last executing test programs: 10.264071072s ago: executing program 0 (id=615): bpf$MAP_CREATE(0x0, 0x0, 0x0) userfaultfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) 9.236111178s ago: executing program 0 (id=619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.007875534s ago: executing program 0 (id=624): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r1 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000100)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000100003"], 0xf0}}, 0x8000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0", 0x2c}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x6, r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x40047452, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 7.676060051s ago: executing program 2 (id=628): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3a) 7.469279023s ago: executing program 2 (id=630): socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x891b, 0x0) r0 = syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4e, &(0x7f0000000680)=@string={0x4e, 0x3, "59822274156ef9501c49df894e4865e45b8a563a211496a5e88028558904dbf15a298ae3d51cc8defb72adacf90a10b2fa4b0e06ae70dd3227568e9bb7150dd140f1996f228303421bac8a67"}}, {0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="09038661a0e0a1c26e"]}, {0x0, 0x0}, {0x91, &(0x7f00000004c0)=ANY=[]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42d}}]}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x7) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffde0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f00005c3000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/159) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) r2 = socket(0x28, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x28, 0x6, 0x20000000, 0x10) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x0, 0x3a) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000004200)=[{&(0x7f0000003fc0)=""/45, 0x2d}], 0x1, 0x80000001, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000600)=0x1, 0x4) 5.666816278s ago: executing program 1 (id=635): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.144260387s ago: executing program 1 (id=637): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 5.1416393s ago: executing program 4 (id=638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r5}}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4000) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x60, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xb0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10) lsm_get_self_attr(0x68, 0xffffffffffffffff, &(0x7f00000000c0), 0x1) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00', @ANYRES16, @ANYBLOB="088029bd7000ff0c0006000000000000000000050013008000000000000600000000ffffffee0005001300000800030000000000000000", @ANYRES32=r7, @ANYBLOB="0c00060003000000000000000c00060002000000000000000c0006000200000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x24040040}, 0x20000040) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) 4.999874763s ago: executing program 0 (id=640): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0xfffffffffffffffd, 0x84001) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000044a875150400000001000000e4ff3800", @ANYRES32=0x1, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$igmp(0x2, 0x3, 0x2) recvmsg$kcm(r5, &(0x7f0000000400)={&(0x7f0000000440)=@generic, 0x80, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000980)=""/174, 0xae}, {&(0x7f0000000f40)=""/241, 0xf1}, {&(0x7f0000000b00)=""/163, 0xa3}, {&(0x7f0000000c80)=""/188, 0xbc}, {&(0x7f0000000e40)=""/225, 0xe1}, {&(0x7f0000000840)=""/95, 0x5f}], 0x8}, 0x40000061) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@local, @multicast1, 0x0, "ea0f38d3a15892de7510907fff2808f4430000e4353d68bcfa00"}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040), 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = syz_io_uring_complete(0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r10 = syz_io_uring_setup(0x4c35, &(0x7f0000000080)={0x0, 0x3, 0x1003, 0x0, 0x203, 0x0, r8}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x313c, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000001440)) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x40}) io_uring_enter(r10, 0x6ed3, 0x0, 0x0, 0x0, 0x0) write(r9, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000080)={0xf0f046}) close_range(r0, 0xffffffffffffffff, 0x0) 4.967831467s ago: executing program 4 (id=641): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e002803008c71ef288563"], 0xffdd) 4.816093456s ago: executing program 1 (id=643): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902479875f37538e486dd6317ce623ee1"], 0xfdef) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3.796523183s ago: executing program 3 (id=644): r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r1 = open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) msgctl$IPC_RMID(0x0, 0x0) get_mempolicy(&(0x7f0000000200), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000340)="cd37a1f24f73da99", 0x8}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14149fffffffff000000001c000000000000000000000007"], 0x40}, 0x0) read$char_usb(r7, &(0x7f0000000080)=""/139, 0xfdef) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x13, &(0x7f0000000240)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb68}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000040)='GPL\x00', 0x4, 0xc1, &(0x7f0000000300)=""/193, 0x40f00, 0x12, '\x00', 0x0, @sk_msg, r1, 0x8, &(0x7f0000000500)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x1ff}, 0x10, r8, r5, 0x5, &(0x7f00000005c0)=[r1, r1, r1, r1], &(0x7f0000000600)=[{0x2, 0x2, 0x2, 0x6}, {0x3, 0x4, 0xf, 0x6}, {0x2, 0x3, 0x10, 0x7}, {0x2, 0x4, 0x1, 0xa}, {0x4, 0x2, 0xe, 0x1}], 0x10, 0x80000001, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e20}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001400000000000000000000000100000000000000000000001c000000000000000000000007000000860c"], 0x50}}], 0x2, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$inet(0x2, 0x4, 0x0) 3.721711835s ago: executing program 4 (id=645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90824fc60", 0x14}], 0x1}, 0x0) 3.697214722s ago: executing program 1 (id=646): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setitimer(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 3.181853219s ago: executing program 4 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b80100001800c000100636f756e7465720048"], 0x12c}}, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000006c0)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair(0x29, 0x0, 0x2, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="38020000300009007fffffff000000000700002c040006801e0001"], 0x238}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001222a88100000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capget(&(0x7f00000001c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1}}) syz_usbip_server_init(0x5) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x0) 2.664074765s ago: executing program 3 (id=648): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) 2.587585902s ago: executing program 3 (id=649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 2.509261828s ago: executing program 2 (id=650): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x4c9, 0x40000001, &(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x80000000, @private2, 0x80}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) getrlimit(0xc, &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 2.335087826s ago: executing program 2 (id=651): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0xfffffffffffffffd, 0x84001) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000044a875150400000001000000e4ff3800", @ANYRES32=0x1, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$igmp(0x2, 0x3, 0x2) recvmsg$kcm(r5, &(0x7f0000000400)={&(0x7f0000000440)=@generic, 0x80, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000980)=""/174, 0xae}, {&(0x7f0000000f40)=""/241, 0xf1}, {&(0x7f0000000b00)=""/163, 0xa3}, {&(0x7f0000000c80)=""/188, 0xbc}, {&(0x7f0000000e40)=""/225, 0xe1}, {&(0x7f0000000840)=""/95, 0x5f}], 0x8}, 0x40000061) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@local, @multicast1, 0x0, "ea0f38d3a15892de7510907fff2808f4430000e4353d68bcfa00"}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040), 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = syz_io_uring_complete(0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r10 = syz_io_uring_setup(0x4c35, &(0x7f0000000080)={0x0, 0x3, 0x1003, 0x0, 0x203, 0x0, r8}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x313c, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000001440)) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x40}) io_uring_enter(r10, 0x6ed3, 0x0, 0x0, 0x0, 0x0) write(r9, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000080)={0xf0f046}) close_range(r0, 0xffffffffffffffff, 0x0) 2.131559358s ago: executing program 0 (id=652): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 2.003109398s ago: executing program 0 (id=653): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0x67, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b70, &(0x7f00000001c0)={0x18, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x53, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x7, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, "dc"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xf21, 0x800, 0x10, 0xf9}, [@obex={0x5, 0x24, 0x15, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf, 0x40, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x5, 0x8}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xe8, 0xe, 0x1, 0x20, 0x3}, 0x113, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xa, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}, {0xfe, &(0x7f00000002c0)=@string={0xfe, 0x3, "3d1db439f46df335e7829505bf7425972b2f13231241bf34ed845c9ac15cbd4551e8117dff860dc6d205cff1b89cc524567d9c345d0aa4d6304226cce18f04da2c3b74c93b3330a17862804dde1680e9d4b85ba46ef7623338e686d317565da9ba8b7c7319b6d84028515be1584f50d01653d50243c257f77e5761217b3acb71d03a8ed0dde66eddc7ca636b0eadf2ebc4f0b2d37813d37d7b121e50052392f4dae9669f58c503c2878c74dd3e521fe6cc9c6ad09c9509dc240afb6aad5891e3b3643006c65fd6a2895c5b769d8d426a3cbd380bbd8b12757ee63fbc57d03f364e0b74b901a785a4d7d4966c4d9e0514497274b7f7063bfd2d9867da"}}, {0x5a, &(0x7f0000000400)=@string={0x5a, 0x3, "f9fe5d49d4d5e0e5eb0eaf9df446bab616143263aa2077c21c3a9b39ebc0424fea33e5a1b0db4b4e2ad11f0f97a028dfd242a6caedf7b9697e66a07f8f8f722e962ba653021c5ada89563ed914279e224d6b2889b8c0f1e2"}}, {0x5d, &(0x7f00000004c0)=@string={0x5d, 0x3, "c7226c7534b0dbaf4655eaa7df67b9988198248f03d010278f77e52abb08e54f0dac9dca4bb57fbbf06aa24de237f937257d300aa961ddbdd0a9427e62a0cfc67ea468f7f189e0dfc4ba6b5e9b8ead41d2360f4da9128c03145f9f"}}, {0x33, &(0x7f0000000540)=@string={0x33, 0x3, "16d1debf266cec8c0fd5e73b0ceeda6ea0ef8e5d4e89b20b54cb42bae7350e3279432a39d0bdee0bb01be1f846e43e0a58"}}, {0xb, &(0x7f0000000580)=@string={0xb, 0x3, "9fed8597db1eddf40a"}}, {0xb6, &(0x7f00000005c0)=@string={0xb6, 0x3, "6af4e8deb16b6c63209e3d1005a605327b5bafe8dac2109960959af2f9d4e7b7477ee4c9ca798da764f2fbfd5b1d76efb1935b8e4d1b0c168353aa1ebe806507499776c1cd28aa0b7feb8d6d16d0ca252d27c5efcc346001f49de666b1bea50978499793265d73bdb84a9c417fa9b2715061eb4f7981881a4957ca39e560afa478d7886ccbfe6e475ef4ef6c232503fa740640fb2e09207b8d0a8855197ecd80dac0b5b2bf136b9976e1f731e7fadf3368c1c46e"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x16, &(0x7f00000006c0)=@string={0x16, 0x3, "02386e023ed68c7272e3adb796f91cf571b40156"}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000004000)=""/102399, 0x18fff}, {&(0x7f0000000ac0)=""/4095, 0xfff}], 0x2, 0xfffffffd, 0x0) r3 = mq_open(&(0x7f0000000200)='^-!-):(%@^+\x00', 0x40, 0x104, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000380)) socket$inet_udp(0x2, 0x2, 0x0) 1.771948703s ago: executing program 4 (id=654): bpf$MAP_CREATE(0x0, 0x0, 0x0) userfaultfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x48) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) 684.36527ms ago: executing program 4 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e002803008c71ef288563"], 0xffdd) 594.704946ms ago: executing program 3 (id=656): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902479875f37538e486dd6317ce623ee1"], 0xfdef) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 416.596954ms ago: executing program 1 (id=657): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 342.786319ms ago: executing program 3 (id=658): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r1}, &(0x7f00000007c0), &(0x7f0000000800)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 210.776394ms ago: executing program 2 (id=659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 200.505466ms ago: executing program 1 (id=660): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x244, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x4003, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a0) inotify_init1(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000004c0)={@dev={0xfe, 0x80, '\x00', 0xa}}, 0x14) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000240)={0x1d, r8, 0x0, {0x0, 0xf0, 0x5}, 0xfe}, 0x18) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000240)=0x1) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 133.234326ms ago: executing program 3 (id=661): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0x67, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b70, &(0x7f00000001c0)={0x18, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x53, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x7, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, "dc"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xf21, 0x800, 0x10, 0xf9}, [@obex={0x5, 0x24, 0x15, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf, 0x40, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x5, 0x8}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xe8, 0xe, 0x1, 0x20, 0x3}, 0x113, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xa, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}, {0xfe, &(0x7f00000002c0)=@string={0xfe, 0x3, "3d1db439f46df335e7829505bf7425972b2f13231241bf34ed845c9ac15cbd4551e8117dff860dc6d205cff1b89cc524567d9c345d0aa4d6304226cce18f04da2c3b74c93b3330a17862804dde1680e9d4b85ba46ef7623338e686d317565da9ba8b7c7319b6d84028515be1584f50d01653d50243c257f77e5761217b3acb71d03a8ed0dde66eddc7ca636b0eadf2ebc4f0b2d37813d37d7b121e50052392f4dae9669f58c503c2878c74dd3e521fe6cc9c6ad09c9509dc240afb6aad5891e3b3643006c65fd6a2895c5b769d8d426a3cbd380bbd8b12757ee63fbc57d03f364e0b74b901a785a4d7d4966c4d9e0514497274b7f7063bfd2d9867da"}}, {0x82, &(0x7f0000000400)=@string={0x82, 0x3, "f9fe5d49d4d5e0e5eb0eaf9df446bab616143263aa2077c21c3a9b39ebc0424fea33e5a1b0db4b4e2ad11f0f97a028dfd242a6caedf7b9697e66a07f8f8f722e962ba653021c5ada89563ed914279e224d6b2889b8c0f1e2b26c47adaa16684b4bfd08117c0e6e67e7d5ddde4f34daf32dcbe196c005094454f319f6f2006819"}}, {0x5d, &(0x7f00000004c0)=@string={0x5d, 0x3, "c7226c7534b0dbaf4655eaa7df67b9988198248f03d010278f77e52abb08e54f0dac9dca4bb57fbbf06aa24de237f937257d300aa961ddbdd0a9427e62a0cfc67ea468f7f189e0dfc4ba6b5e9b8ead41d2360f4da9128c03145f9f"}}, {0x33, &(0x7f0000000540)=@string={0x33, 0x3, "16d1debf266cec8c0fd5e73b0ceeda6ea0ef8e5d4e89b20b54cb42bae7350e3279432a39d0bdee0bb01be1f846e43e0a58"}}, {0xb, &(0x7f0000000580)=@string={0xb, 0x3, "9fed8597db1eddf40a"}}, {0xb6, &(0x7f00000005c0)=@string={0xb6, 0x3, "6af4e8deb16b6c63209e3d1005a605327b5bafe8dac2109960959af2f9d4e7b7477ee4c9ca798da764f2fbfd5b1d76efb1935b8e4d1b0c168353aa1ebe806507499776c1cd28aa0b7feb8d6d16d0ca252d27c5efcc346001f49de666b1bea50978499793265d73bdb84a9c417fa9b2715061eb4f7981881a4957ca39e560afa478d7886ccbfe6e475ef4ef6c232503fa740640fb2e09207b8d0a8855197ecd80dac0b5b2bf136b9976e1f731e7fadf3368c1c46e"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x16, &(0x7f00000006c0)=@string={0x16, 0x3, "02386e023ed68c7272e3adb796f91cf571b40156"}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000004000)=""/102399, 0x18fff}, {&(0x7f0000000ac0)=""/4095, 0xfff}], 0x2, 0xfffffffd, 0x0) r3 = mq_open(&(0x7f0000000200)='^-!-):(%@^+\x00', 0x40, 0x104, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000380)) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 2 (id=662): socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x10) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 54.790438][ T5211] cgroup: Unknown subsys name 'net' [ 54.961743][ T5211] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.360716][ T5211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.681961][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.690773][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.698955][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.707650][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.715584][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.725532][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.732875][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.741880][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.749972][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.752841][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.760619][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.773674][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.774210][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.783166][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.795143][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.803756][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.804058][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.822070][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.824840][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.829999][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.837912][ T4612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.844302][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.852732][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.864531][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.865153][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.872326][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.879995][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.896110][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.929995][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.938142][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.519923][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 59.535932][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 59.574098][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 59.586236][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 59.714040][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 59.786789][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.795161][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.803344][ T5226] bridge_slave_0: entered allmulticast mode [ 59.810347][ T5226] bridge_slave_0: entered promiscuous mode [ 59.847513][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.855771][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.863945][ T5223] bridge_slave_0: entered allmulticast mode [ 59.871139][ T5223] bridge_slave_0: entered promiscuous mode [ 59.888944][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.896264][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.903616][ T5226] bridge_slave_1: entered allmulticast mode [ 59.910331][ T5226] bridge_slave_1: entered promiscuous mode [ 59.941219][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.948940][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.956294][ T5223] bridge_slave_1: entered allmulticast mode [ 59.963565][ T5223] bridge_slave_1: entered promiscuous mode [ 59.997423][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.005035][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.012184][ T5222] bridge_slave_0: entered allmulticast mode [ 60.019858][ T5222] bridge_slave_0: entered promiscuous mode [ 60.027779][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.035554][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.042820][ T5222] bridge_slave_1: entered allmulticast mode [ 60.049557][ T5222] bridge_slave_1: entered promiscuous mode [ 60.056330][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.064020][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.071175][ T5225] bridge_slave_0: entered allmulticast mode [ 60.078271][ T5225] bridge_slave_0: entered promiscuous mode [ 60.120934][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.130974][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.138963][ T5225] bridge_slave_1: entered allmulticast mode [ 60.146985][ T5225] bridge_slave_1: entered promiscuous mode [ 60.157148][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.169490][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.193495][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.206393][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.285407][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.297234][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.308903][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.327844][ T5223] team0: Port device team_slave_0 added [ 60.334986][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.342280][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.349707][ T5224] bridge_slave_0: entered allmulticast mode [ 60.357130][ T5224] bridge_slave_0: entered promiscuous mode [ 60.377553][ T5226] team0: Port device team_slave_0 added [ 60.393917][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.415754][ T5223] team0: Port device team_slave_1 added [ 60.431032][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.438503][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.445909][ T5224] bridge_slave_1: entered allmulticast mode [ 60.452797][ T5224] bridge_slave_1: entered promiscuous mode [ 60.461638][ T5226] team0: Port device team_slave_1 added [ 60.499013][ T5225] team0: Port device team_slave_0 added [ 60.526713][ T5222] team0: Port device team_slave_0 added [ 60.547503][ T5225] team0: Port device team_slave_1 added [ 60.564585][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.571553][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.598094][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.612433][ T5222] team0: Port device team_slave_1 added [ 60.631448][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.642163][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.668578][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.704178][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.716870][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.726745][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.734252][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.760806][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.780629][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.787823][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.814234][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.826170][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.833614][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.860379][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.899792][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.907009][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.932998][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.945767][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.953777][ T5243] Bluetooth: hci4: command tx timeout [ 60.953782][ T54] Bluetooth: hci0: command tx timeout [ 60.959517][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.965129][ T5237] Bluetooth: hci3: command tx timeout [ 60.991023][ T5243] Bluetooth: hci2: command tx timeout [ 60.996774][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.019720][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.026735][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.052768][ T54] Bluetooth: hci1: command tx timeout [ 61.058313][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.093462][ T5224] team0: Port device team_slave_0 added [ 61.142354][ T5224] team0: Port device team_slave_1 added [ 61.173152][ T5226] hsr_slave_0: entered promiscuous mode [ 61.179519][ T5226] hsr_slave_1: entered promiscuous mode [ 61.192294][ T5225] hsr_slave_0: entered promiscuous mode [ 61.198810][ T5225] hsr_slave_1: entered promiscuous mode [ 61.207330][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.215168][ T5225] Cannot create hsr debugfs directory [ 61.248723][ T5222] hsr_slave_0: entered promiscuous mode [ 61.255114][ T5222] hsr_slave_1: entered promiscuous mode [ 61.261163][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.269222][ T5222] Cannot create hsr debugfs directory [ 61.293969][ T5223] hsr_slave_0: entered promiscuous mode [ 61.300525][ T5223] hsr_slave_1: entered promiscuous mode [ 61.307350][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.315348][ T5223] Cannot create hsr debugfs directory [ 61.375503][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.382490][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.409556][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.462047][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.469531][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.496208][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.655985][ T5224] hsr_slave_0: entered promiscuous mode [ 61.662262][ T5224] hsr_slave_1: entered promiscuous mode [ 61.672229][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.680477][ T5224] Cannot create hsr debugfs directory [ 61.974743][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.006595][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.020165][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.035714][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.084862][ T5223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.104533][ T5223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.115288][ T5223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.134305][ T5223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.205239][ T5222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.225412][ T5222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.237834][ T5222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.267890][ T5222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.381433][ T5224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.390894][ T5224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.400402][ T5224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.410401][ T5224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.431753][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.526892][ T5225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.541309][ T5225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.565257][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.575950][ T5225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.585427][ T5225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.604319][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.638578][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.664415][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.671750][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.694817][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.701925][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.744003][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.751101][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.765503][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.772675][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.872392][ T5223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.885416][ T5223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.018123][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.033298][ T54] Bluetooth: hci0: command tx timeout [ 63.038922][ T5243] Bluetooth: hci2: command tx timeout [ 63.038952][ T5230] Bluetooth: hci4: command tx timeout [ 63.051259][ T5237] Bluetooth: hci3: command tx timeout [ 63.060731][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.072518][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.114154][ T5237] Bluetooth: hci1: command tx timeout [ 63.174928][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.186330][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.213542][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.228970][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.236341][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.248697][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.255889][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.288991][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.296700][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.312795][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.320138][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.360483][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.367715][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.391277][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.398459][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.440945][ T5225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.455680][ T5225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.483553][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.580962][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.679610][ T5223] veth0_vlan: entered promiscuous mode [ 63.756110][ T5223] veth1_vlan: entered promiscuous mode [ 63.900352][ T5226] veth0_vlan: entered promiscuous mode [ 63.919505][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.950722][ T5226] veth1_vlan: entered promiscuous mode [ 63.986001][ T5223] veth0_macvtap: entered promiscuous mode [ 64.010948][ T5223] veth1_macvtap: entered promiscuous mode [ 64.061451][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.116765][ T5226] veth0_macvtap: entered promiscuous mode [ 64.130537][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.146675][ T5223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.156814][ T5223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.166502][ T5223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.175578][ T5223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.205974][ T5226] veth1_macvtap: entered promiscuous mode [ 64.247709][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.295278][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.329173][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.340942][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.352840][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.430787][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.442247][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.456457][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.490154][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.499375][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.508784][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.518300][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.538242][ T5224] veth0_vlan: entered promiscuous mode [ 64.547089][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.565503][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.636890][ T5224] veth1_vlan: entered promiscuous mode [ 64.654610][ T5222] veth0_vlan: entered promiscuous mode [ 64.666007][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.690955][ T5225] veth0_vlan: entered promiscuous mode [ 64.697112][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.770112][ T5224] veth0_macvtap: entered promiscuous mode [ 64.785382][ T5222] veth1_vlan: entered promiscuous mode [ 64.850749][ T5225] veth1_vlan: entered promiscuous mode [ 64.925540][ T5222] veth0_macvtap: entered promiscuous mode [ 64.934651][ T5224] veth1_macvtap: entered promiscuous mode [ 64.971999][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.991511][ T5222] veth1_macvtap: entered promiscuous mode [ 64.993624][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.088260][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.103832][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.114148][ T5237] Bluetooth: hci2: command tx timeout [ 65.114196][ T5237] Bluetooth: hci0: command tx timeout [ 65.130952][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.131915][ T5230] Bluetooth: hci3: command tx timeout [ 65.141654][ T5243] Bluetooth: hci4: command tx timeout [ 65.149915][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.179750][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.193457][ T5230] Bluetooth: hci1: command tx timeout [ 65.215980][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.250409][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.256753][ T5313] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.262080][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.284693][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.296303][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.308831][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.326924][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.355446][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.397240][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.413123][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.427979][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.440250][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.457603][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.471622][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.514448][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.526077][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.542461][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.559499][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.570217][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.587527][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.616382][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.643068][ T5225] veth0_macvtap: entered promiscuous mode [ 65.672388][ T5222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.698474][ T5222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.711888][ T5222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.727243][ T5222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.748771][ T5224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.768970][ T5224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.778358][ T5224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.792672][ T5224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.816124][ T5225] veth1_macvtap: entered promiscuous mode [ 65.980577][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.991552][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.012034][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.029503][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.040275][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.057468][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.068142][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.085734][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.108400][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.126404][ T5323] Zero length message leads to an empty skb [ 66.166550][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.213998][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.225820][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.239138][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.249858][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.261569][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.271597][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.905120][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.949673][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.038454][ T5225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.051715][ T5225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.078624][ T5225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.104582][ T5225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.179863][ T5278] libceph: connect (1)[c::]:6789 error -101 [ 67.192740][ T5230] Bluetooth: hci0: command tx timeout [ 67.193390][ T5237] Bluetooth: hci4: command tx timeout [ 67.203386][ T5230] Bluetooth: hci3: command tx timeout [ 67.204764][ T5243] Bluetooth: hci2: command tx timeout [ 67.242203][ T5278] libceph: mon0 (1)[c::]:6789 connect error [ 67.272825][ T5243] Bluetooth: hci1: command tx timeout [ 67.290067][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.325942][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.351075][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.359929][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.419504][ T29] audit: type=1326 audit(1726486830.137:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5331 comm="syz.1.11" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604257def9 code=0x0 [ 67.458390][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.482706][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.563377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.671052][ T46] libceph: connect (1)[c::]:6789 error -101 [ 67.678266][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 67.777153][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.795955][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.810474][ T5334] ceph: No mds server is up or the cluster is laggy [ 67.914909][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.970994][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.094242][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.109669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 68.148125][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.327002][ T5358] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.076820][ T5363] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.894119][ T5364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.956970][ T5364] batadv_slave_0: entered allmulticast mode [ 70.894661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.088362][ T5388] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.277694][ T58] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.699709][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.713722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.731374][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.741308][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.787705][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.799264][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.810561][ T58] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.820515][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.855607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.884434][ T58] usb 3-1: config 0 descriptor?? [ 71.923715][ T5280] libceph: connect (1)[c::]:6789 error -101 [ 71.978284][ T5280] libceph: mon0 (1)[c::]:6789 connect error [ 72.082954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.320885][ T5280] libceph: connect (1)[c::]:6789 error -101 [ 72.330642][ T5280] libceph: mon0 (1)[c::]:6789 connect error [ 72.673904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.681155][ T29] audit: type=1326 audit(1726486835.037:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5390 comm="syz.1.23" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604257def9 code=0x0 [ 72.838964][ T58] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 72.843096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.856097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.891579][ T941] libceph: connect (1)[c::]:6789 error -101 [ 72.920172][ T941] libceph: mon0 (1)[c::]:6789 connect error [ 72.967203][ T58] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.980846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.095220][ T5393] ceph: No mds server is up or the cluster is laggy [ 74.078544][ T5277] usb 3-1: USB disconnect, device number 2 [ 79.277294][ T5423] sched: RT throttling activated [ 81.054739][ T5448] program syz.1.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.150412][ T8] cfg80211: failed to load regulatory.db [ 84.270232][ T46] libceph: connect (1)[c::]:6789 error -101 [ 84.276659][ T5280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.294708][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 84.474668][ T29] audit: type=1326 audit(1726486847.197:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5465 comm="syz.2.42" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f239bb7def9 code=0x0 [ 84.531007][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.567867][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.593143][ T25] libceph: connect (1)[c::]:6789 error -101 [ 84.604892][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.634350][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 84.637810][ T5280] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.668601][ T5472] ceph: No mds server is up or the cluster is laggy [ 84.689095][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.719421][ T5280] usb 5-1: config 0 descriptor?? [ 85.357188][ T5280] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 85.413151][ T5280] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 86.567123][ T5341] usb 5-1: USB disconnect, device number 2 [ 86.758173][ T5511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.253039][ T5528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.951589][ T5528] batadv_slave_0: entered allmulticast mode [ 90.039232][ T46] libceph: connect (1)[c::]:6789 error -101 [ 90.057831][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 90.126745][ T29] audit: type=1326 audit(1726486852.847:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5533 comm="syz.4.61" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14a237def9 code=0x0 [ 91.845936][ T5341] libceph: connect (1)[c::]:6789 error -101 [ 91.852017][ T5341] libceph: mon0 (1)[c::]:6789 connect error [ 92.235261][ T5548] ceph: No mds server is up or the cluster is laggy [ 93.276188][ T5562] netlink: 'syz.2.64': attribute type 12 has an invalid length. [ 93.670661][ T5281] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.752726][ T5281] usb 1-1: device descriptor read/all, error -71 [ 98.756880][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.429051][ T5607] batadv_slave_0: entered allmulticast mode [ 99.888296][ T29] audit: type=1326 audit(1726486862.597:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5617 comm="syz.1.81" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604257def9 code=0x0 [ 100.091239][ T5627] ceph: No mds server is up or the cluster is laggy [ 102.063556][ T5706] binder: 5694:5706 ioctl 4018620d 0 returned -22 [ 102.083228][ T5706] binder: 5694:5706 ioctl 4018620d 0 returned -22 [ 103.069974][ T5724] netlink: 'syz.2.115': attribute type 36 has an invalid length. [ 103.377859][ T5733] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 103.405371][ T5737] binder: 5726:5737 ioctl 4018620d 0 returned -22 [ 103.585044][ T5717] block device autoloading is deprecated and will be removed. [ 105.104793][ T5762] warning: `syz.1.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.320331][ T5764] netlink: 'syz.2.132': attribute type 2 has an invalid length. [ 105.383229][ T5768] netlink: 272 bytes leftover after parsing attributes in process `syz.4.134'. [ 105.778822][ T5776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.138'. [ 105.847776][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 108.909050][ T5836] batman_adv: batadv0: Adding interface: dummy0 [ 108.942763][ T5836] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.038475][ T5836] batman_adv: batadv0: Interface activated: dummy0 [ 109.101107][ T5836] batadv0: mtu less than device minimum [ 109.124034][ T5836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.137343][ T5836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.149705][ T5836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.162344][ T5836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.175183][ T5836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.187717][ T5836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.200182][ T5836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.212681][ T5836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.225529][ T5836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 109.258143][ T5845] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 109.409229][ T5848] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 109.473556][ T5848] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 109.488225][ T5848] bond1: (slave ip6gre1): making interface the new active one [ 109.504626][ T5848] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 110.471406][ T5863] netlink: 112 bytes leftover after parsing attributes in process `syz.2.169'. [ 110.791090][ T5873] syz.0.172 uses obsolete (PF_INET,SOCK_PACKET) [ 111.171244][ T5856] delete_channel: no stack [ 118.201454][ T5891] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 119.112307][ T5903] netlink: 'syz.0.183': attribute type 36 has an invalid length. [ 119.662822][ T5277] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.991443][ T5277] usb 1-1: device descriptor read/64, error -71 [ 120.322777][ T5277] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.962346][ T5277] usb 1-1: device descriptor read/64, error -71 [ 122.103840][ T5277] usb usb1-port1: attempt power cycle [ 122.214179][ T5948] net_ratelimit: 11 callbacks suppressed [ 122.214203][ T5948] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 122.803452][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.203'. [ 122.893893][ T5956] netlink: 'syz.1.202': attribute type 3 has an invalid length. [ 124.869633][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 125.130090][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 127.272281][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 128.302192][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 132.507339][ T6071] Bluetooth: MGMT ver 1.23 [ 132.633939][ T6075] team0: No ports can be present during mode change [ 133.258696][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.265319][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.396866][ T29] audit: type=1326 audit(1726486899.107:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 136.471594][ T29] audit: type=1326 audit(1726486899.107:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 136.525250][ T6104] syzkaller0: entered promiscuous mode [ 136.536107][ T6104] syzkaller0: entered allmulticast mode [ 136.541963][ T29] audit: type=1326 audit(1726486899.107:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 136.563298][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.602706][ T29] audit: type=1326 audit(1726486899.107:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 136.661477][ T6110] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 136.678014][ T29] audit: type=1326 audit(1726486899.117:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 136.699526][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.959838][ T29] audit: type=1326 audit(1726486899.117:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 136.981290][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.834584][ T29] audit: type=1326 audit(1726486899.117:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 138.917150][ T29] audit: type=1326 audit(1726486899.117:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 138.976569][ T29] audit: type=1326 audit(1726486899.117:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 139.014105][ T29] audit: type=1326 audit(1726486899.117:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc975d7def9 code=0x7ffc0000 [ 144.075439][ T6158] syz.1.267 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 148.554311][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 148.554331][ T29] audit: type=1326 audit(1726486911.197:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.4.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14a237def9 code=0x0 [ 149.242968][ T6234] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.287'. [ 149.343225][ T6233] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 149.589303][ T6243] delete_channel: no stack [ 149.901772][ T6247] netlink: 'syz.1.291': attribute type 10 has an invalid length. [ 149.956963][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.008793][ T6247] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 150.025404][ T6250] netlink: 'syz.2.292': attribute type 29 has an invalid length. [ 150.115493][ T6254] bond0: entered promiscuous mode [ 150.145809][ T6254] bond_slave_0: entered promiscuous mode [ 150.170054][ T6254] bond_slave_1: entered promiscuous mode [ 150.184081][ T6254] batadv0: entered promiscuous mode [ 150.226479][ T6253] netlink: 'syz.2.292': attribute type 29 has an invalid length. [ 150.287765][ T6255] netlink: 'syz.2.292': attribute type 29 has an invalid length. [ 150.353177][ T6250] netlink: 'syz.2.292': attribute type 29 has an invalid length. [ 151.597791][ T6279] syz.2.298 (6279): drop_caches: 2 [ 152.738058][ T6293] netlink: 'syz.1.306': attribute type 29 has an invalid length. [ 152.793872][ T6293] netlink: 'syz.1.306': attribute type 29 has an invalid length. [ 152.833252][ T6293] netlink: 'syz.1.306': attribute type 29 has an invalid length. [ 153.169239][ T6293] netlink: 'syz.1.306': attribute type 29 has an invalid length. [ 153.601139][ T6314] netlink: 6 bytes leftover after parsing attributes in process `syz.4.315'. [ 155.935426][ T6352] netlink: 'syz.3.330': attribute type 10 has an invalid length. [ 155.995325][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.155754][ T6352] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 158.777712][ T6398] bridge0: port 3(syz_tun) entered blocking state [ 158.808419][ T6398] bridge0: port 3(syz_tun) entered disabled state [ 158.927311][ T6398] syz_tun: entered allmulticast mode [ 158.934590][ T6398] syz_tun: entered promiscuous mode [ 158.941702][ T6398] bridge0: port 3(syz_tun) entered blocking state [ 158.948586][ T6398] bridge0: port 3(syz_tun) entered forwarding state [ 159.316648][ T6405] netlink: 'syz.4.347': attribute type 10 has an invalid length. [ 159.331377][ T6411] mmap: syz.0.348 (6411) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.466483][ T6405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.513398][ T6405] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 161.173010][ T6450] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 161.449449][ T6454] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 162.826527][ T6473] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.040668][ T6476] netlink: 892 bytes leftover after parsing attributes in process `syz.2.372'. [ 163.483969][ T6478] delete_channel: no stack [ 165.902282][ T6502] capability: warning: `syz.2.380' uses deprecated v2 capabilities in a way that may be insecure [ 169.074453][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.474032][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.672249][ T6511] KVM: debugfs: duplicate directory 6511-4 [ 170.743321][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 171.012717][ T25] usb 3-1: device descriptor read/64, error -71 [ 175.201597][ T6589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.242985][ T6589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.272725][ T5243] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.420691][ T6589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.469429][ T6589] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.512183][ T6589] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.537945][ T6589] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.567512][ T6589] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.617754][ T6589] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 176.541938][ T6589] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 176.624287][ T6589] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.632722][ T6589] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.695269][ T6589] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.362783][ T5237] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.542882][ T5237] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.592713][ T5243] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.117699][ T6639] tipc: Started in network mode [ 178.129040][ T6639] tipc: Node identity 080211, cluster identity 4711 [ 178.148888][ T6639] tipc: Enabled bearer , priority 10 [ 178.714991][ T5243] Bluetooth: hci1: command 0x0405 tx timeout [ 182.068164][ T5243] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.074928][ T5237] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.075144][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.081031][ T5237] Bluetooth: hci1: command 0x0405 tx timeout [ 182.095994][ T25] tipc: Node number set to 134353152 [ 184.150865][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 184.167285][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.173461][ T54] Bluetooth: hci1: command 0x0405 tx timeout [ 184.180304][ T5243] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.905213][ T6706] binder: BINDER_SET_CONTEXT_MGR already set [ 184.941051][ T6706] binder: 6696:6706 ioctl 4018620d 20000040 returned -16 [ 185.060341][ T6712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.083945][ T6712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.093129][ T6712] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.112243][ T6720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.447'. [ 185.183943][ T6712] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.481610][ T6747] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 186.726372][ T6747] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 186.952784][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.122487][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.128794][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.199041][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 187.252087][ T6747] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 187.261118][ T6747] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 187.539311][ T5230] Bluetooth: hci2: Unknown advertising packet type: 0x73 [ 187.539641][ T5230] Bluetooth: hci2: adv larger than maximum supported [ 187.547986][ T5230] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 187.554847][ T5230] Bluetooth: hci2: Malformed LE Event: 0x0d [ 188.052689][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 188.100606][ T6735] syz.1.453 (6735) used greatest stack depth: 17552 bytes left [ 188.244541][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.278403][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.298435][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.308931][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.322234][ T9] usb 5-1: config 0 descriptor?? [ 188.341441][ T6775] 9pnet_virtio: no channels available for device syz [ 189.855947][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 190.124275][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 190.143620][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 190.156791][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 190.188507][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 191.258882][ T5230] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 193.220198][ T6816] syz.2.475 (6816): drop_caches: 2 [ 194.659792][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.676566][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.431864][ T6846] sctp: failed to load transform for md5: -2 [ 195.612622][ T58] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 195.718714][ T5341] usb 5-1: USB disconnect, device number 3 [ 195.846714][ T58] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 195.886897][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.967923][ T58] usb 2-1: config 0 descriptor?? [ 196.021154][ T58] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 196.138104][ T6874] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.253674][ T6877] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 196.260401][ T6877] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.307970][ T6879] bond0: entered promiscuous mode [ 196.322379][ T6879] bond_slave_0: entered promiscuous mode [ 196.347501][ T6879] bond_slave_1: entered promiscuous mode [ 196.366947][ T6879] batadv0: entered promiscuous mode [ 196.389379][ T6877] vhci_hcd vhci_hcd.0: Device attached [ 196.642762][ T8] vhci_hcd: vhci_device speed not set [ 196.801494][ T8] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 196.806795][ T6880] vhci_hcd: connection closed [ 196.842059][ T1051] vhci_hcd: stop threads [ 196.875361][ T1051] vhci_hcd: release socket [ 196.905645][ T1051] vhci_hcd: disconnect device [ 197.285052][ T5341] usb 2-1: USB disconnect, device number 2 [ 197.343783][ T6892] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.350257][ T6892] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.399434][ T6892] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.408427][ T6892] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.452306][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'. [ 197.628242][ T6899] input: syz0 as /devices/virtual/input/input6 [ 197.663790][ T6899] input: failed to attach handler leds to device input6, error: -6 [ 197.744511][ T6905] Bluetooth: MGMT ver 1.23 [ 198.916477][ T6918] kAFS: unable to lookup cell '.,' [ 199.362714][ T5243] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.368838][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.390414][ T6932] vivid-000: ================= START STATUS ================= [ 199.424767][ T6932] vivid-000: Generate PTS: true [ 199.431041][ T6932] vivid-000: Generate SCR: true [ 199.436193][ T5243] Bluetooth: hci1: command 0x0405 tx timeout [ 199.442209][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.472368][ T6932] tpg source WxH: 640x360 (Y'CbCr) [ 199.477793][ T6932] tpg field: 1 [ 199.481312][ T6932] tpg crop: 640x360@0x0 [ 199.485782][ T6932] tpg compose: 640x360@0x0 [ 199.493087][ T6932] tpg colorspace: 8 [ 199.496990][ T6932] tpg transfer function: 0/0 [ 199.501673][ T6932] tpg Y'CbCr encoding: 0/0 [ 199.506902][ T6932] tpg quantization: 0/0 [ 199.512367][ T6932] tpg RGB range: 0/2 [ 199.518331][ T6932] vivid-000: ================== END STATUS ================== [ 201.694165][ T6946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.721390][ T6946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.762855][ T6946] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.795058][ T6946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.012720][ T8] vhci_hcd: vhci_device speed not set [ 202.482163][ T6974] xt_socket: unknown flags 0x50 [ 203.190897][ T5243] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.947891][ T6981] vivid-000: kernel_thread() failed [ 204.092732][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.092808][ T5243] Bluetooth: hci1: command 0x0405 tx timeout [ 204.093394][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.225342][ T5230] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 204.484660][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 204.581645][ T7005] capability: warning: `syz.0.537' uses 32-bit capabilities (legacy support in use) [ 204.652810][ T58] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 204.722466][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.735497][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 204.755899][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.778794][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.828400][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.852606][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.882240][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.911829][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.552179][ T25] usb 5-1: config 0 descriptor?? [ 205.564140][ T6988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.581081][ T58] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.591480][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.604382][ T58] usb 4-1: config 0 descriptor?? [ 206.047573][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 206.063204][ T58] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 206.074031][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 206.084344][ T58] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 206.105932][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 206.116751][ T58] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 206.171134][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 206.203236][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 206.223410][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 206.231257][ T58] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 206.244677][ T25] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 206.416694][ T25] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 209.730964][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.787474][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.799024][ T5280] usb 5-1: USB disconnect, device number 4 [ 209.822670][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.852713][ T5277] usb 4-1: USB disconnect, device number 2 [ 209.883568][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.942020][ T8] usb 2-1: string descriptor 0 read error: -71 [ 209.983799][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.010452][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.070256][ T8] usb 2-1: can't set config #1, error -71 [ 210.114574][ T8] usb 2-1: USB disconnect, device number 3 [ 211.049400][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.553'. [ 213.654973][ T29] audit: type=1326 audit(1726486976.377:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7118 comm="syz.1.563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604257def9 code=0x0 [ 213.981423][ T7131] 9pnet_fd: Insufficient options for proto=fd [ 214.099929][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 214.734213][ T7128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.740293][ T7128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.850150][ T7128] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.943707][ T7128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.433717][ T58] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 215.824815][ T58] usb 1-1: unable to get BOS descriptor or descriptor too short [ 215.838793][ T58] usb 1-1: not running at top speed; connect to a high speed hub [ 215.993121][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.121784][ T58] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 216.214681][ T58] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 216.238010][ T58] usb 1-1: config 129 descriptor has 1 excess byte, ignoring [ 216.253337][ T58] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 216.272908][ T58] usb 1-1: config 129 has no interface number 0 [ 216.282670][ T58] usb 1-1: config 129 has no interface number 1 [ 216.289039][ T58] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 216.307476][ T58] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 216.323534][ T58] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 216.342249][ T58] usb 1-1: config 129 interface 135 has no altsetting 0 [ 216.367899][ T58] usb 1-1: config 129 interface 5 has no altsetting 0 [ 216.383363][ T58] usb 1-1: string descriptor 0 read error: -22 [ 216.503194][ T58] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 216.512886][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.542097][ T58] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.561318][ T58] usb 1-1: MIDIStreaming interface descriptor not found [ 216.635753][ T7188] syzkaller0: entered promiscuous mode [ 216.744907][ T7183] syzkaller0 (unregistering): left promiscuous mode [ 216.793055][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.831108][ T7195] fuse: Bad value for 'fd' [ 216.873419][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.952652][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 217.672336][ T7191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 217.687630][ T7191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.696657][ T7191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 217.703218][ T7191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.720573][ T58] usb 1-1: USB disconnect, device number 7 [ 218.953549][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.381919][ T7226] ======================================================= [ 219.381919][ T7226] WARNING: The mand mount option has been deprecated and [ 219.381919][ T7226] and is ignored by this kernel. Remove the mand [ 219.381919][ T7226] option from the mount to silence this warning. [ 219.381919][ T7226] ======================================================= [ 219.401709][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'. [ 219.426911][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 219.539210][ T7226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'. [ 219.551269][ T7226] netlink: 'syz.1.592': attribute type 7 has an invalid length. [ 219.559984][ T7226] netlink: 'syz.1.592': attribute type 8 has an invalid length. [ 219.568637][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 219.634901][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 219.642109][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.677860][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.711201][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 219.752715][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 219.752741][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 219.752774][ T5243] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.760587][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 219.833719][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.923173][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.942167][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.183341][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 220.189813][ T8] usbtmc 5-1:16.0: can't read capabilities [ 221.165839][ T7250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.175615][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.208939][ T7250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.217085][ T7250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 221.225100][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.234349][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.243383][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.252412][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.262313][ T7250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.532741][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.541863][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.550990][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.562630][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.693222][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.702360][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.711447][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.720536][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.722798][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 221.752252][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.761916][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.771029][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.805025][ T8] usb 5-1: USB disconnect, device number 5 [ 221.832406][ T7276] macsec0: entered promiscuous mode [ 222.022676][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 222.695096][ T7294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.718725][ T7294] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.808731][ T7294] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 222.819513][ T7294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.713451][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.805617][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 224.872659][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 224.878742][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 226.360022][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 226.381184][ T7344] netlink: 72 bytes leftover after parsing attributes in process `syz.0.624'. [ 227.605846][ T7363] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.611926][ T7363] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.618122][ T7363] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.628511][ T7363] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.194766][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.672656][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 229.679091][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 229.685394][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.142840][ T7418] netlink: 68 bytes leftover after parsing attributes in process `syz.4.647'. [ 230.198918][ T7418] netlink: 68 bytes leftover after parsing attributes in process `syz.4.647'. [ 230.369631][ T7418] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 230.411641][ T7418] netlink: 512 bytes leftover after parsing attributes in process `syz.4.647'. [ 230.478754][ T7421] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 230.485318][ T7421] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 230.592900][ T7421] vhci_hcd vhci_hcd.0: Device attached [ 230.612984][ T7426] vhci_hcd: connection closed [ 230.632978][ T62] vhci_hcd: stop threads [ 230.682365][ T62] vhci_hcd: release socket [ 230.692702][ T62] vhci_hcd: disconnect device [ 232.541074][ T7449] syzkaller0: entered promiscuous mode [ 232.551486][ T7449] syzkaller0: entered allmulticast mode [ 232.772591][ T5277] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 233.002685][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 256.123215][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.129623][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.702476][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 338.709471][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7463/1:b..l [ 338.717869][ C1] rcu: (detected by 1, t=10502 jiffies, g=17041, q=226 ncpus=2) [ 338.725612][ C1] task:syz.3.661 state:R running task stack:24976 pid:7463 tgid:7462 ppid:5222 flags:0x00004002 [ 338.738581][ C1] Call Trace: [ 338.741969][ C1] [ 338.744914][ C1] __schedule+0x17ae/0x4a10 [ 338.749462][ C1] ? handle_pte_fault+0x51cd/0x6fc0 [ 338.754695][ C1] ? __pfx___schedule+0x10/0x10 [ 338.759574][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.765582][ C1] ? __lock_acquire+0x137a/0x2040 [ 338.770627][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 338.775945][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 338.781162][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 338.786919][ C1] irqentry_exit+0x5e/0x90 [ 338.791441][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.797441][ C1] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 338.803174][ C1] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 338.822808][ C1] RSP: 0018:ffffc900048bf6f8 EFLAGS: 00000206 [ 338.828905][ C1] RAX: 70d85354c34bad00 RBX: 0000000000000000 RCX: 0000000080000000 [ 338.836911][ C1] RDX: ffffc9000a0c1000 RSI: ffffffff8beae6c0 RDI: ffffffff8c3fbac0 [ 338.844909][ C1] RBP: 0000000000000002 R08: ffffffff81de7079 R09: 1ffffffff27f4d08 [ 338.852898][ C1] R10: dffffc0000000000 R11: fffffbfff27f4d09 R12: 0000000000000246 [ 338.860885][ C1] R13: ffff8880279fda00 R14: 00000000ffffffff R15: ffffffff8e765ea8 [ 338.868875][ C1] ? count_memcg_event_mm+0x179/0x420 [ 338.874273][ C1] ? count_memcg_event_mm+0x94/0x420 [ 338.879569][ C1] mem_cgroup_from_task+0x62/0x120 [ 338.884704][ C1] count_memcg_event_mm+0x195/0x420 [ 338.889913][ C1] ? count_memcg_event_mm+0x94/0x420 [ 338.895227][ C1] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 338.900961][ C1] ? folio_mark_accessed+0x6f6/0x11b0 [ 338.906358][ C1] handle_mm_fault+0x1627/0x1ad0 [ 338.911338][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 338.916668][ C1] ? __get_user_pages+0x78f/0x16a0 [ 338.921792][ C1] ? __get_user_pages+0x79d/0x16a0 [ 338.926925][ C1] __get_user_pages+0x6ec/0x16a0 [ 338.931901][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 338.937328][ C1] populate_vma_page_range+0x264/0x330 [ 338.942802][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 338.948790][ C1] ? userfaultfd_unmap_complete+0x30c/0x360 [ 338.954712][ C1] ? do_mmap+0x961/0x1010 [ 338.959159][ C1] __mm_populate+0x27a/0x460 [ 338.963785][ C1] ? __pfx___mm_populate+0x10/0x10 [ 338.969111][ C1] vm_mmap_pgoff+0x2c3/0x3d0 [ 338.973824][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 338.978958][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.985308][ C1] ? ksys_mmap_pgoff+0xdf/0x720 [ 338.990177][ C1] ? syscall_user_dispatch+0x4e/0x90 [ 338.995471][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 339.000259][ C1] do_syscall_64+0xf3/0x230 [ 339.004776][ C1] ? clear_bhb_loop+0x35/0x90 [ 339.009468][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.015375][ C1] RIP: 0033:0x7f388ff7def9 [ 339.019822][ C1] RSP: 002b:00007f3890e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 339.028256][ C1] RAX: ffffffffffffffda RBX: 00007f3890135f80 RCX: 00007f388ff7def9 [ 339.036236][ C1] RDX: 0000000003800007 RSI: 0000000000b36000 RDI: 0000000020000000 [ 339.044213][ C1] RBP: 00007f388fff0b76 R08: ffffffffffffffff R09: 0000000000000000 [ 339.052192][ C1] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 339.060342][ C1] R13: 0000000000000000 R14: 00007f3890135f80 R15: 00007ffe1da50dd8 [ 339.068341][ C1] [ 339.071368][ C1] rcu: rcu_preempt kthread starved for 10194 jiffies! g17041 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 339.082621][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 339.092601][ C1] rcu: RCU grace-period kthread stack dump: [ 339.098493][ C1] task:rcu_preempt state:R running task stack:25584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 339.110254][ C1] Call Trace: [ 339.113545][ C1] [ 339.116493][ C1] __schedule+0x17ae/0x4a10 [ 339.121134][ C1] ? __pfx___schedule+0x10/0x10 [ 339.126008][ C1] ? __pfx_lock_release+0x10/0x10 [ 339.131045][ C1] ? __asan_memset+0x23/0x50 [ 339.135650][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 339.141469][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.147813][ C1] ? schedule+0x90/0x320 [ 339.152070][ C1] schedule+0x14b/0x320 [ 339.156248][ C1] schedule_timeout+0x1be/0x310 [ 339.161121][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 339.166509][ C1] ? __pfx_process_timeout+0x10/0x10 [ 339.171818][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 339.177382][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 339.182247][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 339.187639][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 339.193720][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 339.199035][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 339.204975][ C1] ? finish_swait+0xd4/0x1e0 [ 339.209594][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 339.214217][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 339.219435][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 339.225356][ C1] ? __kthread_parkme+0x169/0x1d0 [ 339.230406][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 339.235620][ C1] kthread+0x2f0/0x390 [ 339.239793][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 339.245004][ C1] ? __pfx_kthread+0x10/0x10 [ 339.249613][ C1] ret_from_fork+0x4b/0x80 [ 339.254046][ C1] ? __pfx_kthread+0x10/0x10 [ 339.258657][ C1] ret_from_fork_asm+0x1a/0x30 [ 339.263455][ C1] [ 339.266477][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 339.272817][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-syzkaller #0 [ 339.281062][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 339.291122][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 339.296429][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d b5 1e 98 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 339.316051][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 339.322133][ C1] RAX: ffff88801cef0000 RBX: ffff888020aec064 RCX: 0000000000cac341 [ 339.330204][ C1] RDX: 0000000000000001 RSI: ffff888020aec000 RDI: ffff888020aec064 [ 339.338230][ C1] RBP: 000000000003a638 R08: ffff8880b8937c7b R09: 1ffff11017126f8f [ 339.346209][ C1] R10: dffffc0000000000 R11: ffffffff8bb14cc0 R12: ffff88801dbe3000 [ 339.354188][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eed1d40 [ 339.362172][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 339.371114][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.377704][ C1] CR2: 00007fd35926d157 CR3: 00000000718d6000 CR4: 00000000003506f0 [ 339.385694][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 339.393849][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 339.401828][ C1] Call Trace: [ 339.405122][ C1] [ 339.407970][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 339.414409][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 339.420158][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 339.425981][ C1] ? __pfx_lock_release+0x10/0x10 [ 339.431032][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 339.437286][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 339.442687][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 339.448336][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 339.453549][ C1] ? update_process_times+0x1ce/0x230 [ 339.458989][ C1] ? tick_nohz_handler+0x37c/0x500 [ 339.464127][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 339.469612][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 339.474998][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 339.481010][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 339.486751][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 339.492849][ C1] ? hrtimer_interrupt+0x396/0x990 [ 339.498009][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 339.504188][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 339.510008][ C1] [ 339.512957][ C1] [ 339.515891][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.522064][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 339.527367][ C1] ? acpi_safe_halt+0x21/0x30 [ 339.532057][ C1] acpi_idle_enter+0xe4/0x140 [ 339.536753][ C1] cpuidle_enter_state+0x112/0x480 [ 339.541899][ C1] ? __pfx_menu_select+0x10/0x10 [ 339.546935][ C1] cpuidle_enter+0x5d/0xa0 [ 339.551378][ C1] do_idle+0x375/0x5d0 [ 339.555493][ C1] ? __pfx_do_idle+0x10/0x10 [ 339.560117][ C1] ? do_idle+0xa/0x5d0 [ 339.564217][ C1] cpu_startup_entry+0x42/0x60 [ 339.568990][ C1] start_secondary+0x100/0x100 [ 339.573784][ C1] common_startup_64+0x13e/0x147 [ 339.578745][ C1]