: command tx timeout [ 85.619779][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.657259][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.770823][ T5236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.782319][ T5236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.809805][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.816952][ T5236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.839551][ T5236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.880054][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.917810][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.925303][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.960161][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.967374][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.001444][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.097881][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.107313][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.114537][ T3949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.160754][ T3949] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.167956][ T3949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.240514][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.286169][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.367469][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.393143][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.400502][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.415894][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.423116][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.452268][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.459536][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.515709][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.522864][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.541320][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.584626][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.649044][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.656311][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.672535][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.679792][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.782463][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.002797][ T5222] veth0_vlan: entered promiscuous mode [ 87.029448][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.070565][ T5222] veth1_vlan: entered promiscuous mode [ 87.317771][ T5222] veth0_macvtap: entered promiscuous mode [ 87.337693][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.348717][ T5222] veth1_macvtap: entered promiscuous mode [ 87.370758][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.421020][ T5229] veth0_vlan: entered promiscuous mode [ 87.483193][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.502752][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.545262][ T5229] veth1_vlan: entered promiscuous mode [ 87.560242][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.606134][ T5237] Bluetooth: hci1: command tx timeout [ 87.611807][ T5234] Bluetooth: hci3: command tx timeout [ 87.620297][ T5225] veth0_vlan: entered promiscuous mode [ 87.630390][ T5222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.642705][ T5222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.658900][ T5222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.668470][ T5222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.684117][ T5234] Bluetooth: hci2: command tx timeout [ 87.687275][ T5237] Bluetooth: hci4: command tx timeout [ 87.689557][ T5234] Bluetooth: hci0: command tx timeout [ 87.750604][ T5225] veth1_vlan: entered promiscuous mode [ 87.803434][ T5229] veth0_macvtap: entered promiscuous mode [ 87.817692][ T5229] veth1_macvtap: entered promiscuous mode [ 87.901848][ T5236] veth0_vlan: entered promiscuous mode [ 87.951062][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.963887][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.979309][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.002393][ T5236] veth1_vlan: entered promiscuous mode [ 88.018657][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.029904][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.037507][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.038694][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.052112][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.078898][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.088021][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.097312][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.106404][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.192096][ T5225] veth0_macvtap: entered promiscuous mode [ 88.204732][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.212697][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.262777][ T5225] veth1_macvtap: entered promiscuous mode [ 88.332346][ T5223] veth0_vlan: entered promiscuous mode [ 88.359589][ T5236] veth0_macvtap: entered promiscuous mode [ 88.373813][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.381683][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.408602][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.419688][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.430889][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.441731][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.455754][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.467495][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.478693][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.489302][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.500241][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.512452][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.570470][ T3949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.583113][ T3949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.601449][ T5236] veth1_macvtap: entered promiscuous mode [ 88.617631][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.629110][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.642061][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.652644][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.677489][ T5223] veth1_vlan: entered promiscuous mode [ 88.778761][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.801150][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.821259][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.833332][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.848123][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.865934][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.881991][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.169604][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.434830][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.684807][ T5234] Bluetooth: hci3: command tx timeout [ 89.690287][ T5234] Bluetooth: hci1: command tx timeout [ 89.705911][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.731840][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.741941][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.752614][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.763832][ T5234] Bluetooth: hci0: command tx timeout [ 89.767397][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.776888][ T5234] Bluetooth: hci4: command tx timeout [ 89.776939][ T5234] Bluetooth: hci2: command tx timeout [ 89.831364][ T5236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.845200][ T5236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.855066][ T5236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.865633][ T5236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.895742][ T3949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.906637][ T5223] veth0_macvtap: entered promiscuous mode [ 89.920991][ T3949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.975463][ T5223] veth1_macvtap: entered promiscuous mode [ 90.002030][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.021561][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.098237][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.109450][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.120015][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.132812][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.143026][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.157989][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.170687][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.192548][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.213212][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.223826][ T3964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.241990][ T3964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.266673][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.375100][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.410291][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.421116][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.431343][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.449639][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.460294][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.479443][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.494677][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.564724][ T5223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.602398][ T5223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.641069][ T5223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.657221][ T5223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.720037][ T3964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.742537][ T3964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.784883][ T5320] syzkaller0: entered promiscuous mode [ 90.797461][ T5320] syzkaller0: entered allmulticast mode [ 91.382974][ T29] audit: type=1326 audit(1724317177.298:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5328 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7fc00000 [ 91.713866][ T29] audit: type=1326 audit(1724317177.308:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5328 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eae579e79 code=0x7fc00000 [ 91.736741][ T29] audit: type=1326 audit(1724317177.548:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5328 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7fc00000 [ 91.779340][ T5338] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 92.258210][ T941] cfg80211: failed to load regulatory.db [ 92.978197][ T5351] geneve1: entered allmulticast mode [ 93.208856][ T2467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.275077][ T5354] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.281934][ T2467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.455082][ T3949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.483293][ T3949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.914947][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.407601][ T5399] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.222657][ T5409] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.004287][ T5414] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.311889][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 100.193812][ T5423] Zero length message leads to an empty skb [ 100.675281][ T5437] dccp_xmit_packet: Payload too large (65475) for featneg. [ 100.922533][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 101.052074][ T5449] Bluetooth: MGMT ver 1.23 [ 102.119408][ T5463] capability: warning: `syz.2.54' uses deprecated v2 capabilities in a way that may be insecure [ 102.364059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.372950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.562253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.666206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.331857][ T5477] netlink: 104 bytes leftover after parsing attributes in process `syz.3.59'. [ 103.366504][ T29] audit: type=1326 audit(1724317189.288:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5476 comm="syz.3.59" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x0 [ 105.748888][ T5498] syzkaller0: entered promiscuous mode [ 105.754497][ T5498] syzkaller0: entered allmulticast mode [ 109.779338][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 111.259788][ T5531] syzkaller0: entered promiscuous mode [ 111.266759][ T5531] syzkaller0: entered allmulticast mode [ 123.623564][ C0] sched: RT throttling activated [ 125.178153][ T5646] syzkaller0: entered promiscuous mode [ 125.185005][ T5646] syzkaller0: entered allmulticast mode [ 128.029991][ T5671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 133.206757][ T29] audit: type=1326 audit(1724317219.098:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5706 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7fc00000 [ 133.232786][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.242457][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.631899][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.034781][ T5715] syzkaller0: entered promiscuous mode [ 134.150853][ T5715] syzkaller0: entered allmulticast mode [ 134.162544][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.192092][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.235288][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.245796][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.277429][ T9] usb 2-1: config 0 descriptor?? [ 134.784889][ T9] hid (null): bogus close delimiter [ 135.232104][ T9] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 135.246065][ T9] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 135.255789][ T9] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 135.320328][ T9] usb 2-1: USB disconnect, device number 2 [ 138.622329][ T5758] netlink: 'syz.3.141': attribute type 21 has an invalid length. [ 138.636516][ T5758] netlink: 'syz.3.141': attribute type 6 has an invalid length. [ 138.703620][ T5758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.141'. [ 138.776602][ T5756] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.139'. [ 138.929541][ T3150] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.496049][ T3150] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.520697][ T3150] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.554352][ T3150] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.573477][ T3150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.574090][ T3150] usb 1-1: SerialNumber: syz [ 139.841650][ T3150] usb 1-1: 0:2 : does not exist [ 139.894742][ T5778] tipc: Started in network mode [ 139.894808][ T5778] tipc: Node identity 2, cluster identity 4711 [ 139.894826][ T5778] tipc: Node number set to 2 [ 139.895783][ T5778] tipc: Cannot configure node identity twice [ 141.162797][ T3150] usb 1-1: USB disconnect, device number 2 [ 145.439806][ T5796] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.105578][ T5830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 151.229339][ T5846] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.123838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 152.134465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 152.226971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 152.529250][ T5876] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.185'. [ 152.633159][ T5879] dccp_invalid_packet: P.Data Offset(0) too small [ 152.824511][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.060504][ T5890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.192'. [ 153.073763][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 153.094282][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 153.146162][ T8] usb 1-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=17.01 [ 153.164294][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.172554][ T8] usb 1-1: Product: syz [ 153.181763][ T8] usb 1-1: Manufacturer: syz [ 153.188468][ T8] usb 1-1: SerialNumber: syz [ 153.212414][ T8] usb 1-1: config 0 descriptor?? [ 153.226650][ T8] f81232 1-1:0.0: f81534a converter detected [ 153.438730][ T5896] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 153.472295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.484081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.633630][ T5277] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.760521][ T5901] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.833772][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 153.893441][ T5277] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 153.925937][ T5277] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 153.959381][ T5277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 153.985976][ T5277] usb 4-1: config 1 has no interface number 0 [ 154.011975][ T5277] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.041809][ T5277] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 154.087382][ T5277] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 154.119307][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.207317][ T5277] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 154.889268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.896507][ T5277] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 156.011440][ T46] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 156.111021][ T46] usb 4-1: USB disconnect, device number 2 [ 156.122034][ T46] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 156.189245][ T8] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 156.214616][ T8] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 156.286810][ T8] usb 1-1: USB disconnect, device number 3 [ 156.330649][ T8] f81232 1-1:0.0: device disconnected [ 156.545859][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'. [ 156.568931][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 157.118666][ T29] audit: type=1326 audit(1724317243.048:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.158665][ T5941] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.252462][ T29] audit: type=1326 audit(1724317243.048:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.348829][ T29] audit: type=1326 audit(1724317243.048:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.483649][ T29] audit: type=1326 audit(1724317243.048:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.532337][ T29] audit: type=1326 audit(1724317243.048:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.558178][ T29] audit: type=1326 audit(1724317243.048:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.589155][ T29] audit: type=1326 audit(1724317243.048:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.725590][ T29] audit: type=1326 audit(1724317243.048:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.741931][ T5955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.818160][ T29] audit: type=1326 audit(1724317243.048:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.849236][ T29] audit: type=1326 audit(1724317243.048:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5932 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 157.928869][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.079520][ T5968] random: crng reseeded on system resumption [ 159.847299][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 161.711747][ T6012] vlan2: entered promiscuous mode [ 161.744120][ T6012] caif0: entered promiscuous mode [ 161.771406][ T6012] caif0: left promiscuous mode [ 161.894252][ T6016] tipc: Started in network mode [ 161.925130][ T6016] tipc: Node identity 2ed114aa, cluster identity 4711 [ 161.945505][ T6016] tipc: Enabling of bearer rejected, failed to enable media [ 163.527055][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 164.427037][ T6077] vcan0 speed is unknown, defaulting to 1000 [ 164.450375][ T6077] vcan0 speed is unknown, defaulting to 1000 [ 164.467399][ T6077] vcan0 speed is unknown, defaulting to 1000 [ 164.541142][ T6083] vhci_hcd: default hub control req: 4012 v0007 i0006 l222 [ 164.793831][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.092784][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.284079][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.343814][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.405782][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.436709][ T25] usb 5-1: SerialNumber: syz [ 165.601711][ T46] vcan0 speed is unknown, defaulting to 1000 [ 165.613894][ T6077] infiniband syz1: set active [ 165.619073][ T6077] infiniband syz1: added vcan0 [ 165.647739][ T6077] syz1: rxe_create_cq: returned err = -12 [ 165.668344][ T6077] infiniband syz1: Couldn't create ib_mad CQ [ 165.702090][ T6077] infiniband syz1: Couldn't open port 1 [ 165.734705][ T25] usb 5-1: 0:2 : does not exist [ 165.747169][ T25] usb 5-1: unit 5: unexpected type 0x0d [ 165.785062][ T25] usb 5-1: USB disconnect, device number 2 [ 165.809223][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 165.809244][ T29] audit: type=1326 audit(1724317251.738:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="syz.2.264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f838d979e79 code=0x0 [ 165.863309][ T6077] RDS/IB: syz1: added [ 165.889442][ T6077] smc: adding ib device syz1 with port count 1 [ 165.931158][ T6077] smc: ib device syz1 port 1 has pnetid [ 165.959305][ T9] vcan0 speed is unknown, defaulting to 1000 [ 166.004602][ T5360] udevd[5360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.005432][ T6077] vcan0 speed is unknown, defaulting to 1000 [ 166.652157][ T6077] vcan0 speed is unknown, defaulting to 1000 [ 167.095950][ T5237] Bluetooth: hci4: link tx timeout [ 167.102618][ T5237] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.703893][ T6077] vcan0 speed is unknown, defaulting to 1000 [ 169.050692][ T6145] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.284'. [ 169.123878][ T5234] Bluetooth: hci4: command 0x0406 tx timeout [ 169.198411][ T6150] fuse: Bad value for 'fd' [ 169.423667][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 169.435558][ T6077] vcan0 speed is unknown, defaulting to 1000 [ 169.626759][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.665508][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.697666][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 169.733597][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.774800][ T25] usb 3-1: config 0 descriptor?? [ 169.968611][ T6077] vcan0 speed is unknown, defaulting to 1000 [ 170.002174][ T6160] process 'syz.0.290' launched './file0' with NULL argv: empty string added [ 170.602242][ T29] audit: type=1326 audit(1724317256.528:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6779e79 code=0x7ffc0000 [ 170.627349][ T25] usb 3-1: string descriptor 0 read error: -71 [ 170.634443][ T29] audit: type=1326 audit(1724317256.558:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f88b6779e79 code=0x7ffc0000 [ 170.650649][ T25] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 170.670336][ T29] audit: type=1326 audit(1724317256.558:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6779e79 code=0x7ffc0000 [ 170.707782][ T25] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 170.733815][ T29] audit: type=1326 audit(1724317256.558:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b6779e79 code=0x7ffc0000 [ 170.750553][ T25] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 170.793693][ T25] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 170.830016][ T25] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 170.883187][ T25] usb 3-1: USB disconnect, device number 2 [ 171.104410][ T6177] fuse: Invalid rootmode [ 171.601810][ T6191] syz.1.303[6191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.602784][ T6191] syz.1.303[6191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.638569][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 171.710539][ T29] audit: type=1326 audit(1724317257.638:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7fc00000 [ 171.739872][ T29] audit: type=1326 audit(1724317257.658:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7be8d79e79 code=0x7fc00000 [ 171.798923][ T6199] vhci_hcd: default hub control req: 4012 v0007 i0006 l222 [ 171.864612][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 171.883086][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.929366][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.941301][ T3150] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 171.992573][ T25] usb 3-1: New USB device found, idVendor=2087, idProduct=0a01, bcdDevice= 0.00 [ 172.020449][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.049262][ T25] usb 3-1: config 0 descriptor?? [ 172.112701][ T29] audit: type=1326 audit(1724317258.038:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7fc00000 [ 172.148839][ T29] audit: type=1326 audit(1724317258.038:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7fc00000 [ 172.175433][ T3150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.217376][ T29] audit: type=1326 audit(1724317258.038:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7fc00000 [ 172.239186][ T29] audit: type=1326 audit(1724317258.038:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7fc00000 [ 172.263647][ T3150] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.327484][ T3150] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.336951][ T3150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.358953][ T3150] usb 4-1: config 0 descriptor?? [ 172.372338][ T29] audit: type=1326 audit(1724317258.038:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7fc00000 [ 172.469569][ T29] audit: type=1326 audit(1724317258.038:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7fc00000 [ 172.733764][ T5925] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 172.877431][ T3150] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.906351][ T3150] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.933140][ T3150] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.955542][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.974431][ T3150] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 173.000378][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.018545][ T3150] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 173.047106][ T5925] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 173.059067][ T3150] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 173.106416][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.159573][ T5925] usb 1-1: config 0 descriptor?? [ 173.196008][ T3150] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 173.289324][ T3150] usb 4-1: USB disconnect, device number 3 [ 173.313084][ T6218] fuse: Invalid rootmode [ 174.026931][ T5925] usb 1-1: string descriptor 0 read error: -71 [ 174.054232][ T5925] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 174.088068][ T5925] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 174.125398][ T5925] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 174.162741][ T5925] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 174.195276][ T5925] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 174.296731][ T5925] usb 1-1: USB disconnect, device number 4 [ 174.471156][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 174.497593][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 174.550424][ T25] usb 3-1: USB disconnect, device number 3 [ 174.572761][ T5274] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 174.828493][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.852651][ T6233] syzkaller1: entered promiscuous mode [ 174.885541][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.903460][ T5274] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 174.933649][ T6233] syzkaller1: entered allmulticast mode [ 174.953742][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.985309][ T5274] usb 5-1: config 0 descriptor?? [ 175.210724][ T6243] fuse: Invalid rootmode [ 175.679136][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.730657][ T5274] itetech 0003:258A:6A88.0005: unknown main item tag 0x0 [ 175.802738][ T5274] itetech 0003:258A:6A88.0005: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 175.864317][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 175.896665][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.928234][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.949646][ T5274] usb 5-1: USB disconnect, device number 3 [ 175.982008][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 176.023792][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.070356][ T25] usb 4-1: config 0 descriptor?? [ 176.682823][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 176.689985][ T5237] Bluetooth: Wrong link type (-22) [ 176.708413][ T5237] Bluetooth: hci0: link tx timeout [ 176.717297][ T5237] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.090712][ T25] lenovo 0003:17EF:6009.0006: item fetching failed at offset 1/5 [ 177.170818][ T25] lenovo 0003:17EF:6009.0006: hid_parse failed [ 177.227553][ T25] lenovo 0003:17EF:6009.0006: probe with driver lenovo failed with error -22 [ 177.321131][ T25] usb 4-1: USB disconnect, device number 4 [ 177.932446][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 178.579781][ T6284] tap0: tun_chr_ioctl cmd 2147767511 [ 178.807152][ T5234] Bluetooth: hci0: command 0x0406 tx timeout [ 178.879676][ T6288] input: syz0 as /devices/virtual/input/input5 [ 178.943154][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'. [ 181.386748][ T5234] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 181.396214][ T5234] Bluetooth: hci0: Injecting HCI hardware error event [ 181.424318][ T5234] Bluetooth: hci0: hardware error 0x00 [ 181.889314][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 182.288595][ T5237] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 183.282126][ T6363] warning: `syz.3.370' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 183.580504][ T5234] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 183.845696][ T6386] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 184.164160][ T29] audit: type=1326 audit(1724317270.038:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6385 comm="syz.0.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x0 [ 185.839573][ T5274] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.922709][ T5274] hid-generic 0000:0000:0000.0007: item fetching failed at offset 6/32 [ 185.970161][ T5274] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 186.434892][ T5237] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 186.435195][ T5237] Bluetooth: hci4: Injecting HCI hardware error event [ 186.445919][ T5237] Bluetooth: hci4: hardware error 0x00 [ 187.065980][ T6421] netlink: 165 bytes leftover after parsing attributes in process `syz.3.392'. [ 187.086123][ T6421] netlink: 277 bytes leftover after parsing attributes in process `syz.3.392'. [ 187.151890][ T6420] vcan0 speed is unknown, defaulting to 1000 [ 187.316648][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.397'. [ 187.386999][ T5925] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.430241][ T6435] netlink: 'syz.3.400': attribute type 10 has an invalid length. [ 188.495004][ T5237] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 189.740185][ T6446] netlink: 52 bytes leftover after parsing attributes in process `syz.3.403'. [ 189.807859][ T6442] netlink: 52 bytes leftover after parsing attributes in process `syz.2.402'. [ 189.836955][ T6444] netlink: 'syz.0.404': attribute type 21 has an invalid length. [ 189.849523][ T5925] usb 2-1: device descriptor read/all, error -71 [ 189.964832][ T6451] tipc: Started in network mode [ 189.973637][ T6451] tipc: Node identity 403a14aa, cluster identity 4711 [ 189.989967][ T6451] tipc: Enabling of bearer rejected, failed to enable media [ 190.069571][ T6444] dummy0: entered promiscuous mode [ 190.138462][ T6444] dummy0: left promiscuous mode [ 191.226080][ T6467] fuse: Unknown parameter 'use00000000000000000000' [ 191.554271][ T6474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.416'. [ 191.585724][ T6478] netlink: 52 bytes leftover after parsing attributes in process `syz.2.417'. [ 191.633866][ T6474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.416'. [ 191.996062][ T6491] syzkaller0: entered promiscuous mode [ 192.014685][ T6491] syzkaller0: entered allmulticast mode [ 192.182716][ T6494] netlink: 'syz.3.425': attribute type 2 has an invalid length. [ 192.200947][ T6494] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 192.231809][ T6490] vcan0 speed is unknown, defaulting to 1000 [ 192.502194][ T6501] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 192.892231][ T29] audit: type=1326 audit(1724317278.818:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838d979e79 code=0x7fc00000 [ 192.948222][ T6507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.429'. [ 193.056660][ T6509] loop7: detected capacity change from 0 to 16384 [ 193.553334][ T29] audit: type=1326 audit(1724317278.868:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f838d979e79 code=0x7fc00000 [ 193.630687][ T29] audit: type=1326 audit(1724317278.878:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6502 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838d979e79 code=0x7fc00000 [ 194.651741][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.658305][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.406020][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 195.416212][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 195.992340][ T6544] loop7: detected capacity change from 0 to 16384 [ 196.944168][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.449'. [ 196.969707][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 197.543744][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 197.616001][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 197.743788][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 197.751058][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 197.788675][ T25] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 197.803768][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.811843][ T25] usb 1-1: Product: syz [ 197.819650][ T25] usb 1-1: Manufacturer: syz [ 197.824135][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 197.829832][ T25] usb 1-1: SerialNumber: syz [ 197.881190][ T25] usb 1-1: config 0 descriptor?? [ 197.936889][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.016146][ T6558] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.160393][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.283440][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 198.424150][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.577425][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 198.602366][ T25] usb 1-1: USB disconnect, device number 5 [ 198.613760][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 198.665121][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.723623][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 198.743038][ T29] audit: type=1326 audit(1724317284.668:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 198.770043][ T9] usb 5-1: SerialNumber: syz [ 198.778566][ T6588] udevd[6588]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.809871][ T29] audit: type=1326 audit(1724317284.668:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 198.857785][ T6564] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 198.897961][ T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 198.901053][ T29] audit: type=1326 audit(1724317284.668:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 198.993889][ T29] audit: type=1326 audit(1724317284.668:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 199.078386][ T29] audit: type=1326 audit(1724317284.668:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 199.112008][ T25] usb 5-1: USB disconnect, device number 4 [ 199.183313][ T29] audit: type=1326 audit(1724317284.668:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 199.215374][ T6600] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 199.253358][ T29] audit: type=1326 audit(1724317284.668:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7ffc0000 [ 199.483209][ T6611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.472'. [ 200.388867][ T6639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.485'. [ 200.831389][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.489'. [ 202.161799][ T6668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.497'. [ 202.335379][ T5274] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 203.000744][ T5274] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 203.283700][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 203.319528][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 203.341937][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.366045][ T5274] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.375335][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.571488][ T5274] usb 4-1: config 0 descriptor?? [ 203.621902][ T6662] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 203.661697][ T6683] fuse: Unknown parameter 'user_id00000000000000000000' [ 203.713714][ T3150] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 203.926243][ T3150] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 203.973740][ T3150] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 204.004449][ T3150] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 204.033027][ T3150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.055182][ T6676] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 204.120114][ T5274] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 204.140501][ T5274] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 204.196071][ T5274] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 204.302167][ T3150] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 204.333450][ T3150] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 204.371436][ T5281] usb 4-1: USB disconnect, device number 5 [ 204.494693][ T3150] usb 2-1: USB disconnect, device number 5 [ 204.500960][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 204.674742][ T6702] ip6_vti0: entered promiscuous mode [ 204.696117][ T6702] vlan2: entered promiscuous mode [ 204.715244][ T6702] ip6_vti0: left promiscuous mode [ 204.749025][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 204.963384][ T6704] team1: Mode "" not found [ 205.244884][ T6712] fuse: Unknown parameter 'user_id00000000000000000000' [ 206.045400][ T6723] Cannot find set identified by id 0 to match [ 206.335932][ T6731] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.523'. [ 206.387508][ T6731] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 206.969198][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 206.969214][ T4609] Bluetooth: hci3: command 0x0406 tx timeout [ 206.976266][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 207.276720][ T6756] ip6tnl0: entered promiscuous mode [ 207.294172][ T6756] vlan2: entered promiscuous mode [ 207.321178][ T6756] ip6tnl0: left promiscuous mode [ 207.653067][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 208.344013][ T5230] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 208.948930][ T29] audit: type=1326 audit(1724317294.848:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6773 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7fc00000 [ 209.043594][ T29] audit: type=1326 audit(1724317294.968:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6773 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eae579e79 code=0x7fc00000 [ 209.229361][ T29] audit: type=1326 audit(1724317295.108:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6773 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eae579e79 code=0x7fc00000 [ 210.652242][ T6812] tipc: Enabled bearer , priority 10 [ 210.691467][ T6812] tipc: Disabling bearer [ 211.343810][ T5230] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 212.504680][ T6839] pimreg3: entered allmulticast mode [ 212.546197][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 212.637602][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 213.415279][ T6855] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 213.548483][ T5230] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 214.544833][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.572'. [ 214.691514][ T6868] veth3: entered promiscuous mode [ 214.722357][ T6868] veth3: entered allmulticast mode [ 215.034256][ T6879] geneve1: entered allmulticast mode [ 215.643707][ T6899] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.747940][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.584'. [ 215.791829][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.584'. [ 215.874778][ T6906] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.586'. [ 215.976154][ T6907] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 217.890682][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 217.909583][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 224.529572][ T6950] netlink: 104 bytes leftover after parsing attributes in process `syz.0.599'. [ 224.570919][ T29] audit: type=1326 audit(1724317310.498:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6949 comm="syz.0.599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x0 [ 225.206129][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 225.304625][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 225.592312][ T6970] ptrace attach of "./syz-executor exec"[5223] was attempted by "./syz-executor exec"[6970] [ 226.453425][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.473268][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.482170][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.502661][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.519492][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 226.527819][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.604101][ T5274] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 226.640846][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.747570][ T6994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.616'. [ 226.763981][ T6995] netlink: 32 bytes leftover after parsing attributes in process `syz.4.616'. [ 226.803719][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 226.825028][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 226.852361][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.863215][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.863250][ T5274] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.863278][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 226.863308][ T5274] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 226.863355][ T5274] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 226.863385][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.950870][ T5274] usb 1-1: config 0 descriptor?? [ 226.962231][ T6983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.999996][ T6991] vcan0 speed is unknown, defaulting to 1000 [ 227.271673][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.978188][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.134049][ T5227] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 228.190108][ T5925] usb 1-1: USB disconnect, device number 6 [ 228.377555][ T7005] netlink: 104 bytes leftover after parsing attributes in process `syz.4.618'. [ 228.460132][ T29] audit: type=1326 audit(1724317314.388:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.4.618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88b6779e79 code=0x0 [ 228.566495][ T5227] Bluetooth: hci3: command tx timeout [ 228.609282][ T11] bridge_slave_1: left allmulticast mode [ 228.644704][ T11] bridge_slave_1: left promiscuous mode [ 228.687815][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.719847][ T11] bridge_slave_0: left allmulticast mode [ 228.732194][ T11] bridge_slave_0: left promiscuous mode [ 228.745277][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.650710][ T5227] Bluetooth: hci3: command tx timeout [ 231.168465][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.205961][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.214632][ T7051] netlink: 104 bytes leftover after parsing attributes in process `syz.2.630'. [ 231.223154][ T29] audit: type=1326 audit(1724317317.148:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7050 comm="syz.2.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f838d979e79 code=0x0 [ 231.251309][ T11] bond0 (unregistering): Released all slaves [ 231.408687][ T11] tipc: Left network mode [ 232.734767][ T5227] Bluetooth: hci3: command tx timeout [ 233.112662][ T6991] chnl_net:caif_netlink_parms(): no params data found [ 233.308183][ T11] hsr_slave_0: left promiscuous mode [ 233.383105][ T11] hsr_slave_1: left promiscuous mode [ 233.411450][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.444448][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.467120][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.483610][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.557604][ T11] veth1_macvtap: left promiscuous mode [ 233.574233][ T11] veth0_macvtap: left promiscuous mode [ 233.584326][ T11] veth1_vlan: left promiscuous mode [ 233.735374][ T7100] Bluetooth: MGMT ver 1.23 [ 233.807658][ T11] infiniband syz1: set down [ 234.804128][ T5227] Bluetooth: hci3: command tx timeout [ 234.908468][ T11] team0 (unregistering): Port device team_slave_1 removed [ 235.004071][ T11] team0 (unregistering): Port device team_slave_0 removed [ 235.523272][ T2467] smc: removing ib device syz1 [ 235.571990][ T5925] vcan0 speed is unknown, defaulting to 1000 [ 235.885331][ T7134] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.270347][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 237.603644][ T5227] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 237.675446][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.682887][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.701081][ T6991] bridge_slave_0: entered allmulticast mode [ 237.766684][ T6991] bridge_slave_0: entered promiscuous mode [ 237.816374][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.835245][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.845821][ T6991] bridge_slave_1: entered allmulticast mode [ 237.873075][ T6991] bridge_slave_1: entered promiscuous mode [ 238.892279][ T7177] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.301626][ T7181] nlmon0: entered promiscuous mode [ 239.323931][ T7181] vlan0: entered promiscuous mode [ 239.345128][ T7181] nlmon0: left promiscuous mode [ 239.551286][ T6991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.672047][ T6991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.492791][ T7193] netlink: 124 bytes leftover after parsing attributes in process `syz.4.673'. [ 241.872236][ T6991] team0: Port device team_slave_0 added [ 241.910446][ T6991] team0: Port device team_slave_1 added [ 241.924185][ T7219] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.126930][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.145003][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.183292][ T6991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.247214][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.252374][ T29] audit: type=1326 audit(1724317328.178:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7ffc0000 [ 242.300793][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.356856][ T29] audit: type=1326 audit(1724317328.218:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7ffc0000 [ 242.408777][ T6991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.489880][ T29] audit: type=1326 audit(1724317328.218:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f7be8d79e79 code=0x7ffc0000 [ 242.594775][ T29] audit: type=1326 audit(1724317328.218:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7ffc0000 [ 242.688366][ T7238] nlmon0: entered promiscuous mode [ 242.707734][ T29] audit: type=1326 audit(1724317328.218:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be8d79e79 code=0x7ffc0000 [ 242.712397][ T7239] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 242.754719][ T7238] vlan0: entered promiscuous mode [ 242.819005][ T7238] nlmon0: left promiscuous mode [ 242.939078][ T6991] hsr_slave_0: entered promiscuous mode [ 243.024128][ T6991] hsr_slave_1: entered promiscuous mode [ 243.055779][ T6991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.063425][ T6991] Cannot create hsr debugfs directory [ 243.420158][ T7256] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.231412][ T7284] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 245.662179][ T7312] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 245.752790][ T7312] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 245.774640][ T7312] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 245.792471][ T7312] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 246.631703][ T7312] geneve2: entered promiscuous mode [ 246.778565][ T7312] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19971 - 0 [ 246.792893][ T7312] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19971 - 0 [ 246.802042][ T7312] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19971 - 0 [ 246.844005][ T7312] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19971 - 0 [ 246.930802][ T6991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.959983][ T6991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.034862][ T6991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.076594][ T7332] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 247.105417][ T6991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.568057][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.660440][ T6991] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.670078][ T5227] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 247.732429][ T2467] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.739768][ T2467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.816097][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.823398][ T5410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.646531][ T6991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.120476][ T6991] veth0_vlan: entered promiscuous mode [ 249.360124][ T6991] veth1_vlan: entered promiscuous mode [ 249.701481][ T6991] veth0_macvtap: entered promiscuous mode [ 249.782375][ T6991] veth1_macvtap: entered promiscuous mode [ 250.292289][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.358415][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.410899][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.421719][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.434928][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.445675][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.455573][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.466085][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.510856][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.538845][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.592998][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.649398][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.693792][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.733856][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.785641][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.803739][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.833692][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.871566][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.066774][ T5227] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 252.263797][ T6991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.278690][ T6991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.297910][ T6991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.498240][ T6991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.873188][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.923787][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.018894][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.051325][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.219872][ T7453] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 254.451126][ T7491] binder: 7486:7491 ioctl 4018620d 0 returned -22 [ 254.470089][ T7491] binder: 7486:7491 unknown command 0 [ 254.475614][ T7491] binder: 7486:7491 ioctl c0306201 200003c0 returned -22 [ 254.484642][ T7491] binder: 7486:7491 ioctl 89f1 20000140 returned -22 [ 254.873103][ T7495] nlmon0: entered promiscuous mode [ 254.884541][ T7495] vlan2: entered promiscuous mode [ 254.900273][ T7495] nlmon0: left promiscuous mode [ 254.963811][ T5227] Bluetooth: hci3: command tx timeout [ 255.831853][ T7534] xt_bpf: check failed: parse error [ 255.833764][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 255.951838][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 256.087162][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.094248][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.194368][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 256.277371][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 256.384241][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.394326][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.404356][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 256.417043][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 256.430665][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 256.499835][ T7541] nlmon0: entered promiscuous mode [ 256.503650][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.523634][ T7541] vlan2: entered promiscuous mode [ 256.581601][ T7541] nlmon0: left promiscuous mode [ 256.633311][ T9] usb 3-1: config 0 descriptor?? [ 256.651281][ T7524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.944782][ T5227] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 256.954785][ T8] usb 3-1: USB disconnect, device number 4 [ 257.068011][ T7548] netem: incorrect ge model size [ 257.117896][ T7548] netem: change failed [ 257.164117][ T29] audit: type=1326 audit(1724317343.078:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7549 comm="syz.3.775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2721979e79 code=0x0 [ 257.508546][ T7560] sch_fq: defrate 0 ignored. [ 258.613676][ T5274] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 258.648041][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 259.343746][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 259.569900][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.592896][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.606478][ T5274] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 259.616921][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.635031][ T5274] usb 4-1: config 0 descriptor?? [ 260.062426][ T7605] xt_bpf: check failed: parse error [ 260.078451][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.107006][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.119829][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.129075][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.148881][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.169556][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.185928][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.198082][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.217306][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.225149][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 260.252536][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.268601][ T5274] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 260.302501][ T5274] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 260.354819][ T5274] usb 4-1: USB disconnect, device number 6 [ 260.413733][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 260.431885][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 260.471903][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.482620][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.493099][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 260.505745][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 260.516745][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 260.527146][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.551336][ T9] usb 3-1: config 0 descriptor?? [ 260.571443][ T7601] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 260.760490][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 260.827868][ T5227] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 260.845343][ T9] usb 3-1: USB disconnect, device number 5 [ 261.224392][ T5274] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 261.841484][ T5274] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 262.038951][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.073101][ T5274] usb 2-1: config 0 descriptor?? [ 262.155648][ T5274] usb 2-1: Invalid firmware size=18. [ 262.173801][ T5227] Bluetooth: hci3: command tx timeout [ 262.416027][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 262.585545][ T5276] usb 2-1: USB disconnect, device number 6 [ 263.313688][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 263.567643][ T7652] netlink: 48 bytes leftover after parsing attributes in process `syz.2.811'. [ 263.585439][ T7652] netlink: 48 bytes leftover after parsing attributes in process `syz.2.811'. [ 264.035147][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 265.891992][ T7690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.826'. [ 266.029494][ T7690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.826'. [ 266.040148][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 266.827866][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 268.233383][ T7729] binder: BINDER_SET_CONTEXT_MGR already set [ 268.239967][ T7729] binder: 7719:7729 ioctl 4018620d 20000040 returned -16 [ 268.263721][ T7729] binder: 7719:7729 ioctl c0306201 200003c0 returned -22 [ 269.792512][ T5227] Bluetooth: hci3: command tx timeout [ 270.225812][ T7723] Bluetooth: MGMT ver 1.23 [ 271.297287][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 272.234683][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 377.283445][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 377.290498][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7745/1:b..l [ 377.298875][ C0] rcu: (detected by 0, t=10502 jiffies, g=25637, q=406 ncpus=2) [ 377.306713][ C0] task:syz.1.846 state:R running task stack:23800 pid:7745 tgid:7743 ppid:5225 flags:0x00004006 [ 377.320074][ C0] Call Trace: [ 377.323391][ C0] [ 377.326369][ C0] __schedule+0x17ae/0x4a10 [ 377.331204][ C0] ? __pfx___schedule+0x10/0x10 [ 377.336091][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 377.342150][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 377.347484][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 377.352749][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 377.358489][ C0] ? timekeeping_get_ns+0x5c/0x420 [ 377.363640][ C0] irqentry_exit+0x5e/0x90 [ 377.368058][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.374297][ C0] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 377.380480][ C0] Code: 8b e8 24 dc 56 0a 65 66 8b 05 a4 79 ac 7e 66 85 c0 75 5d bf 01 00 00 00 e8 fd a4 0b 00 e8 d8 91 43 00 fb 65 8b 05 68 79 ac 7e <85> c0 75 05 e8 d7 58 a9 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 377.400522][ C0] RSP: 0018:ffffc90009287840 EFLAGS: 00000286 [ 377.407696][ C0] RAX: 0000000080000000 RBX: 1ffff92001250f0c RCX: ffffffff94cec903 [ 377.415899][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: ffffffff8c3f9980 [ 377.424147][ C0] RBP: ffffc900092878f0 R08: ffffffff8ff6c56f R09: 1ffffffff1fed8ad [ 377.432669][ C0] R10: dffffc0000000000 R11: fffffbfff1fed8ae R12: dffffc0000000000 [ 377.441275][ C0] R13: 1ffff92001250f10 R14: ffffc90009287880 R15: 0000000000000200 [ 377.449562][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 377.455063][ C0] ? bpf_test_run+0x370/0xa90 [ 377.460033][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 377.466166][ C0] bpf_test_run+0x56b/0xa90 [ 377.470909][ C0] ? do_syscall_64+0xf3/0x230 [ 377.475686][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.482041][ C0] ? bpf_test_run+0x370/0xa90 [ 377.486964][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 377.492240][ C0] ? eth_type_trans+0x4e2/0x7a0 [ 377.497334][ C0] ? __pfx_eth_type_trans+0x10/0x10 [ 377.502765][ C0] ? convert___skb_to_skb+0x41/0x620 [ 377.508622][ C0] bpf_prog_test_run_skb+0xc97/0x1820 [ 377.514523][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 377.520578][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 377.526715][ C0] bpf_prog_test_run+0x33a/0x3b0 [ 377.531875][ C0] __sys_bpf+0x48d/0x810 [ 377.536259][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 377.541165][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 377.547914][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 377.554544][ C0] ? do_syscall_64+0x100/0x230 [ 377.559519][ C0] __x64_sys_bpf+0x7c/0x90 [ 377.564040][ C0] do_syscall_64+0xf3/0x230 [ 377.568647][ C0] ? clear_bhb_loop+0x35/0x90 [ 377.573479][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.579605][ C0] RIP: 0033:0x7f3c70f79e79 [ 377.584061][ C0] RSP: 002b:00007f3c709ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.592526][ C0] RAX: ffffffffffffffda RBX: 00007f3c71115f80 RCX: 00007f3c70f79e79 [ 377.600649][ C0] RDX: 0000000000000050 RSI: 0000000020000f40 RDI: 000000000000000a [ 377.609087][ C0] RBP: 00007f3c70fe7916 R08: 0000000000000000 R09: 0000000000000000 [ 377.617109][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.625280][ C0] R13: 0000000000000000 R14: 00007f3c71115f80 R15: 00007ffcc4c22648 [ 377.633884][ C0] [ 377.637178][ C0] rcu: rcu_preempt kthread starved for 10252 jiffies! g25637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 377.648487][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 377.659121][ C0] rcu: RCU grace-period kthread stack dump: [ 377.665117][ C0] task:rcu_preempt state:R running task stack:26048 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 377.677136][ C0] Call Trace: [ 377.680510][ C0] [ 377.683468][ C0] __schedule+0x17ae/0x4a10 [ 377.688198][ C0] ? __pfx___schedule+0x10/0x10 [ 377.693066][ C0] ? __pfx_lock_release+0x10/0x10 [ 377.698127][ C0] ? __asan_memset+0x23/0x50 [ 377.702813][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 377.708735][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 377.715126][ C0] ? schedule+0x90/0x320 [ 377.719404][ C0] schedule+0x14b/0x320 [ 377.723595][ C0] schedule_timeout+0x1be/0x310 [ 377.728480][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 377.733872][ C0] ? __pfx_process_timeout+0x10/0x10 [ 377.739186][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 377.744757][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 377.749642][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 377.754884][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 377.761072][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 377.766619][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 377.772818][ C0] ? finish_swait+0xd4/0x1e0 [ 377.777531][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 377.782278][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.787674][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 377.793674][ C0] ? __kthread_parkme+0x169/0x1d0 [ 377.798714][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.803934][ C0] kthread+0x2f0/0x390 [ 377.808010][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.813236][ C0] ? __pfx_kthread+0x10/0x10 [ 377.817881][ C0] ret_from_fork+0x4b/0x80 [ 377.822416][ C0] ? __pfx_kthread+0x10/0x10 [ 377.827032][ C0] ret_from_fork_asm+0x1a/0x30 [ 377.832078][ C0] [ 377.835123][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 377.842611][ C0] Sending NMI from CPU 0 to CPUs 1: [ 377.848773][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30