last executing test programs: 23.225554787s ago: executing program 3 (id=177): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x21, 0xfffffffd}) 23.054499577s ago: executing program 3 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1cb4, 0xffff, 0x7fffffff, 0x8, 0xff}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x10, 0x464, 0x620, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000000}, 0x2400c046) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x154) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) syz_open_procfs$userns(r5, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002400090000000000001b0000060000004e9d855309dc016698611c3e3526c52d1b38b6884a937a6e0e977bcc21795de67d"], 0x14}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_emit_ethernet(0x3c3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) 22.091914829s ago: executing program 3 (id=184): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 21.87722237s ago: executing program 3 (id=187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001d00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000000d0001"], 0x30}}, 0x0) 20.97770166s ago: executing program 3 (id=191): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x4c, 0x12, 0x909, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4e20}}}, 0x4c}}, 0x0) 7.724114366s ago: executing program 4 (id=237): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 7.564106604s ago: executing program 2 (id=239): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) 7.43288066s ago: executing program 2 (id=240): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="fcb334a80f6b0b108112f3be5fcd680b70e2079046cc8f9e60e9136305bb5485083034e725d6516b3ec2fb3cbbd52f1421ca2eb25d0b5d9f27bef3f588f262021f6c0ad88be94f94768fb513d8815b9a273948fd68ddaa35a8f4", @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a003400020202020202000004009300"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ff"], 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffc1}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={@mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xd533, 0x8, 0x4, 0x400, 0xbb0, 0x80900020}) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @private2}}}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) 7.432664479s ago: executing program 4 (id=241): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3e, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000001000000000000e0fff7ffffffffff180001801400000008000100ac1414bb08000200ac0314bb24000280140001"], 0x50}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0) 5.159120246s ago: executing program 1 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) 4.935132813s ago: executing program 1 (id=243): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) r2 = dup3(r0, r1, 0x0) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 4.798009777s ago: executing program 2 (id=244): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@global=@item_012={0x1, 0x1, 0x0, "9e"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0x0, "ca047068"}, @global=@item_012={0x2, 0x1, 0x1, "990a"}]}}, 0x0}, 0x0) 4.705844571s ago: executing program 4 (id=245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res(0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000480)={@val, @void, @eth={@multicast, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x9, 0x6, 0x0, @broadcast, @rand_addr, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x46) 4.609181227s ago: executing program 1 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r2}}]}, {0x4, 0xa}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) 4.394138068s ago: executing program 0 (id=248): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18, &(0x7f0000000340)={0x0}, 0x3f}, 0x0) 4.31979163s ago: executing program 0 (id=249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x12) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x10, 0x10, 0x8bd1, 0x4, {{0x36, 0x4, 0x1, 0x0, 0xd8, 0x65, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, {[@ssrr={0x89, 0x1f, 0x22, [@private=0xa010102, @local, @multicast2, @multicast1, @multicast1, @local, @broadcast]}, @generic={0x94, 0x9, "84b642345c3205"}, @timestamp_prespec={0x44, 0x14, 0xc4, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3f}}, {@remote, 0xad0}]}, @end, @generic={0x7, 0xd, "3ea2c5b6d01d554360fdff"}, @generic={0x1c, 0x4, "d128"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x67, 0x1, 0x8, [{@broadcast, 0x800}, {@rand_addr=0x64010102, 0x2}, {@empty, 0xb}, {@rand_addr=0x64010102, 0x4c1}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0x5}, {@local}, {@multicast2, 0xd5}, {@multicast1, 0x100}]}, @lsrr={0x83, 0x1b, 0xf8, [@dev={0xac, 0x14, 0x14, 0x30}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x5e4, 0x5, {{0x18, 0x4, 0x1, 0x8, 0x60, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xb, "5217a81795fdc765df"}, {0x5, 0x6, "2540048a"}, {0x7, 0xf, "3017df3ebf777568a82652687b"}, {0x2, 0x4, "e519"}]}, @timestamp={0x44, 0x14, 0x8c, 0x0, 0xc, [0x7c, 0x8, 0x8, 0x3]}, @generic={0x94, 0xb, "52bad9a3a70f9541f7"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x5, 0x1, {{0x25, 0x4, 0x3, 0x1, 0x94, 0x66, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0x14, 0x9c, 0x3, 0xc, [{@multicast1, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xce}]}, @noop, @noop, @ssrr={0x89, 0x13, 0xbd, [@rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1]}, @end, @lsrr={0x83, 0xb, 0x52, [@empty, @private=0xa010102]}, @timestamp={0x44, 0x14, 0xc1, 0x0, 0xd, [0xfff, 0x7, 0x80000000, 0x5]}, @timestamp={0x44, 0x1c, 0x61, 0x0, 0x3, [0x6, 0x10000, 0x401, 0x9, 0x3, 0xffff620c]}, @timestamp={0x44, 0x18, 0xda, 0x0, 0x1, [0x2, 0x2, 0x800, 0x4, 0x7]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="64dab7e5fc127f291a3c9d9498f3fbd66f0e37b1bc559ffac4803f583252848b4177f2262d2878f8ed4df997357cde911ffd8e450a3cd596f2b2023bade381d439738a57aaf574ea0eb38e4be5317bbeb01ac89c4ab0acda179a2ffbde0aabe8db624633ebcf3268f6a335e0218b2df0b57ddf2e28a7fc2d43cc912d22b6b5866f0f916a1f028a0f47d2ab8833fe2b0196c1021e107cea3dbab1438596d1b49f7187fc666e1c65088f168c348bb4713dedb7a7e4586c6977", 0xb8}, {&(0x7f0000000380)="7e47531128f1a48beba5ea87542e56c86c239d222495e42a323bb379ee0bfb21199cf3fa605c33e30193a7209b120126fdf7fc00d0ff9dac6d07d5139efdc89763ceb364cd07a531c5f46cde98fe79ae3e02fbbc0e519b455c6a85bd107af588bde8db06a8ab46cc782ddca319c1286ba93adec29f8b2397bfb79cb2817c9ee7734407f05d16e24fc7c9ade0a4fefd360f8b3399370440b1bea8814c21af66df0cae95f23ce41e2e6c26e351110da69b5701299f7a36525028186dd2fbab0400513bcd", 0xc3}], 0x2, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @private=0xa010102}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}, @ip_tos_u8={{0x11}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000800)="e5b5487d815c0c794b5befe989f0d2c5051454ddf61aab2352666cfe2c27b14f984e5db3769742426665672222681c9dd3890bc9b43759fd0f18c2d59aa6989061", 0x41}, {&(0x7f0000000880)="53ef7423e4df01900aaf4564766e9c67dfecabb93fb92b6f96e5487a5c133f69e0413d0f363616085904259cd6dd259faae75939b6900760e87f21956fa8f4403cb40baad3aaa057b81728e3bfdb90fc8f8618397901367a9e8ca344dbe9f4bffa51f12b", 0x64}, {&(0x7f0000000900)="e61cac4c56d1fbf742e37c8402c288f28f826f6248242f436722bbf1aa6d0a07", 0x20}, {&(0x7f0000000940)="b39554cb3b7538e644b8122a5b363000cb77541834a06930f8b41826c06103f61aa2093cb38162e8bb6e2345c7d159abad35db4e8ecd08a19eb94e350b391bacec830a28b61025e9ef130d343f41a462947ad49a554c0a341c558b74c507725a2332d5a35d7cbbe3f7fdfa8eec2becd5103988d0092930ac95b6039732a9671573ed8c6c029d9251c0bebbbd944e0dfbec7f1df66a66c772f78d7c57a33109bfc81a3c514bfe5cf3d6eb832f17f995e2300197e3152d1b07d6b431987a1cfa1e5f86df3e47a1abec66145d07b7b7b1d079e188328b", 0xd5}, {&(0x7f0000000a40)="67e6b4d467ccb73c2b4e8c0f7b5304fda84212e7bb6de0a130d6e1d1cdfe8106061ed444107cab5307af4a05c9072503affe", 0x32}, {&(0x7f0000000c00)="44549ed8215807e9e63d3fa19fbd9887be4512b67f4b3d306a3c56aec5e8686917d84743878ffde297ac4c1a11d27ba3da4c96eb8971f159a1a71e11e25a5271a2efb9c70b51592098caf6ca006b3182e1dc03d76eeffd8e1d9c97fad9999d07f14676b1a5003cd7399196d78918adf65274e546c115c7e10a700abc6d411a62c244c55659a2d5e983fa9fcb0b1aaaa61d3ee0c0f29472d36081739649f4e856d059bb0e61699a05c1969f353d50eb523961b17f038aa3acca647405e5ccf46e14", 0xc1}], 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"/541], 0x178}}], 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 4.317810845s ago: executing program 1 (id=250): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 4.246976299s ago: executing program 4 (id=251): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f000087f000/0x3000)=nil, 0x3000) chdir(0x0) 3.935808719s ago: executing program 1 (id=252): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x800, 0xfffffff4, 0x400, 0x10, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7cee9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x4, 0x0) io_setup(0x7, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 2.635862673s ago: executing program 3 (id=191): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x4c, 0x12, 0x909, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4e20}}}, 0x4c}}, 0x0) 2.61074922s ago: executing program 1 (id=253): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x2, 0xb8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@private=0xa010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xd6, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0xf, 0x0, [@dev, @remote, @multicast1]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)="ccc054311246f21863057bd1bf", 0xa7c, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/3605], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) 2.599730735s ago: executing program 0 (id=254): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 2.147335473s ago: executing program 0 (id=255): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x4000850) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000080a050400007379"], 0x54}}, 0x0) r5 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r5, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000025c0)=""/60, 0x3c}], 0x1, 0x0, 0xfffffffffffffcdf}, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 2.146097479s ago: executing program 2 (id=256): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f801001ddaaca7bd641ea89de2b7fb0a010000002a00000000000000000000000000000000000000000000000025cefd29d984bd1500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00f7ffffffffffffff00"}}) 2.14542731s ago: executing program 4 (id=257): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x48}}, 0x0) 1.836002566s ago: executing program 2 (id=258): socket$qrtr(0x2a, 0x2, 0x0) fsopen(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x24020400) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x6, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000b47000/0x3000)=nil, 0x3000}}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UFFDIO_CONTINUE(r6, 0xc018aa06, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x800}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 1.097146511s ago: executing program 0 (id=259): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) 895.185107ms ago: executing program 0 (id=260): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 864.656115ms ago: executing program 4 (id=261): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0x4e60, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="ed4e82bdc44b4626f17240da75126c6c124490d6e1b548078f2bfbb3b2144213deecccecf4af153de115e85615196635cc86e4ff71d9588a9cb2aba8fd4b07268cf929808a43aaa7e4b44392d9c67e552eb54fb946da44baf093388610fd928d0798bacc3f33eef8267a318bed8dd50596c299dbc4a80c70d3f13ce3cca7301a10769248fa9347cae6ab712db36abae3dece3acffbb18053b17615661d55ad0fcd4799bdf8b390dd43465bf7840fa33567cd5a94db399d6d6d2c942aecc2714b60634c03e6e02b8f8af3d42e5b512cf459f830cb0b6de118b8ffdff41db05d54e8d56c301df18e88080d8e", 0xeb}, {&(0x7f00000007c0)="b80d8b0089b7cb61da8d5df472181a26b15679ac7f8c78272d864af732b8b28aa0e1a48cbdf44ccb0e4f2112c22ee96f25a9b1119789158355ab025feb9a844f50cd0c85f365ceda583622fc9f84927e238c2c5fab979ce0e9ecfcb11b749e7ebd7d22afb9611270a35da1ea5c669a26a0f70a238ac146a1fe973c084b5dbcf56506997a21a2072f27a03e323520f7b6391eacf105f808ec8557bcc1e5c52e6a6fcf9c072a5527a9f8c7ef28713c6cebccafc270de073f7504c11aea2450", 0xbe}, {&(0x7f0000000600)="7eaf5fb1b36ff33d10c45c93c9ff37ab09bd57dbcc850d56553b3d4acb92e6fb2178dc510264eb4a5608f3f608735ca6d50347c7f2592d2cfc9aec9f5b2ecb156782d6ddb2a0db5c98ef2da4686ce20b30b791a26685e46ef1688c2b38f01eddf912f20a6710605379d66ccb9f54c8a76c038c43cea0067e52c9ed4cbfff8385a6ac2d858aa9effdf04051c7ee95687af2c67c80b626a85e0fb1d88170e92b3df62001a529aea5b6817906b83604d869aacca56c7eac589695cfe1c4d1780693b33c9bf96c778ea88dc338bcfe71fe0944f3666716521d6c09b627884a395deb06a490f077d2617722096769e31036", 0xef}], 0x3}, 0x40040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="189700000000009eb044c4d4240ff0cd3aaaedaed300000000000000000018ea0017202070251a33a5e8bf92000200000701f87d9f00f82e9f913b2ff2c6d8985572a3e24b8caa01d42a0e37"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = open$dir(&(0x7f0000000780)='./file0\x00', 0x44200, 0x54) open_tree(r5, &(0x7f0000000180)='./file0\x00', 0x9001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)) r8 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x802) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x82000000) 0s ago: executing program 2 (id=262): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4180, 0x0) connect$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2, 0x4e4e}}, 0x10) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0xfbfffff8) mmap$dsp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000007, 0x12, r7, 0x0) connect$tipc(r5, &(0x7f0000000000)=@id, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r9 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) close(r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 52.741934][ T5202] cgroup: Unknown subsys name 'net' [ 52.970832][ T5202] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.348453][ T5202] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.125678][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.136377][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.146497][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.155032][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.163753][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.171614][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.179404][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.179487][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.194488][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.195164][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.202177][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.210684][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.224438][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.231869][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.244918][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.252256][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.259776][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.260542][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.268173][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.277698][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.294055][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.301918][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.309737][ T5222] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.317557][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.325351][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.334378][ T4609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.334459][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.363009][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.370889][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.383524][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.807767][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 58.979506][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 58.994523][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 59.099940][ T5213] chnl_net:caif_netlink_parms(): no params data found [ 59.152440][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.159904][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.168355][ T5212] bridge_slave_0: entered allmulticast mode [ 59.175474][ T5212] bridge_slave_0: entered promiscuous mode [ 59.190223][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.197648][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.204980][ T5212] bridge_slave_1: entered allmulticast mode [ 59.211667][ T5212] bridge_slave_1: entered promiscuous mode [ 59.219057][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 59.318407][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.332559][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.340455][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.348121][ T5228] bridge_slave_0: entered allmulticast mode [ 59.355667][ T5228] bridge_slave_0: entered promiscuous mode [ 59.362999][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.370288][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.378242][ T5228] bridge_slave_1: entered allmulticast mode [ 59.385490][ T5228] bridge_slave_1: entered promiscuous mode [ 59.392116][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.399588][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.406923][ T5225] bridge_slave_0: entered allmulticast mode [ 59.413788][ T5225] bridge_slave_0: entered promiscuous mode [ 59.426590][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.469669][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.478433][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.486257][ T5225] bridge_slave_1: entered allmulticast mode [ 59.492951][ T5225] bridge_slave_1: entered promiscuous mode [ 59.529976][ T5212] team0: Port device team_slave_0 added [ 59.568868][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.601102][ T5212] team0: Port device team_slave_1 added [ 59.608050][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.615593][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.622725][ T5213] bridge_slave_0: entered allmulticast mode [ 59.630520][ T5213] bridge_slave_0: entered promiscuous mode [ 59.660633][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.672731][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.684488][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.711857][ T5213] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.719153][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.726585][ T5213] bridge_slave_1: entered allmulticast mode [ 59.733396][ T5213] bridge_slave_1: entered promiscuous mode [ 59.749608][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.757114][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.764411][ T5221] bridge_slave_0: entered allmulticast mode [ 59.771160][ T5221] bridge_slave_0: entered promiscuous mode [ 59.812031][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.819354][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.845272][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.868037][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.875575][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.882680][ T5221] bridge_slave_1: entered allmulticast mode [ 59.890126][ T5221] bridge_slave_1: entered promiscuous mode [ 59.920248][ T5228] team0: Port device team_slave_0 added [ 59.928920][ T5225] team0: Port device team_slave_0 added [ 59.935976][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.942925][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.969287][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.988860][ T5213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.000968][ T5213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.043728][ T5228] team0: Port device team_slave_1 added [ 60.051768][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.062879][ T5225] team0: Port device team_slave_1 added [ 60.111561][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.130456][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.137753][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.164024][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.178791][ T5213] team0: Port device team_slave_0 added [ 60.212653][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.219888][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.246401][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.259001][ T5213] team0: Port device team_slave_1 added [ 60.277883][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.285935][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.311909][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.334985][ T5221] team0: Port device team_slave_0 added [ 60.350962][ T5227] Bluetooth: hci0: command tx timeout [ 60.370886][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.377955][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.404668][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.419115][ T5212] hsr_slave_0: entered promiscuous mode [ 60.423803][ T5224] Bluetooth: hci1: command tx timeout [ 60.425201][ T5220] Bluetooth: hci3: command tx timeout [ 60.430328][ T5227] Bluetooth: hci2: command tx timeout [ 60.435754][ T5222] Bluetooth: hci4: command tx timeout [ 60.447992][ T5212] hsr_slave_1: entered promiscuous mode [ 60.457042][ T5221] team0: Port device team_slave_1 added [ 60.473938][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.480888][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.508041][ T5213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.559391][ T5225] hsr_slave_0: entered promiscuous mode [ 60.566453][ T5225] hsr_slave_1: entered promiscuous mode [ 60.572550][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.580504][ T5225] Cannot create hsr debugfs directory [ 60.601952][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.609411][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.635620][ T5213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.661696][ T5228] hsr_slave_0: entered promiscuous mode [ 60.668879][ T5228] hsr_slave_1: entered promiscuous mode [ 60.675152][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.682696][ T5228] Cannot create hsr debugfs directory [ 60.696375][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.703827][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.730463][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.772037][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.779212][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.805550][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.952719][ T5213] hsr_slave_0: entered promiscuous mode [ 60.959895][ T5213] hsr_slave_1: entered promiscuous mode [ 60.967235][ T5213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.975004][ T5213] Cannot create hsr debugfs directory [ 61.041035][ T5221] hsr_slave_0: entered promiscuous mode [ 61.047808][ T5221] hsr_slave_1: entered promiscuous mode [ 61.054480][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.062036][ T5221] Cannot create hsr debugfs directory [ 61.360449][ T5225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.371354][ T5225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.388630][ T5225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.403625][ T5225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.483290][ T5212] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.492511][ T5212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.520470][ T5212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.532627][ T5212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.588195][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.602409][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.624063][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.634952][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.716099][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.762426][ T5221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.772753][ T5221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.782890][ T5221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.809920][ T5221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.857372][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.879472][ T5213] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.890479][ T5213] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.900726][ T5213] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.927292][ T5213] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.948230][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.955577][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.982847][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.990168][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.018347][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.067426][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.092475][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.099600][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.152299][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.159473][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.179449][ T5225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.281050][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.378290][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.415013][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.422142][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.433055][ T5222] Bluetooth: hci0: command tx timeout [ 62.465451][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.472589][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.503632][ T5220] Bluetooth: hci3: command tx timeout [ 62.507356][ T5227] Bluetooth: hci2: command tx timeout [ 62.509056][ T5220] Bluetooth: hci1: command tx timeout [ 62.520771][ T5222] Bluetooth: hci4: command tx timeout [ 62.542228][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.571901][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.593288][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.619710][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.626892][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.646935][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.667039][ T5213] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.696392][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.704152][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.715263][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.722333][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.731967][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.739148][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.799202][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.861137][ T5221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.876848][ T5213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.888832][ T5213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.108968][ T5212] veth0_vlan: entered promiscuous mode [ 63.144936][ T5212] veth1_vlan: entered promiscuous mode [ 63.157770][ T5225] veth0_vlan: entered promiscuous mode [ 63.226375][ T5225] veth1_vlan: entered promiscuous mode [ 63.294363][ T5212] veth0_macvtap: entered promiscuous mode [ 63.323166][ T5212] veth1_macvtap: entered promiscuous mode [ 63.349612][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.370328][ T5225] veth0_macvtap: entered promiscuous mode [ 63.397169][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.406841][ T5225] veth1_macvtap: entered promiscuous mode [ 63.432847][ T5213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.466542][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.510866][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.538993][ T5228] veth0_vlan: entered promiscuous mode [ 63.550520][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.563078][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.576279][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.589896][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.601784][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.613966][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.646151][ T5228] veth1_vlan: entered promiscuous mode [ 63.659753][ T5225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.669895][ T5225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.686560][ T5225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.698645][ T5225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.712587][ T5212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.721370][ T5212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.730203][ T5212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.739485][ T5212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.877190][ T5213] veth0_vlan: entered promiscuous mode [ 63.954839][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.965528][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.968806][ T5213] veth1_vlan: entered promiscuous mode [ 64.005588][ T5228] veth0_macvtap: entered promiscuous mode [ 64.067025][ T5228] veth1_macvtap: entered promiscuous mode [ 64.089725][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.098364][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.106851][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.121523][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.148466][ T5221] veth0_vlan: entered promiscuous mode [ 64.185586][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.206209][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.216114][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.226676][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.239462][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.257181][ T5221] veth1_vlan: entered promiscuous mode [ 64.279547][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.284212][ T2540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.291275][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.308179][ T2540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.309528][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.327144][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.338675][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.353228][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.370295][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.380455][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.392667][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.406084][ T5213] veth0_macvtap: entered promiscuous mode [ 64.477779][ T5213] veth1_macvtap: entered promiscuous mode [ 64.514597][ T5220] Bluetooth: hci0: command tx timeout [ 64.583006][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.596927][ T5220] Bluetooth: hci2: command tx timeout [ 64.602376][ T5220] Bluetooth: hci3: command tx timeout [ 64.608170][ T5222] Bluetooth: hci1: command tx timeout [ 64.613945][ T5224] Bluetooth: hci4: command tx timeout [ 64.646318][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.683775][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.703678][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.714414][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.726122][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.742894][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.798451][ T5302] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3'. [ 64.800050][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.849984][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.866295][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.877071][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.886984][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.898844][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.911067][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.943799][ T5213] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.954618][ T5213] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.963564][ T5213] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.972283][ T5213] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.991753][ T5221] veth0_macvtap: entered promiscuous mode [ 65.006588][ T5221] veth1_macvtap: entered promiscuous mode [ 65.025676][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.034146][ T5266] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.049628][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.172462][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.177819][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.196632][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.208677][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.218617][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.229207][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.237726][ T5266] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 65.239063][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.262459][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.264944][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.279465][ T5266] usb 3-1: config 0 descriptor?? [ 65.288564][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.291144][ T5266] cp210x 3-1:0.0: cp210x converter detected [ 65.299638][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.320828][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.370444][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.405693][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.425041][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.435810][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.445842][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.456608][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.466902][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.477382][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.490543][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.587930][ T5316] Zero length message leads to an empty skb [ 65.595272][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.602151][ T5221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.611943][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.613162][ T5221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.637161][ T5221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.651087][ T5221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.747717][ T5302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.770269][ T5302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.832091][ T2540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.860522][ T2540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.331659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.511102][ T5220] Bluetooth: hci3: unknown advertising packet type: 0x23 [ 66.511171][ T5220] Bluetooth: hci3: unknown advertising packet type: 0x56 [ 66.534249][ T5220] Bluetooth: hci3: unknown advertising packet type: 0x8e [ 66.542418][ T5220] Bluetooth: hci3: unknown advertising packet type: 0x1a [ 66.549803][ T5220] Bluetooth: hci3: unknown advertising packet type: 0x12 [ 66.557098][ T5220] Bluetooth: hci3: unknown advertising packet type: 0xfa [ 66.564203][ T5220] Bluetooth: hci3: unknown advertising packet type: 0x66 [ 66.593871][ T5220] Bluetooth: hci0: command tx timeout [ 66.603923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.637291][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.664442][ T5227] Bluetooth: hci4: command tx timeout [ 66.670587][ T5224] Bluetooth: hci1: command tx timeout [ 66.673833][ T5222] Bluetooth: hci2: command tx timeout [ 66.678714][ T5220] Bluetooth: hci3: command tx timeout [ 66.780450][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.824946][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 66.845510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.909548][ T5266] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 66.919052][ T5266] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 66.930076][ T5266] usb 3-1: cp210x converter now attached to ttyUSB0 [ 66.968116][ T5266] usb 3-1: USB disconnect, device number 2 [ 66.979253][ T2550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.982124][ T5266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 67.044213][ T2550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.099249][ T5266] cp210x 3-1:0.0: device disconnected [ 67.266007][ T5336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 67.547244][ T5335] ALSA: mixer_oss: invalid OSS volume '' [ 67.771005][ T1615] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.963447][ T1615] usb 5-1: Using ep0 maxpacket: 16 [ 67.981405][ T1615] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.034885][ T1615] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 68.057191][ T1615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.078595][ T1615] usb 5-1: Product: syz [ 68.096859][ T1615] usb 5-1: Manufacturer: syz [ 68.120317][ T1615] usb 5-1: SerialNumber: syz [ 68.151108][ T1615] usb 5-1: config 0 descriptor?? [ 68.190489][ T1615] imon_raw 5-1:0.0: IR endpoint missing [ 69.458569][ T5216] usb 5-1: USB disconnect, device number 2 [ 69.484492][ T5272] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.506337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.718547][ T5272] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 69.753173][ T5365] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.768078][ T5272] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 69.784673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.813602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.822676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.933239][ T5272] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 69.952709][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 70.128929][ T5368] No such timeout policy "syz0" [ 70.222907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.263843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.325567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.972939][ T5272] usb 3-1: Product: syz [ 70.977693][ T5272] usb 3-1: SerialNumber: syz [ 70.990448][ T5272] option 3-1:7.0: GSM modem (1-port) converter detected [ 71.086874][ T5272] usb 3-1: USB disconnect, device number 3 [ 71.152980][ T5272] option 3-1:7.0: device disconnected [ 71.185284][ T5373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 71.279710][ T5376] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.629571][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.760869][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.506549][ T5272] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.586348][ T5377] kvm: emulating exchange as write [ 72.835481][ T5272] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 72.853489][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.879458][ T5272] usb 5-1: config 0 descriptor?? [ 73.815216][ T5272] ath6kl: Failed to submit usb control message: -71 [ 73.815264][ T5272] ath6kl: unable to send the bmi data to the device: -71 [ 73.815278][ T5272] ath6kl: Unable to send get target info: -71 [ 73.824089][ T5272] ath6kl: Failed to init ath6kl core: -71 [ 73.873120][ T5272] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 73.903896][ T5272] usb 5-1: USB disconnect, device number 3 [ 74.051910][ T29] audit: type=1326 audit(1723162569.752:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5410 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3bd779f9 code=0x7fc00000 [ 74.073063][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.403733][ T5268] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 74.636930][ T5432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.41'. [ 74.735790][ T5268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.275895][ T29] audit: type=1326 audit(1723162570.352:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5410 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f3bd779f9 code=0x7fc00000 [ 75.438980][ T5268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.458997][ T5268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.472136][ T5268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 75.482154][ T5427] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 75.488836][ T5427] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 75.496796][ T5268] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 75.510327][ T5427] vhci_hcd vhci_hcd.0: Device attached [ 75.517757][ T5268] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.528331][ T29] audit: type=1326 audit(1723162571.232:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5434 comm="syz.4.42" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff115b779f9 code=0x0 [ 75.528387][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.590953][ T5427] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 75.600903][ T5268] usb 2-1: SerialNumber: syz [ 75.613474][ T5427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.39'. [ 75.644024][ T5268] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 75.828516][ T940] usb 16-1: SetAddress Request (2) to port 0 [ 76.403571][ T5268] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 76.411651][ T940] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 76.425225][ T5433] vhci_hcd: connection closed [ 76.428108][ T2540] vhci_hcd: stop threads [ 76.508364][ T2540] vhci_hcd: release socket [ 76.515066][ T5268] usb 2-1: USB disconnect, device number 2 [ 76.529834][ T2540] vhci_hcd: disconnect device [ 76.577227][ T5446] capability: warning: `syz.0.44' uses deprecated v2 capabilities in a way that may be insecure [ 76.623920][ T29] audit: type=1400 audit(1723162572.322:5): lsm=SMACK fn=smack_file_ioctl action=denied subject="I" object="_" requested=w pid=5444 comm="syz.0.44" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8218 [ 76.764500][ T25] cfg80211: failed to load regulatory.db [ 78.389340][ T5471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 78.398314][ T5471] netlink: 52 bytes leftover after parsing attributes in process `syz.0.52'. [ 78.407225][ T5471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.52'. [ 78.417573][ T5471] vlan0: entered allmulticast mode [ 78.422752][ T5471] veth0_vlan: entered allmulticast mode [ 79.332006][ T29] audit: type=1326 audit(1723162575.032:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5476 comm="syz.0.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f3bd779f9 code=0x0 [ 82.246780][ T940] usb 16-1: device descriptor read/8, error -110 [ 82.669008][ T5498] loop0: detected capacity change from 0 to 1 [ 82.707846][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.711388][ T940] usb usb16-port1: attempt power cycle [ 82.718314][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.789536][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.799941][ T5501] bond0: entered promiscuous mode [ 82.816645][ T5501] bond_slave_0: entered promiscuous mode [ 82.826797][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.838241][ T5501] bond_slave_1: entered promiscuous mode [ 82.844521][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.853598][ T5501] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 82.860972][ T5214] ldm_validate_partition_table(): Disk read failed. [ 82.872236][ T5501] bond0: left promiscuous mode [ 82.872577][ T5508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.879710][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.897929][ T5501] bond_slave_0: left promiscuous mode [ 82.903929][ T5501] bond_slave_1: left promiscuous mode [ 82.910008][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.936888][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.946221][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.961607][ T5214] Dev loop0: unable to read RDB block 0 [ 82.968530][ T5214] Buffer I/O error on dev loop0, logical block 0, async page read [ 82.977152][ T5214] loop0: unable to read partition table [ 82.983895][ T5214] loop0: partition table beyond EOD, truncated [ 83.004247][ T5498] ldm_validate_partition_table(): Disk read failed. [ 83.034522][ T5498] Dev loop0: unable to read RDB block 0 [ 83.040288][ T5498] loop0: unable to read partition table [ 83.041573][ T5505] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 83.083652][ T5498] loop0: partition table beyond EOD, truncated [ 83.089900][ T5498] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡp [ 83.089900][ T5498] ) failed (rc=-5) [ 83.284957][ T5512] mmap: syz.1.67 (5512) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.302245][ T5505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.414783][ T940] usb usb16-port1: unable to enumerate USB device [ 85.207835][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.353476][ T5272] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.400804][ T5553] kvm: pic: non byte write [ 85.413430][ T5216] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.430997][ T5553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4102857745 (32822861960 ns) > initial count (10843324416 ns). Using initial count to start timer. [ 85.449047][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 85.466211][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 85.482698][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.507080][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.533420][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.543645][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 85.549126][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.565490][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.578596][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.606321][ T5216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.622958][ T5272] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.631391][ T5216] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.643728][ T5216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.652691][ T5272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.663245][ T5272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.675765][ T5216] usb 4-1: config 0 descriptor?? [ 85.680821][ T5272] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.703004][ T5272] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.712563][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.721576][ T5272] usb 2-1: Product: syz [ 85.728196][ T5272] usb 2-1: Manufacturer: syz [ 85.732998][ T5272] usb 2-1: SerialNumber: syz [ 85.962277][ T5272] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 85.971893][ T5272] cdc_ncm 2-1:1.0: bind() failure [ 85.998110][ T5272] usb 2-1: USB disconnect, device number 3 [ 86.120840][ T5216] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 86.146599][ T25] usb 1-1: USB disconnect, device number 2 [ 86.162001][ T5216] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input6 [ 86.209702][ T5559] ALSA: seq fatal error: cannot create timer (-22) [ 86.392206][ T5216] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 87.396212][ T5574] netlink: 'syz.4.88': attribute type 16 has an invalid length. [ 87.594789][ T5574] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.560886][ T5268] usb 4-1: USB disconnect, device number 2 [ 88.832758][ T5590] netlink: 56 bytes leftover after parsing attributes in process `syz.2.91'. [ 88.972309][ T29] audit: type=1326 audit(1723162584.672:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5597 comm="syz.4.94" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff115b779f9 code=0x0 [ 89.053863][ T29] audit: type=1326 audit(1723162584.702:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5597 comm="syz.4.94" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff115b779f9 code=0x0 [ 89.603510][ T5268] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.806056][ T5268] usb 4-1: Using ep0 maxpacket: 32 [ 89.831455][ T5268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 89.862205][ T5268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 89.875117][ T5268] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 89.896995][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.946186][ T5268] usb 4-1: config 0 descriptor?? [ 89.951880][ T5609] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.995825][ T5268] hub 4-1:0.0: USB hub found [ 90.345364][ T5268] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 90.369896][ T5622] evm: overlay not supported [ 90.739012][ T5609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.95'. [ 91.254186][ T5268] usbhid 4-1:0.0: can't add hid device: -71 [ 91.260222][ T5268] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 91.328940][ T5268] usb 4-1: USB disconnect, device number 3 [ 91.529603][ T5635] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 91.696696][ T5633] can0: slcan on ptm0. [ 92.903616][ T5628] can0 (unregistered): slcan off ptm0. [ 92.929579][ T5652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.113029][ T5658] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 93.145185][ T5220] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 93.216174][ T5658] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.109'. [ 93.257521][ T5665] Cannot find add_set index 0 as target [ 94.203100][ T5678] misc userio: Can't change port type on an already running userio instance [ 95.223949][ T5220] Bluetooth: hci1: command tx timeout [ 95.770716][ T5676] sched: RT throttling activated [ 99.504497][ T5694] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.175386][ T5272] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.213943][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 101.262174][ T5272] usb 2-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=2e.fd [ 101.298342][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.408760][ T5272] usb 2-1: config 0 descriptor?? [ 101.463230][ T5272] vmk80xx 2-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 101.949508][ T5733] netlink: 104 bytes leftover after parsing attributes in process `syz.1.118'. [ 102.491356][ T5752] syz.4.126 uses obsolete (PF_INET,SOCK_PACKET) [ 102.980559][ T29] audit: type=1326 audit(1723162598.682:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5754 comm="syz.2.133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc14f779f9 code=0x0 [ 103.057460][ T5268] usb 2-1: USB disconnect, device number 4 [ 105.297587][ T5793] tipc: Started in network mode [ 105.316284][ T5793] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.342216][ T5793] tipc: Enabled bearer , priority 10 [ 105.641916][ T5795] tipc: Disabling bearer [ 106.172936][ T5806] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262161 (only 8 groups) [ 106.640042][ T5818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.153'. [ 106.649701][ T5818] netlink: 52 bytes leftover after parsing attributes in process `syz.3.153'. [ 106.673465][ T5818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'. [ 106.693641][ T5818] vlan0: entered allmulticast mode [ 106.698962][ T5818] veth0_vlan: entered allmulticast mode [ 107.103109][ T5825] input: syz0 as /devices/virtual/input/input8 [ 107.248287][ T5222] Bluetooth: hci4: command 0x0405 tx timeout [ 108.727635][ T5845] ======================================================= [ 108.727635][ T5845] WARNING: The mand mount option has been deprecated and [ 108.727635][ T5845] and is ignored by this kernel. Remove the mand [ 108.727635][ T5845] option from the mount to silence this warning. [ 108.727635][ T5845] ======================================================= [ 108.762470][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.788677][ T5845] devtmpfs: Bad value for 'mpol' [ 112.857395][ T5266] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.001661][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.023495][ T5266] usb 3-1: device descriptor read/64, error -71 [ 113.040976][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 113.065294][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 113.082979][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 113.341086][ T1615] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.413585][ T5266] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.835855][ T1615] usb 2-1: Using ep0 maxpacket: 8 [ 113.911943][ T1615] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 113.964171][ T5896] syz.3.180 (5896) used greatest stack depth: 19056 bytes left [ 113.971970][ T5266] usb 3-1: device descriptor read/64, error -71 [ 113.980272][ T1615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.003384][ T1615] usb 2-1: config 0 descriptor?? [ 114.011539][ T1615] ums-alauda 2-1:0.0: USB Mass Storage device detected [ 114.093783][ T5266] usb usb3-port1: attempt power cycle [ 114.277710][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.312589][ T1615] usb 2-1: USB disconnect, device number 5 [ 114.353930][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.547450][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 114.571686][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.592127][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.601993][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 42369, setting to 1024 [ 114.613243][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.131086][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 115.175119][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.210289][ T25] usb 1-1: Product: syz [ 115.236624][ T25] usb 1-1: Manufacturer: syz [ 115.244864][ T25] usb 1-1: SerialNumber: syz [ 115.255982][ T25] usb 1-1: config 0 descriptor?? [ 115.276314][ T25] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 115.292995][ T2537] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.310140][ T25] gspca_stv06xx: st6422 sensor detected [ 115.440889][ T2537] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.575878][ T2537] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.583917][ T25] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 115.608067][ T25] usb 1-1: USB disconnect, device number 3 [ 115.638123][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.194'. [ 115.796593][ T2537] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.829392][ T5940] capability: warning: `syz.2.198' uses 32-bit capabilities (legacy support in use) [ 115.839917][ T5936] xt_SECMARK: unable to map security context 'unconfined' [ 116.046393][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.055922][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.064782][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.073505][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.081497][ T5222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.089089][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.164208][ T2537] bridge_slave_1: left allmulticast mode [ 116.193621][ T2537] bridge_slave_1: left promiscuous mode [ 116.200982][ T2537] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.372667][ T2537] bridge_slave_0: left allmulticast mode [ 116.393547][ T2537] bridge_slave_0: left promiscuous mode [ 116.410932][ T2537] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.004818][ T29] audit: type=1326 audit(1723162612.702:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.053039][ T29] audit: type=1326 audit(1723162612.702:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.183468][ T29] audit: type=1326 audit(1723162612.882:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.222639][ T29] audit: type=1326 audit(1723162612.882:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.302230][ T29] audit: type=1326 audit(1723162612.882:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.375985][ T29] audit: type=1326 audit(1723162612.882:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.447160][ T29] audit: type=1326 audit(1723162612.882:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.522172][ T29] audit: type=1326 audit(1723162612.882:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.555005][ T29] audit: type=1326 audit(1723162612.882:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.577163][ T29] audit: type=1326 audit(1723162612.882:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc14f779f9 code=0x7fc00000 [ 117.599896][ T1615] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.086898][ T2537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.101477][ T2537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.110336][ T5222] Bluetooth: hci0: command tx timeout [ 118.121956][ T2537] bond0 (unregistering): Released all slaves [ 118.173683][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 118.273936][ T1615] usb 2-1: Using ep0 maxpacket: 8 [ 118.283043][ T1615] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 118.294895][ T1615] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 118.303043][ T1615] usb 2-1: Product: syz [ 118.309529][ T1615] usb 2-1: Manufacturer: syz [ 118.316154][ T1615] usb 2-1: SerialNumber: syz [ 118.324340][ T1615] usb 2-1: config 0 descriptor?? [ 118.332356][ T1615] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 119.303833][ T5977] x_tables: duplicate underflow at hook 1 [ 119.800811][ T1615] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 120.204053][ T5220] Bluetooth: hci0: command tx timeout [ 120.232586][ T1615] usb 2-1: USB disconnect, device number 6 [ 121.396160][ T6003] 9p: Unknown access argument 18446744073709551615: -34 [ 121.754030][ T2537] hsr_slave_0: left promiscuous mode [ 121.806823][ T2537] hsr_slave_1: left promiscuous mode [ 121.812750][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.827900][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.843623][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.861787][ T6014] Process accounting resumed [ 121.866767][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.918055][ T2537] veth1_macvtap: left promiscuous mode [ 121.938145][ T2537] veth0_macvtap: left promiscuous mode [ 121.963008][ T2537] veth1_vlan: left promiscuous mode [ 121.978890][ T2537] veth0_vlan: left allmulticast mode [ 121.988222][ T2537] veth0_vlan: left promiscuous mode [ 122.264048][ T5220] Bluetooth: hci0: command tx timeout [ 122.507815][ T2537] team0 (unregistering): Port device team_slave_1 removed [ 122.564667][ T2537] team0 (unregistering): Port device team_slave_0 removed [ 122.964740][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 123.329805][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.345405][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.352679][ T5943] bridge_slave_0: entered allmulticast mode [ 123.373266][ T5943] bridge_slave_0: entered promiscuous mode [ 123.404026][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.412593][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.438832][ T5943] bridge_slave_1: entered allmulticast mode [ 123.455248][ T5943] bridge_slave_1: entered promiscuous mode [ 123.556990][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.582275][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.705688][ T1615] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.736598][ T5943] team0: Port device team_slave_0 added [ 123.762458][ T5943] team0: Port device team_slave_1 added [ 123.840185][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.873498][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.918748][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.934504][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.941528][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.967757][ T1615] usb 2-1: Using ep0 maxpacket: 8 [ 123.969549][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.974675][ T1615] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 124.012696][ T1615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 116, changing to 10 [ 124.028431][ T1615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 24948, setting to 1024 [ 124.061954][ T1615] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 124.079196][ T1615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.102295][ T1615] usb 2-1: config 0 descriptor?? [ 124.122061][ T1615] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 124.140361][ T1615] usb 2-1: Detected SIO [ 124.148940][ T1615] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 124.204991][ T5943] hsr_slave_0: entered promiscuous mode [ 124.212473][ T5943] hsr_slave_1: entered promiscuous mode [ 124.343786][ T5220] Bluetooth: hci0: command tx timeout [ 125.019277][ T6078] usb usb9: check_ctrlrecip: process 6078 (syz.4.227) requesting ep 01 but needs 81 [ 125.052815][ T6078] usb usb9: usbfs: process 6078 (syz.4.227) did not claim interface 0 before use [ 125.080970][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.227'. [ 125.283678][ T5266] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.453528][ T5271] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.503443][ T5266] usb 3-1: Using ep0 maxpacket: 16 [ 125.529681][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.590019][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.665495][ T5271] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.696651][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.725581][ T5271] usb 5-1: language id specifier not provided by device, defaulting to English [ 125.754651][ T5271] usb 5-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 125.783083][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.799455][ T5266] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.819548][ T5271] usb 5-1: Product: syz [ 125.832319][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.840162][ T5271] usb 5-1: SerialNumber: syz [ 125.861760][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.900457][ T5266] usb 3-1: config 0 descriptor?? [ 125.910300][ T5271] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 125.922321][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.997132][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.029689][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.306048][ T5216] usb 5-1: USB disconnect, device number 4 [ 126.346850][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.399156][ T5266] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 126.410161][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.434079][ T5266] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input12 [ 126.479577][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.487090][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.539215][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.539937][ T5270] usb 2-1: USB disconnect, device number 7 [ 126.546415][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.578177][ T5266] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 126.673395][ T5266] usb 3-1: USB disconnect, device number 7 [ 126.694044][ T5270] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 126.782486][ T5270] ftdi_sio 2-1:0.0: device disconnected [ 127.913042][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.231'. [ 128.292948][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.453209][ T5943] veth0_vlan: entered promiscuous mode [ 128.532493][ T5943] veth1_vlan: entered promiscuous mode [ 128.726747][ T5943] veth0_macvtap: entered promiscuous mode [ 128.771876][ T5943] veth1_macvtap: entered promiscuous mode [ 128.807274][ T6140] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 128.837654][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.849369][ T6140] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.241'. [ 128.888317][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.907399][ T6140] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 128.926818][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.962008][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'. [ 128.964286][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.156371][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.169991][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.203565][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.794180][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.861303][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.949185][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.993558][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.011862][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.033922][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.063907][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.120963][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.131564][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.148851][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.170995][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.299936][ T5943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.351238][ T5943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.372892][ T6083] syz.0.228 (6083): drop_caches: 1 [ 131.389908][ T5943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.446675][ T5943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.617100][ T5220] Bluetooth: unknown link type 72 [ 131.622631][ T5220] Bluetooth: hci4: connection err: -111 [ 131.653434][ T5216] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.735536][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.757617][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.856646][ T6175] ptrace attach of "./syz-executor exec"[5228] was attempted by "./syz-executor exec"[6175] [ 131.863929][ T5216] usb 3-1: Using ep0 maxpacket: 16 [ 131.886607][ T5216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.910220][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 131.913580][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.923363][ T5216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.980321][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.988057][ T5216] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.041841][ T5216] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 132.075293][ T5216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.095951][ T5216] usb 3-1: config 0 descriptor?? [ 132.521204][ T5216] wacom 0003:056A:0022.0003: unknown main item tag 0x0 [ 132.667661][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'. [ 133.172016][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.177070][ T5216] wacom 0003:056A:0022.0003: unbalanced collection at end of report description [ 133.178354][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.188092][ T5216] wacom 0003:056A:0022.0003: parse failed [ 133.214054][ T5216] wacom 0003:056A:0022.0003: probe with driver wacom failed with error -22 [ 133.227663][ T5216] usb 3-1: USB disconnect, device number 8 [ 133.696306][ T1096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.115986][ T1096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.273292][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 241.280339][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6229/1:b..l [ 241.288982][ C0] rcu: (detected by 0, t=10505 jiffies, g=12473, q=465 ncpus=2) [ 241.296699][ C0] task:rm state:R running task stack:23680 pid:6229 tgid:6229 ppid:6192 flags:0x00000002 [ 241.309257][ C0] Call Trace: [ 241.312544][ C0] [ 241.315480][ C0] __schedule+0x17ae/0x4a10 [ 241.320014][ C0] ? mark_lock+0x9a/0x350 [ 241.324358][ C0] ? __lock_acquire+0x137a/0x2040 [ 241.329401][ C0] ? __pfx___schedule+0x10/0x10 [ 241.334280][ C0] ? preempt_schedule+0xe1/0xf0 [ 241.339135][ C0] preempt_schedule_common+0x84/0xd0 [ 241.344428][ C0] preempt_schedule+0xe1/0xf0 [ 241.349110][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 241.354499][ C0] preempt_schedule_thunk+0x1a/0x30 [ 241.359712][ C0] _raw_spin_unlock+0x3e/0x50 [ 241.364392][ C0] unmap_page_range+0x3818/0x42c0 [ 241.369458][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 241.374853][ C0] ? mas_next_slot+0xeab/0xf90 [ 241.379634][ C0] ? uprobe_munmap+0x183/0x460 [ 241.384409][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 241.389449][ C0] unmap_vmas+0x3cc/0x5f0 [ 241.393795][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 241.398671][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 241.404230][ C0] exit_mmap+0x264/0xc80 [ 241.408487][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 241.413258][ C0] ? __asan_memset+0x23/0x50 [ 241.417878][ C0] ? uprobe_clear_state+0x277/0x290 [ 241.423079][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 241.428377][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 241.433584][ C0] __mmput+0x115/0x380 [ 241.437661][ C0] exit_mm+0x220/0x310 [ 241.441735][ C0] ? __pfx_exit_mm+0x10/0x10 [ 241.446326][ C0] ? taskstats_exit+0x326/0xa60 [ 241.451275][ C0] do_exit+0x9b2/0x27f0 [ 241.455445][ C0] ? __pfx_do_exit+0x10/0x10 [ 241.460034][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 241.466029][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 241.472373][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.477576][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 241.482785][ C0] do_group_exit+0x207/0x2c0 [ 241.487385][ C0] __x64_sys_exit_group+0x3f/0x40 [ 241.492410][ C0] x64_sys_call+0x2634/0x2640 [ 241.497097][ C0] do_syscall_64+0xf3/0x230 [ 241.501614][ C0] ? clear_bhb_loop+0x35/0x90 [ 241.506302][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.512214][ C0] RIP: 0033:0x7f4e6ce48a90 [ 241.516636][ C0] RSP: 002b:00007ffd134773c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 241.525058][ C0] RAX: ffffffffffffffda RBX: 00007f4e6cf39860 RCX: 00007f4e6ce48a90 [ 241.533030][ C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 241.541003][ C0] RBP: 00007f4e6cf39860 R08: 00007ffd13477240 R09: 00007ffd13477320 [ 241.548975][ C0] R10: 00007ffd13477280 R11: 0000000000000246 R12: 0000000000000000 [ 241.556947][ C0] R13: 0000000000000000 R14: 00007f4e6cf3d658 R15: 0000000000000001 [ 241.564935][ C0] [ 241.567960][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10484 jiffies! g12473 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 241.580283][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=8665 [ 241.588078][ C0] rcu: rcu_preempt kthread starved for 10485 jiffies! g12473 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 241.599443][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 241.609409][ C0] rcu: RCU grace-period kthread stack dump: [ 241.615296][ C0] task:rcu_preempt state:I stack:25816 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 241.625469][ C0] Call Trace: [ 241.628749][ C0] [ 241.631687][ C0] __schedule+0x17ae/0x4a10 [ 241.636223][ C0] ? __pfx___schedule+0x10/0x10 [ 241.641176][ C0] ? __pfx_lock_release+0x10/0x10 [ 241.646206][ C0] ? __asan_memset+0x23/0x50 [ 241.650804][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 241.656617][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 241.662955][ C0] ? schedule+0x90/0x320 [ 241.667205][ C0] schedule+0x14b/0x320 [ 241.671366][ C0] schedule_timeout+0x1be/0x310 [ 241.676221][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 241.681598][ C0] ? __pfx_process_timeout+0x10/0x10 [ 241.686897][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 241.692453][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 241.697312][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 241.702522][ C0] ? rcu_gp_init+0x1256/0x1630 [ 241.707297][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 241.712237][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 241.718311][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 241.723596][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 241.729506][ C0] ? finish_swait+0xd4/0x1e0 [ 241.734106][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 241.738703][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 241.743906][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 241.749808][ C0] ? __kthread_parkme+0x169/0x1d0 [ 241.754843][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 241.760047][ C0] kthread+0x2f0/0x390 [ 241.764121][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 241.769324][ C0] ? __pfx_kthread+0x10/0x10 [ 241.773922][ C0] ret_from_fork+0x4b/0x80 [ 241.778345][ C0] ? __pfx_kthread+0x10/0x10 [ 241.782941][ C0] ret_from_fork_asm+0x1a/0x30 [ 241.787725][ C0] [ 241.790743][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 241.797061][ C0] Sending NMI from CPU 0 to CPUs 1: [ 241.802285][ C1] NMI backtrace for cpu 1 [ 241.802306][ C1] CPU: 1 UID: 0 PID: 6233 Comm: syz.4.261 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 241.802323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 241.802331][ C1] RIP: 0010:__hrtimer_run_queues+0x696/0xd50 [ 241.802350][ C1] Code: 70 8d 36 0a 31 ff 44 89 ee e8 b6 b9 12 00 45 85 ed 74 4e 49 bd 00 00 00 00 00 fc ff df 48 8b 84 24 b8 00 00 00 42 0f b6 04 28 <84> c0 48 8b 54 24 30 0f 85 73 02 00 00 0f b6 1a 89 de 83 e6 01 31 [ 241.802365][ C1] RSP: 0018:ffffc90000a18d60 EFLAGS: 00000002 [ 241.802378][ C1] RAX: 0000000000000000 RBX: ffff8880b932c9c8 RCX: 0000000000000001 [ 241.802389][ C1] RDX: ffff88802b2b5a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 241.802398][ C1] RBP: ffffc90000a18ea8 R08: ffffffff8180c0da R09: fffff52000143188 [ 241.802409][ C1] R10: dffffc0000000000 R11: fffff52000143188 R12: 1ffff1101726593b [ 241.802420][ C1] R13: dffffc0000000000 R14: ffff88807ceb1340 R15: ffff8880b932c880 [ 241.802431][ C1] FS: 00007ff1168d36c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 241.802444][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.802455][ C1] CR2: 0000000020025000 CR3: 000000007de26000 CR4: 00000000003526f0 [ 241.802467][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.802476][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.802486][ C1] Call Trace: [ 241.802492][ C1] [ 241.802499][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 241.802535][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 241.802580][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 241.802616][ C1] ? nmi_handle+0x2a/0x5a0 [ 241.802666][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 241.802704][ C1] ? nmi_handle+0x14f/0x5a0 [ 241.802735][ C1] ? nmi_handle+0x2a/0x5a0 [ 241.802769][ C1] ? __hrtimer_run_queues+0x696/0xd50 [ 241.802803][ C1] ? default_do_nmi+0x63/0x160 [ 241.802840][ C1] ? exc_nmi+0x123/0x1f0 [ 241.802869][ C1] ? end_repeat_nmi+0xf/0x53 [ 241.802887][ C1] ? __hrtimer_run_queues+0x67a/0xd50 [ 241.802903][ C1] ? __hrtimer_run_queues+0x696/0xd50 [ 241.802919][ C1] ? __hrtimer_run_queues+0x696/0xd50 [ 241.802936][ C1] ? __hrtimer_run_queues+0x696/0xd50 [ 241.802951][ C1] [ 241.802956][ C1] [ 241.802961][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 241.802989][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 241.803004][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 241.803026][ C1] hrtimer_interrupt+0x396/0x990 [ 241.803054][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 241.803076][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 241.803107][ C1] [ 241.803112][ C1] [ 241.803118][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.803134][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 241.803149][ C1] Code: c9 50 e8 d9 b6 0b 00 48 83 c4 08 4c 89 f7 e8 7d 38 00 00 e9 de 04 00 00 4c 89 f7 e8 00 4c 53 0a e8 fb d6 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 241.803160][ C1] RSP: 0018:ffffc90004457568 EFLAGS: 00000286 [ 241.803172][ C1] RAX: 461fdb392b598300 RBX: ffff88802b2b5a00 RCX: ffffffff94ce6903 [ 241.803183][ C1] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: ffffffff8c3f8b40 [ 241.803194][ C1] RBP: ffffc900044575b0 R08: ffffffff8ff699ef R09: 1ffffffff1fed33d [ 241.803205][ C1] R10: dffffc0000000000 R11: fffffbfff1fed33e R12: 1ffff11017267eeb [ 241.803216][ C1] R13: dffffc0000000000 R14: ffff8880b923e9c0 R15: ffff8880b933f758 [ 241.803237][ C1] ? finish_task_switch+0x1e5/0x870 [ 241.803259][ C1] __schedule+0x17b6/0x4a10 [ 241.803288][ C1] ? __pfx___schedule+0x10/0x10 [ 241.803307][ C1] ? __pfx_lock_release+0x10/0x10 [ 241.803333][ C1] ? schedule+0x90/0x320 [ 241.803348][ C1] schedule+0x14b/0x320 [ 241.803366][ C1] schedule_timeout+0xb0/0x310 [ 241.803382][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 241.803396][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 241.803419][ C1] ? wait_for_completion+0x2fe/0x620 [ 241.803437][ C1] ? wait_for_completion+0x2fe/0x620 [ 241.803453][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.803469][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 241.803486][ C1] ? wait_for_completion+0x2fe/0x620 [ 241.803504][ C1] wait_for_completion+0x355/0x620 [ 241.803522][ C1] ? __smp_call_single_queue+0x11a/0x3a0 [ 241.803544][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 241.803566][ C1] ? smp_call_function_single_async+0xb4/0x110 [ 241.803583][ C1] rdmsr_safe_on_cpu+0x16c/0x310 [ 241.803605][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 241.803624][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 241.803643][ C1] ? __might_fault+0xaa/0x120 [ 241.803666][ C1] ? __might_fault+0xc6/0x120 [ 241.803685][ C1] msr_read+0x160/0x260 [ 241.803701][ C1] ? __pfx_msr_read+0x10/0x10 [ 241.803715][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 241.803736][ C1] ? rw_verify_area+0x52a/0x6b0 [ 241.803755][ C1] ? __pfx_msr_read+0x10/0x10 [ 241.803770][ C1] vfs_read+0x204/0xbc0 [ 241.803783][ C1] ? __pfx_lock_release+0x10/0x10 [ 241.803804][ C1] ? __pfx_vfs_read+0x10/0x10 [ 241.803816][ C1] ? do_futex+0x33b/0x560 [ 241.803834][ C1] ? __fget_files+0x29/0x470 [ 241.803851][ C1] ? __fget_files+0x3f6/0x470 [ 241.803865][ C1] ? __fget_files+0x29/0x470 [ 241.803887][ C1] ksys_read+0x1a0/0x2c0 [ 241.803904][ C1] ? __pfx_ksys_read+0x10/0x10 [ 241.803918][ C1] ? do_syscall_64+0x100/0x230 [ 241.803939][ C1] ? do_syscall_64+0xb6/0x230 [ 241.803958][ C1] do_syscall_64+0xf3/0x230 [ 241.803977][ C1] ? clear_bhb_loop+0x35/0x90 [ 241.803993][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.804013][ C1] RIP: 0033:0x7ff115b779f9 [ 241.804026][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.804037][ C1] RSP: 002b:00007ff1168d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.804051][ C1] RAX: ffffffffffffffda RBX: 00007ff115d05f80 RCX: 00007ff115b779f9 [ 241.804062][ C1] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 241.804071][ C1] RBP: 00007ff115be58ee R08: 0000000000000000 R09: 0000000000000000 [ 241.804081][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.804090][ C1] R13: 0000000000000000 R14: 00007ff115d05f80 R15: 00007fffe0cb5948 [ 241.804109][ C1]